amrkhaled.ahlamontada.net/t270-topic
301 Moved Permanently 0 B URL HTTP/1.1 amrkhaled.ahlamontada.net/t270-topic
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t270-topic HTTP/1.1
Host: amrkhaled.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Dec 2022 09:50:31 GMT
Content-Length: 0
Location: https://amrkhaled.ahlamontada.net/t270-topic
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10097
Expires: Wed, 07 Dec 2022 12:38:48 GMT
Date: Wed, 07 Dec 2022 09:50:31 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4111
Cache-Control: max-age=92958
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:31 GMT
Etag: "638f19f6-1d7"
Expires: Thu, 08 Dec 2022 11:39:49 GMT
Last-Modified: Tue, 06 Dec 2022 10:31:18 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 09:20:28 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1803
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5752
Expires: Wed, 07 Dec 2022 11:26:23 GMT
Date: Wed, 07 Dec 2022 09:50:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DzcG4HpIgPPR9Xz2+quVwPHmspZ0R1Jupyk+A84eETj8BkGM2KSxKJPGDcWriXyxEzfn7O6smhE=
x-amz-request-id: HXDFFJZNW18BCZ0N
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 09:49:19 GMT
age: 72
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:31 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d82f3d1b63544fbf08f2da155a5de8a0
682170211bf357fe83bd91b9e3a3ec99666a17b1
e04e5e8be5d30976fc6a95870182b44a844111b5301a8bdea29cb4cb364a26e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E04E5E8BE5D30976FC6A95870182B44A844111B5301A8BDEA29CB4CB364A26E3"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5359
Expires: Wed, 07 Dec 2022 11:19:50 GMT
Date: Wed, 07 Dec 2022 09:50:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 09:11:20 GMT
cache-control: public,max-age=3600
age: 2351
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30aec170d58f580f2ed4da4b92d72cc7
3b11a98ba9563f7f266e7a935e3b78bd0c0712aa
7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30aec170d58f580f2ed4da4b92d72cc7
3b11a98ba9563f7f266e7a935e3b78bd0c0712aa
7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 18:40:06 GMT
expires: Wed, 06 Dec 2023 18:40:06 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 54626
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4088
Cache-Control: max-age=87866
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:14:58 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtag/js?id=UA-47873483-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-47873483-1
IP
File type ASCII text, with very long lines (1921)
Hash e4b869836cd90984001a9de597f31984
2600bb195360e45cda739081972b02746db71201
a17e4e9d0141871f23efe35de7aab8b8da19de41c8bb76e9d3d729f9f0a4625b
GET /gtag/js?id=UA-47873483-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 09:50:32 GMT
expires: Wed, 07 Dec 2022 09:50:32 GMT
cache-control: private, max-age=900
last-modified: Wed, 07 Dec 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43595
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-144347007-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144347007-1
IP
File type ASCII text, with very long lines (1921)
Hash 1ca74c0f9fccfdb3cc9b66928c25da72
26ad611a5b59aa880eb7cc92abc54cdee62bb6cf
b59dd55088d3bf9b80884987d106a846430890bd66c954784a32b3aaa58d5bed
GET /gtag/js?id=UA-144347007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 09:50:32 GMT
expires: Wed, 07 Dec 2022 09:50:32 GMT
cache-control: private, max-age=900
last-modified: Wed, 07 Dec 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43631
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 3a488fc3dcdaafb273e7c74bca56bb53
e04c3fa14a45cb81a4fa39085ae8504b63f31589
afa21e0ef1b2ca8bc6b71a0215fe0a27b9e6a4bed9e90031c8b90d434153ca7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3814
Cache-Control: max-age=132945
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638fb753-139"
Expires: Thu, 08 Dec 2022 22:46:17 GMT
Last-Modified: Tue, 06 Dec 2022 21:42:43 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30aec170d58f580f2ed4da4b92d72cc7
3b11a98ba9563f7f266e7a935e3b78bd0c0712aa
7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash a4bdaa48eaabd53c92b522d9fa3e7682
a0bad1ba1550c1b32dea04344f6cb69483b1c41c
1ecdaffa454649cdf5fc1bec0074bd05530c13d3e756de0397dad59e48f3e51b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 509
Cache-Control: max-age=158105
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "63902684-117"
Expires: Fri, 09 Dec 2022 05:45:37 GMT
Last-Modified: Wed, 07 Dec 2022 05:37:08 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash a4bdaa48eaabd53c92b522d9fa3e7682
a0bad1ba1550c1b32dea04344f6cb69483b1c41c
1ecdaffa454649cdf5fc1bec0074bd05530c13d3e756de0397dad59e48f3e51b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 509
Cache-Control: max-age=158105
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "63902684-117"
Expires: Fri, 09 Dec 2022 05:45:37 GMT
Last-Modified: Wed, 07 Dec 2022 05:37:08 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash a4bdaa48eaabd53c92b522d9fa3e7682
a0bad1ba1550c1b32dea04344f6cb69483b1c41c
1ecdaffa454649cdf5fc1bec0074bd05530c13d3e756de0397dad59e48f3e51b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5977
Cache-Control: max-age=163573
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "63902684-117"
Expires: Fri, 09 Dec 2022 07:16:45 GMT
Last-Modified: Wed, 07 Dec 2022 05:37:08 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash a4bdaa48eaabd53c92b522d9fa3e7682
a0bad1ba1550c1b32dea04344f6cb69483b1c41c
1ecdaffa454649cdf5fc1bec0074bd05530c13d3e756de0397dad59e48f3e51b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3968
Cache-Control: max-age=161564
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "63902684-117"
Expires: Fri, 09 Dec 2022 06:43:16 GMT
Last-Modified: Wed, 07 Dec 2022 05:37:08 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash a4bdaa48eaabd53c92b522d9fa3e7682
a0bad1ba1550c1b32dea04344f6cb69483b1c41c
1ecdaffa454649cdf5fc1bec0074bd05530c13d3e756de0397dad59e48f3e51b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 509
Cache-Control: max-age=158105
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "63902684-117"
Expires: Fri, 09 Dec 2022 05:45:37 GMT
Last-Modified: Wed, 07 Dec 2022 05:37:08 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
amrkhaled.ahlamontada.net/0-rtl.css
200 OK 55 kB URL HTTP/2 amrkhaled.ahlamontada.net/0-rtl.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 05426da2bf824946e913c9a364c3fd9c
defc898d77f261f99bb6c66864dd48fbd27dac79
0119fca6f662fc1d8a2c23e2c5b03ad7ecde879e30da772b99cda6c7dce5b917
GET /0-rtl.css HTTP/1.1
Host: amrkhaled.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/t270-topic
Cookie: exadd=167042
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: text/css
content-length: 55287
last-modified: Wed, 07 Dec 2022 00:00:00 GMT
content-security-policy: upgrade-insecure-requests
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-ma: MISS
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a4bdaa48eaabd53c92b522d9fa3e7682
a0bad1ba1550c1b32dea04344f6cb69483b1c41c
1ecdaffa454649cdf5fc1bec0074bd05530c13d3e756de0397dad59e48f3e51b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 509
Cache-Control: max-age=158105
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "63902684-117"
Expires: Fri, 09 Dec 2022 05:45:37 GMT
Last-Modified: Wed, 07 Dec 2022 05:37:08 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 6b874cd43d686ab515ab6c0706375c6c
3011156bc0a836bd990cd7707efd83dea59211fa
3cb32762de89fc43af83f2f716f4e24a30277310d0deb84b595a861a4aeb3d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1201
Cache-Control: max-age=131813
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638fbd1c-117"
Expires: Thu, 08 Dec 2022 22:27:25 GMT
Last-Modified: Tue, 06 Dec 2022 22:07:24 GMT
Server: ECS (amb/6B7F)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XfslbteMoNjPe68es/IQmw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Xz4QxA55Iyn1EOstFLYIHguFnjE=
ocsp.digicert.com/
200 OK 279 B IP
Hash 6b874cd43d686ab515ab6c0706375c6c
3011156bc0a836bd990cd7707efd83dea59211fa
3cb32762de89fc43af83f2f716f4e24a30277310d0deb84b595a861a4aeb3d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2893
Cache-Control: max-age=133505
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638fbd1c-117"
Expires: Thu, 08 Dec 2022 22:55:37 GMT
Last-Modified: Tue, 06 Dec 2022 22:07:24 GMT
Server: ECS (amb/6BB5)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 6b874cd43d686ab515ab6c0706375c6c
3011156bc0a836bd990cd7707efd83dea59211fa
3cb32762de89fc43af83f2f716f4e24a30277310d0deb84b595a861a4aeb3d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=130612
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638fbd1c-117"
Expires: Thu, 08 Dec 2022 22:07:24 GMT
Last-Modified: Tue, 06 Dec 2022 22:07:24 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 6b874cd43d686ab515ab6c0706375c6c
3011156bc0a836bd990cd7707efd83dea59211fa
3cb32762de89fc43af83f2f716f4e24a30277310d0deb84b595a861a4aeb3d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1201
Cache-Control: max-age=131813
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638fbd1c-117"
Expires: Thu, 08 Dec 2022 22:27:25 GMT
Last-Modified: Tue, 06 Dec 2022 22:07:24 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 6b874cd43d686ab515ab6c0706375c6c
3011156bc0a836bd990cd7707efd83dea59211fa
3cb32762de89fc43af83f2f716f4e24a30277310d0deb84b595a861a4aeb3d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1201
Cache-Control: max-age=131813
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638fbd1c-117"
Expires: Thu, 08 Dec 2022 22:27:25 GMT
Last-Modified: Tue, 06 Dec 2022 22:07:24 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
2img.net/i/fa/i/smiles/icon_farao.png
200 OK 378 B URL HTTP/2 2img.net/i/fa/i/smiles/icon_farao.png
IP
File type PNG image data, 27 x 24, 8-bit colormap, non-interlaced\012- data
Hash d2811e7070dd88dfd55a3c63886a82cd
ffdfe437aedc1fcb41dd8f572deb1b9e62b9b4f3
44cab516e621fcc9f107944e431f9c3b0647f778b587d0abad4818dd5d3e57c3
GET /i/fa/i/smiles/icon_farao.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/png
content-length: 378
last-modified: Mon, 16 May 2016 10:57:12 GMT
etag: "5739a788-17a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 188275
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lF9HQrCFwlV%2FeQ%2B%2FuS%2Fxg%2FG6dhWQuI7xqy83YIG%2BvKeoQZ1mKM5ozBuTjah8mVBUKSnj9RYJ7o6MOpyEEryG6LWa3h%2BgDm3Jz72u%2BxlVtRfCE1M%2FkD0t%2BMZOaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d2f1424e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/empty.gif
200 OK 42 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /i/fa/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/gif
content-length: 42
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-2a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 188827
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gu%2BWRfIOZ5044YflBQ1cO5LdGmGSOKFTY3XGZRspyc7FmmIwFsGmX0TyQkAhm0us5cY1Kc1qnXS6ZzemG2rN31bWP%2BqNTixhTGwXtXL8kGbjnyfdK1TJbPfPYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d2f0824e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/i/smiles/icon_king.png
200 OK 214 B URL HTTP/2 2img.net/i/fa/i/smiles/icon_king.png
IP
File type PNG image data, 21 x 22, 8-bit colormap, non-interlaced\012- data
Hash 38bddfc2d8e5ef5b7e376862d19a2524
2aa03bc5b9f5e5041d2fc60a6c3cc45555624b9c
aa7d44113c4362519c54dd5f2ed2162cddb464ceb5b5209d9affda753740f704
GET /i/fa/i/smiles/icon_king.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/png
content-length: 214
last-modified: Mon, 16 May 2016 08:30:08 GMT
etag: "57398510-d6"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 188275
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YDOkKKXJzEVtv2Q7rygemUtSYr5UjpcKYzqKEEPuIUP0OzbP%2BHtZBT5wlhze5KpTzxockSgQ8ib1k5g8FUro5y9On3RhxEKC%2FlQSUyjcscL9vF9tuk4egxw35Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d2f1624e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/99/22/i_icon_mini_login.png
200 OK 4.9 kB URL HTTP/2 2img.net/s/t/15/99/22/i_icon_mini_login.png
IP
File type PNG image data, 110 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 1dfa347cee1ac8122d4c78612733e3b6
5b77a185efa0322efdbbe3b83f8664e38d414c62
a002ffe1690e4eb0a1a52617c4eb9775b25a7fa9d619700dab17bfaec5b95849
GET /s/t/15/99/22/i_icon_mini_login.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/png
content-length: 4922
last-modified: Wed, 27 Oct 2010 23:27:29 GMT
etag: "4cc8b561-133a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3363
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jWXp3Otkf%2B4yVIta0RtQ36Sgo1z6q014rBKfoFeTREuNqQiTSavf1yNQInCJTycF9qjdKjUqyPIrCZux1zccFECrMkwLT8i6rJUkbebgpEq7lFAjtJDeW5Fl6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d2f1124e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/99/22/i_icon_mini_index.png
200 OK 5.0 kB URL HTTP/2 2img.net/s/t/15/99/22/i_icon_mini_index.png
IP
File type PNG image data, 110 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash a3abb7719e490b3ba951525ba6e34dc3
9f61ed3d89f849d7d92a5701aada248174a5dbae
8c1740abc24c6240d44095b8b9da89fbf7d0cc1fee00bb17e0d7d593571d6c68
GET /s/t/15/99/22/i_icon_mini_index.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/png
content-length: 5018
last-modified: Wed, 27 Oct 2010 23:27:29 GMT
etag: "4cc8b561-139a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 15830
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=urYLbRW7YTVKb5CXteCO2k3yy4Mbx%2FzTFfDw4PuBAhlS1g2S2OUs%2FCiH%2BP6T%2FuIMgiPMbJWKl%2F7JefwnqEX2qzsgZFWywt3uUxn255Z7NQmh3q1w1Qsu0FfZdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d2f0e24e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/empty.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /i/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 09 May 2016 08:45:50 GMT
etag: "57304e3e-2b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 188887
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iUfodL9wgqZE9IpMORG16%2FEbPgsc%2BDqjWsUV7WIrO51ExkDtzspTGOo78iP0fBSPgu1GRqe8ADR9DOoe7if%2Bal2MrU4uILcr%2F%2BWWVnAhtL3FgfAIhR65%2B1FpWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d2f1224e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/i/smiles/affraid.gif
200 OK 459 B URL HTTP/2 2img.net/i/fa/i/smiles/affraid.gif
IP
File type GIF image data, version 89a, 19 x 25\012- data
Hash 0ae9771811259e2517fced3c2d5770b4
6f936b7378f387901d4c7da9cdf4485ca58ad660
ab4ff2235d7f50f3e90c0e45b76ee9199b91a68808b3c2b0dfd6cddefe7c313d
GET /i/fa/i/smiles/affraid.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/gif
content-length: 459
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-1cb"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 188275
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u%2FCy%2FHX%2B0DuBClaDgoBQdNAYEcXR7b8u7FrJbmWHYyqBcKAg6rDOrH6uyJDe1hjUrtGP9OJO9tFmVgFvIzFOtGrUWy13LvRhKh6JXT8owJo1ojEdvC6SG%2BVNjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d4f4324e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/i/smiles/icon_pirat.png
200 OK 189 B URL HTTP/2 2img.net/i/fa/i/smiles/icon_pirat.png
IP
File type PNG image data, 15 x 15, 8-bit colormap, non-interlaced\012- data
Hash 310246eafd0ef60a0a057e874700d6a3
5f2fb899529891925ed46270df2e52f97c36a688
04d44704f5980d5ed69e4fe183749492f1014052666e49a951707d56a0567a07
GET /i/fa/i/smiles/icon_pirat.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/png
content-length: 189
last-modified: Mon, 16 May 2016 10:57:12 GMT
etag: "5739a788-bd"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 188275
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M%2FudaHXlaFErPAhMIukLXkb3oWl90lVT8NvgZp4c0ufbPZR4nlojyp0lmccKPoPCOICrHjGfKmNImVFZ4Xkp%2B8MrAvrkgbryUQziKyoMadXcBkSkSCUVSmGlJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d4f4024e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/subsilver/icon_www.gif
200 OK 733 B URL HTTP/2 2img.net/i/fa/subsilver/icon_www.gif
IP
File type GIF image data, version 89a, 59 x 18\012- data
Hash 05d80505deb19651f0b3601d76df1670
a173e6839dfabb9fbb672d8ae9a0cc570b698f26
02be12aef9119686fd59cb18175cb585e21e46a6aa5ec6b10074e6dd37476eef
GET /i/fa/subsilver/icon_www.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/gif
content-length: 733
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-2dd"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 188735
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=siZkBOPCUv0to8wqk8oTDbW%2FMOdgd82sg6qJx1%2Br0Wewdc9mdXOhaR19F0aW9WAo%2BFFd7imWwFea9Eh%2B6LaaddnQKTDUiAE%2FCW4nkCVdF7SCvtoee96KIZEaMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d4f4424e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/99/22/i_icon_minipost.gif
200 OK 2.3 kB URL HTTP/2 2img.net/s/t/15/99/22/i_icon_minipost.gif
IP
File type GIF image data, version 89a, 45 x 45\012- data
Hash 47c3a5cb2ee9ea43505d06e5145b95ee
de19313c0cc46d7f69388cbf5ae369e3670436dc
5aa01c548d83223220ec6ed789f9c5d71c60a050814c75e9cbed319d7d00e5ca
GET /s/t/15/99/22/i_icon_minipost.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/gif
content-length: 2310
last-modified: Fri, 06 Aug 2010 11:58:43 GMT
etag: "4c5bf8f3-906"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mgVwX6xB6UgrDHcvKfjq%2FBdm8mGgVwvTnid7l%2BBIBooQS7msYwqby5ktsBEqjJAILeL9flEvsAiVvD%2FKLCFlUxQYsugzP1PUmilRngKH8ylxG%2Bo%2FLfUnFf5QMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d2f0d24e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/99/22/i_icon_minitime.gif
200 OK 2.3 kB URL HTTP/2 2img.net/s/t/15/99/22/i_icon_minitime.gif
IP
File type GIF image data, version 89a, 45 x 45\012- data
Hash 47c3a5cb2ee9ea43505d06e5145b95ee
de19313c0cc46d7f69388cbf5ae369e3670436dc
5aa01c548d83223220ec6ed789f9c5d71c60a050814c75e9cbed319d7d00e5ca
GET /s/t/15/99/22/i_icon_minitime.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/gif
content-length: 2310
last-modified: Fri, 06 Aug 2010 11:58:43 GMT
etag: "4c5bf8f3-906"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5VXa5BwV271TkdOmZoFAcT3qOW%2FcCH6q%2BZrdam2byv0uYcmXszbESpE%2B%2FDrh%2B%2FTMjNTVG3pjgyWAqN6TMpyCZ0c8EFuSWv8OWFB9mIE58sPnDMi0ngdU3a4xpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d4f4524e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 6b874cd43d686ab515ab6c0706375c6c
3011156bc0a836bd990cd7707efd83dea59211fa
3cb32762de89fc43af83f2f716f4e24a30277310d0deb84b595a861a4aeb3d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1201
Cache-Control: max-age=131813
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638fbd1c-117"
Expires: Thu, 08 Dec 2022 22:27:25 GMT
Last-Modified: Tue, 06 Dec 2022 22:07:24 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash 0d7e4f8080b49b9b1e349bddc6040719
774d6a8a88cac65209b895ffd64b946964ced493
e61dc8b39318cc58ff05a306b1a46fec40e1e3c61d2d219c4c6a0be228fa3ab9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4098
Cache-Control: max-age=163871
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "63902f05-118"
Expires: Fri, 09 Dec 2022 07:21:43 GMT
Last-Modified: Wed, 07 Dec 2022 06:13:25 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 280
2img.net/i/fa/sprite_icons.png
200 OK 1.5 kB URL HTTP/2 2img.net/i/fa/sprite_icons.png
IP
File type PNG image data, 1395 x 12, 8-bit colormap, non-interlaced\012- data
Hash 6c31830c94fd2987aab8ed4af1e6b756
9bb52d402fd3cd4a0515c54b5061b655fdabfd96
b621467f74054e2999a7e213edf26895f9639e255f7c11b2047509fd0879f6c8
GET /i/fa/sprite_icons.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/png
content-length: 1459
last-modified: Mon, 16 May 2016 11:01:49 GMT
etag: "5739a89d-5b3"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 188811
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B6DJsvWtjm4bIKZedSxzJBPJlPI63v8cEpSL%2Bn6C0ovIxUxtgG5uuCQwfJdlqGU%2Bw4It1LWnPFYg2OJu3HxLhmQsKgjWANKiaarkNdWfg%2FDQi5rAVMqVTbCMrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8dcfce24e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/99/22/i_icon_mini_register.png
200 OK 5.1 kB URL HTTP/2 2img.net/s/t/15/99/22/i_icon_mini_register.png
IP
File type PNG image data, 110 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 03f65d0f747f5ee4ad62edd71889ad25
4a37f896715316eb4cbd0c5ae5fe27a94949f363
ed17e609b6252367d4fd825623086bc7f4affe4ca886e60832e6c9007913bb66
GET /s/t/15/99/22/i_icon_mini_register.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/png
content-length: 5073
last-modified: Wed, 27 Oct 2010 23:27:29 GMT
etag: "4cc8b561-13d1"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HEweMzUTPQUbGklTRh5tgHIrFKcK5QBlzVZ2I5gr7Ay%2F5XeLdZe59P1WePGOOA%2Ftc1KsHVTXmJ6DwHdScgt8EdMAzxIOFtTi20DQejcHtbyFsUYruDi7vfJSLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8d2f1924e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 0d7e4f8080b49b9b1e349bddc6040719
774d6a8a88cac65209b895ffd64b946964ced493
e61dc8b39318cc58ff05a306b1a46fec40e1e3c61d2d219c4c6a0be228fa3ab9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 91
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "63902f05-118"
Last-Modified: Wed, 07 Dec 2022 09:49:01 GMT
Server: ECS (amb/6B7F)
X-Cache: HIT
Content-Length: 280
2img.net/s/t/15/99/22/i_back_catg.jpg
200 OK 314 B URL HTTP/2 2img.net/s/t/15/99/22/i_back_catg.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x40, components 3\012- data
Hash 21e889e4212c7d4f774ecdd3fd1cbb19
7c2afa3c4843e3305db16b6f41adc76ddcaf614d
29704bf0dbe345d6d56698eb6afde5e7fd173115226f5f9f600e02bc59a708ae
GET /s/t/15/99/22/i_back_catg.jpg HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/jpeg
content-length: 314
last-modified: Fri, 12 May 2017 14:01:21 GMT
etag: "5915c031-13a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LOeCWxR1AFA%2F%2Fl2qexEWGPAG7cB8J6sRKe7Ptk%2Fd4SIv7muDFnZ6L%2B%2BV2q8jTHz9FaqFElyktkrQhHd2IQ33TIaxI54%2BwRm2luX5HOehe8pHfmCTHurTjEnyRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8dcfca24e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/99/22/i_back_title.jpg
200 OK 314 B URL HTTP/2 2img.net/s/t/15/99/22/i_back_title.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x40, components 3\012- data
Hash 21e889e4212c7d4f774ecdd3fd1cbb19
7c2afa3c4843e3305db16b6f41adc76ddcaf614d
29704bf0dbe345d6d56698eb6afde5e7fd173115226f5f9f600e02bc59a708ae
GET /s/t/15/99/22/i_back_title.jpg HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/jpeg
content-length: 314
last-modified: Fri, 12 May 2017 14:01:21 GMT
etag: "5915c031-13a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ret0q6BlV%2Fb2BQ8dVr71CbajAdODUxHL8xn8wPGFFrbRJ0wk4cM%2FBUO3kquDnpDzi6HOj3xyCE4m6HHwQ5GyEU%2FxqNjTO42MI43ic7McLSZh4M6Jw8aQtNed0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8dcfd024e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f14/13/64/37/51/158.png
200 OK 152 B URL HTTP/2 i.servimg.com/u/f14/13/64/37/51/158.png
IP
File type PNG image data, 9 x 20, 8-bit/color RGB, non-interlaced\012- data
Hash 59a9859104cf4ebba84589945a167b2a
755731b3f2528861adbf8775b4b0d671294fc911
9f53fcc02d46a9fb73290db1420146fa4b278fef5960d4b6dfcec6584b2e8abe
GET /u/f14/13/64/37/51/158.png HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/png
content-length: 152
last-modified: Wed, 20 Jan 2010 23:49:35 GMT
etag: "4b57968f-98"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Tue, 31 Oct 2023 07:14:00 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1098
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rt3bJNwYv1i76xOM0gxe%2FrSf4PKKPaaZi%2Bk6jNElZD6Tbi6i3%2FgcWWJyTQQf3HkIKGZcIZ6gDflsDuedqtghxMwMQLYi3vvuzbyof4KFw6feF5KOJO9VYoXvmws2ZkRt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 775c5b8e0c4db524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 0d7e4f8080b49b9b1e349bddc6040719
774d6a8a88cac65209b895ffd64b946964ced493
e61dc8b39318cc58ff05a306b1a46fec40e1e3c61d2d219c4c6a0be228fa3ab9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 91
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Last-Modified: Wed, 07 Dec 2022 09:49:01 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8df75ca293c5d225d64683fcf613404f
f2f351830015257f34f603fb2d2660057c28c756
4758c277c932e1d96beb963049cb1cfd3fc4e75dc9ead41dd5dedba573bfcb04
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4758C277C932E1D96BEB963049CB1CFD3FC4E75DC9EAD41DD5DEDBA573BFCB04"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9164
Expires: Wed, 07 Dec 2022 12:23:16 GMT
Date: Wed, 07 Dec 2022 09:50:32 GMT
Connection: keep-alive
i.servimg.com/u/f59/18/68/89/75/o13.jpg
200 OK 202 kB URL HTTP/2 i.servimg.com/u/f59/18/68/89/75/o13.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x444, components 3\012- data
Size 202 kB (201873 bytes)
Hash e49f1cd3aefd0a04a440f1e71477af7e
ab42e75864a2e5bf25c5b391705f0910143a5b79
da9e29747ed5b399faf239c29d843fc49a75e43c9bcaab3323bda9f681489603
GET /u/f59/18/68/89/75/o13.jpg HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: image/jpeg
content-length: 201873
last-modified: Tue, 02 Dec 2014 12:30:44 GMT
etag: "547db0f4-31491"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Wed, 06 Dec 2023 07:46:13 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bkktpfr4TGlDPid%2BcjkyFNmREBFybwPVYMFJ%2F%2BAzffim1TspEcDg97ZxdesZ%2BdEj5uJPd8DXxnlqjye2Uqhl2nZNUeoMCQ4dPEOU8%2FLLCYihmvKJDqlXuDZqP1x%2FEmAT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 775c5b8e2c6ab524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 995fe19a8a49976e8e9d5a982de0d3d6
fcbf5b3a56fa563d99517e318961a0ebf02a4081
d32603d46aed45c2cf3cddcc6ef6d77716520ba2a7a1c7afe296da580f538bc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3978
Cache-Control: max-age=94958
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638f224c-138"
Expires: Thu, 08 Dec 2022 12:13:10 GMT
Last-Modified: Tue, 06 Dec 2022 11:06:52 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 312
stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=amrkhaled.ahlamontada.net&var=&ymid=&var_3=
200 OK 758 B URL HTTP/2 stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=amrkhaled.ahlamontada.net&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (757)
Hash 484555d8cceb40a5268d0e8dc86b749f
a0309e390cb88fad667c4b70157e4abf5765e7b8
284c1e3d84518c36bb847d09c781bc5548cdf83b81db43837e8b358366c58347
GET /zone?pub=0&zone_id=2308013&is_mobile=false&domain=amrkhaled.ahlamontada.net&var=&ymid=&var_3= HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amrkhaled.ahlamontada.net/
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/json; charset=utf-8
content-length: 758
x-trace-id: 5d89530c7496bf8cc4e17bba2d47c413
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 4c9688944e55047f879844d038061d17
e772514463f92964d1aa73b65a5b5e727665e2e6
b7da6d01a2e65b5691557e6c340a64632aed3e7fb41bf5a1e5fdbe96c7c9e700
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3823
Cache-Control: max-age=118588
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:32 GMT
Etag: "638f7f35-139"
Expires: Thu, 08 Dec 2022 18:47:00 GMT
Last-Modified: Tue, 06 Dec 2022 17:43:17 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 313
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=U_tcM180M0RITmhlJTJCZkMwOUJGQlhaMUN2czlDRmZtcU40UnpKencxb0hzV2F5SUFGWG1JbFl2cVc2MmdOVXBTQ3NvVW4; expires=Mon, 01 Jan 2024 09:50:32 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 230193
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 70e61a14d2296fcfede8714707eeb39d
72ca3d68eae189744173d8ed10f7a18290244c8b
af6a64d2a10dc95f377f8e8f443e496bad5f2444206192ca5e942eb58aa41838
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4002
Cache-Control: max-age=91026
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:33 GMT
Etag: "638f12d9-138"
Expires: Thu, 08 Dec 2022 11:07:39 GMT
Last-Modified: Tue, 06 Dec 2022 10:00:57 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 70e61a14d2296fcfede8714707eeb39d
72ca3d68eae189744173d8ed10f7a18290244c8b
af6a64d2a10dc95f377f8e8f443e496bad5f2444206192ca5e942eb58aa41838
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4002
Cache-Control: max-age=91026
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:33 GMT
Etag: "638f12d9-138"
Expires: Thu, 08 Dec 2022 11:07:39 GMT
Last-Modified: Tue, 06 Dec 2022 10:00:57 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 312
cdn.viglink.com/api/vglnk.js
200 OK 29 kB URL HTTP/2 cdn.viglink.com/api/vglnk.js
IP
File type ASCII text, with very long lines (693)
Hash 072eaf64a771815874455704fca9301b
6c6226d00f14bb800cd4390b3cd42df941be43b1
bb35c8c300bd1acfe7ed86eb988f74ff2e8d86a4fb0409c5d78a890f9fd14b8e
GET /api/vglnk.js HTTP/1.1
Host: cdn.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 28567
last-modified: Wed, 02 Dec 2020 18:57:12 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 16:53:51 GMT
cache-control: public, max-age=604800
etag: "072eaf64a771815874455704fca9301b"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AQY3M5hXCSVM7BVsVo53-1na5gtXR70tEEwjjoNtFV0XSXdN3t6ddg==
age: 579402
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/forumotion-ar/loader.js
200 OK 25 kB URL HTTP/2 cdn.taboola.com/libtrc/forumotion-ar/loader.js
IP
File type Unicode text, UTF-8 text, with very long lines (65498)
Hash bbfa9d794c1218cf5f2f30b9392c4cfb
b0aa5725c004ac5fb830390c74c545b3ef1ebf59
bd6cb07b4bc5602d41715b001d9e221f574615be6a6a44891bf74d1f0e40457d
GET /libtrc/forumotion-ar/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /cwkzO8nF5uRzDXMLGMHW4IRfavxeTsfa12Vhm18zWUPw2Q3mLzJdjX2wAv8/Vnko9AhGdScgug=
x-amz-request-id: 1NRDB3BA5PYV6VXA
last-modified: Tue, 06 Dec 2022 20:15:07 GMT
etag: "0b83445d4f9715acb76beae9296d283b"
x-amz-version-id: 6b2PswebF0hDzWO5xmiOy0UsxM94SyBS
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:33 GMT
via: 1.1 varnish
age: 143
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670406633.103641,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 99
content-length: 25423
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 07 Dec 2022 08:46:55 GMT
expires: Wed, 07 Dec 2022 10:46:55 GMT
cache-control: public, max-age=7200
age: 3818
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/impl.20221206-9-RELEASE.js
200 OK 147 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20221206-9-RELEASE.js
IP
File type ASCII text, with very long lines (65509)
Size 147 kB (147441 bytes)
Hash ed14506295f2d36ba1c947cf18f982f1
8bcb0936b86823b6eede23335a32943741c0db74
d35893f151f71ec05c2cbe5c36df80230c14bed25ac5c8a7a277e3ba3c483f92
GET /libtrc/impl.20221206-9-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GJ/TYug6Y6wJpQ/xGmN1jNBtDY9WgBStGLQwy7qlMzZ//8FdBlS8ZDbuZEsurVSZq3yK0CZU2TI=
x-amz-request-id: V7XDYTDZNM3QFRRE
last-modified: Tue, 06 Dec 2022 11:09:50 GMT
etag: "ed14506295f2d36ba1c947cf18f982f1"
content-encoding: br
x-amz-version-id: eQ1gx7k6CXCSNKmlaWA.nuCrjL1_tj1K
content-type: application/javascript
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:33 GMT
via: 1.1 varnish
age: 23989
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 14271
x-timer: S1670406633.289581,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 17
server: AmazonS3-br
content-length: 147441
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1371394b8b1c5690dea0c69e202fb178
220403c6e8e56905462e854ca58c133f57f4e01e
e84c5d428e0e823f92efe2ca32e5ff108e4b076c411b7a3c55b879f00e515670
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171826
Date: Wed, 07 Dec 2022 09:50:33 GMT
Etag: "639046cb-1d7"
Expires: Fri, 09 Dec 2022 09:34:19 GMT
Last-Modified: Wed, 07 Dec 2022 07:54:51 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7X8XHRGLL9ShVig96IJ_bBcNO7rghDO8TUJdulgmT5VPR3SSmGAeIA==
Age: 5968
api.viglink.com/api/ping
200 OK 260 B IP
File type ASCII text, with no line terminators
Hash a8f9096cb914331cb8f65030d18f2729
46533ee99418477e606f2dfd92ee4519775a3d69
8ebefe608b82d608b150a56be963afa168dacbe4207edb4b145d807973622db9
POST /api/ping HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 144
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://amrkhaled.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Wed, 07 Dec 2022 09:50:32 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 260
Connection: keep-alive
amrkhaled.ahlamontada.net/images/icons-180.png
200 OK 44 kB URL HTTP/2 amrkhaled.ahlamontada.net/images/icons-180.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 103e9a003f8e9692e22854734e6553ff
d04d869c4dc8f05b193e61ae72442d581845f0e1
c4ddf60e00844505fd4753b885b2ff139791096bd67144c4c50471ff8274e738
GET /images/icons-180.png HTTP/1.1
Host: amrkhaled.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/t270-topic
Cookie: exadd=167042; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; toolbar_state=fa_show
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:33 GMT
content-type: image/png
content-length: 43576
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 07 Dec 2022 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
x-cache-ic: MISS
X-Firefox-Spdy: h2
trc-events.taboola.com/forumotion-ar/log/3/bulk-metrics?lti=deflated&bulkSize=1
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forumotion-ar/log/3/bulk-metrics?lti=deflated&bulkSize=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/bulk-metrics?lti=deflated&bulkSize=1 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 485
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 07 Dec 2022 09:50:33 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A50%3A33.142&type=usage&msg=rtus&llvl=2&id=9711&cv=20221206-9-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A50%3A33.142&type=usage&msg=rtus&llvl=2&id=9711&cv=20221206-9-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A50%3A33.142&type=usage&msg=rtus&llvl=2&id=9711&cv=20221206-9-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 07 Dec 2022 09:50:33 GMT
x-fastly-to-nlb-rtt: 22011
access-control-allow-credentials: true
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13920
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 09:50:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13920
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 09:50:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13920
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 09:50:33 GMT
Connection: keep-alive
gem.gbc.criteo.com/newidsd
200 OK 543 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
Hash 997d4d7cd95ae588168ef22de169e63d
a519678afb8a73a89e7d6574286c63af2a618ae8
db181bb8398b7047502a33cbfd96f6c630ab921e35403c3a10521ee486e02377
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 103168
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ViuPsZBEVJ-aGOcsfrl3nXu244mzMUMQVhpPeNlO7W3sBrrfuUfXpA==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:32:04 GMT
age: 40709
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 98d2cf29c710d25bd2f03ff216fdd369
b8eb2e11f9655f19334befc036f21489a6473827
614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:40 GMT
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
age: 42893
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 604a4132da78a0c013b5818644adb121
ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566
eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8701
x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cm3-2HRWIAMFjfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EpyIdH9YEXjxbGhZpBIfzoZHQxMvAKl0eCFQsgMt0e1SSeWsiuey7g==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:15:06 GMT
age: 41727
etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8116e95d-8c6c-4a81-8560-89710dcf8c9b.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8116e95d-8c6c-4a81-8560-89710dcf8c9b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 22e3174edbfe337cc29266cc38abb51e
80283cb298a1b2326620be406ee3daa42ee0b3ef
520858a9d9540d5768988d0ebb04f0162ded5eb9cd8f4718989b033d04702111
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8116e95d-8c6c-4a81-8560-89710dcf8c9b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 3b64a1cf-0ad7-4ecf-a25e-ca65c06330ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csVFcECMoAMF1SQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6889-42dde2da60f083383ab06b82;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:54:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z3yEknYzqJG3oEe-t3nxHYkDXSYGdWkRdbB1V4ixYcJjV5DjxzLzEA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 08:48:55 GMT
age: 3698
etag: "80283cb298a1b2326620be406ee3daa42ee0b3ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f38ce0fb35ef0fc66b61cafd2b09eeb6
aded2fe97a129dc820ba9d6d7605aeadfe17c15c
39bcb5e0c3a9cd39c0fcefbffd9e6f949bb9d85f0bee2b0b7c5cb999b508b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9781
x-amzn-requestid: 24355473-a83a-42b6-bdf3-ae2c39f7f3eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ccq48GfKoAMFjmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63882505-2f58dd012665cb131ceff8f2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 03:52:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VySWUb7U2HlkyL8T1PCOzSDXNSDJDRIIF1PAnwaK2DHiGJFGGzRCOQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 06:07:33 GMT
age: 13380
etag: "aded2fe97a129dc820ba9d6d7605aeadfe17c15c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c2ae931d0f14a81013f782d43b8c7b85
9ec84996b63362ad370ff67b0fd8136a343c1bbf
9b4a2b3e5e2d2b4fac094135fed10a3040598f1208f6b2ec52d95d10aca66ed5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9891
x-amzn-requestid: f15dc6ba-901b-4ef6-8589-d8918fe84173
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csU8lF3MoAMF47g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6850-496d269b228065a365a67eea;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:53:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3SFFPJye5LvexbHVfPukXIdJ-BSkP5MCpesIJhqxtSNKamcRNr1lFA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 18:21:44 GMT
age: 55729
etag: "9ec84996b63362ad370ff67b0fd8136a343c1bbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 629 B IP
Hash 643777bb40fb3aac97a313791b60e715
c2e6826a7b6bf89e289d8142ae5a409af271d486
ac0b3022c1ecb150a80e2b13a94ad5c43099812fa7cee16fbd66810434d7f5aa
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=U_tcM180M0RITmhlJTJCZkMwOUJGQlhaMUN2czlDRmZtcU40UnpKencxb0hzV2F5SUFGWG1JbFl2cVc2MmdOVXBTQ3NvVW4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:35 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=XyGeSV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czlDRmZtcU40UnpKencxb0hzV2F5SUNiaW5GTDF6TGw5ekRRdWZOTUZuY20; expires=Mon, 01 Jan 2024 09:50:36 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 310310
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://amrkhaled.ahlamontada.net/
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:36 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://amrkhaled.ahlamontada.net/
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:36 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amrkhaled.ahlamontada.net/
Content-Type: application/json
Origin: https://amrkhaled.ahlamontada.net
Content-Length: 397
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:36 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: bcbdca6a6022aa9eafca09022d001968
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amrkhaled.ahlamontada.net/
Content-Type: application/json
Origin: https://amrkhaled.ahlamontada.net
Content-Length: 481
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:36 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: ada5702129e3f412bc4d8d3f246a538a
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b22490b02628e79842aa551994331a2e
238870b8a3e6ef3b6a761154e3abee386643597c
ef2e0268a5ed0ca7d64dfc1baa3d56d55f4062e4d84972bc9423fe56df585673
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF2E0268A5ED0CA7D64DFC1BAA3D56D55F4062E4D84972BC9423FE56DF585673"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8573
Expires: Wed, 07 Dec 2022 12:13:29 GMT
Date: Wed, 07 Dec 2022 09:50:36 GMT
Connection: keep-alive
cdn.betgorebysson.club/apu.php?zoneid=3765907
200 OK 30 kB URL HTTP/2 cdn.betgorebysson.club/apu.php?zoneid=3765907
IP
Hash c25a1a637af379f5a91d8e1878cd6fae
941e57be298835ba54e376b3399dd3474cbed297
0d40a18d740d53b45aeeffabb03a41c6e4c58f3792731d02c6b3a9412a759452
GET /apu.php?zoneid=3765907 HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:36 GMT
content-type: application/javascript
x-trace-id: be86e0c027e153f81a72b0d54f22df39
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=769d551d98944dbb85cd531cdeb3b22f; expires=Thu, 07 Dec 2023 09:50:36 GMT; path=/; secure; SameSite=None
oaidts=1670406636; expires=Thu, 07 Dec 2023 09:50:36 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash f93fe0c44e63867b7f8553c1ca73460e
e664d98cd9803e5f179af596d8a2f50d79fc92b0
dbb9ed743e3bf5d61dd66e676c81d5e2a43c8287d61ef34d90b6c7790ca6106e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 09:50:36 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 01:33:16 GMT
Expires: Tue, 13 Dec 2022 01:33:15 GMT
Etag: "e664d98cd9803e5f179af596d8a2f50d79fc92b0"
Cache-Control: max-age=487958,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 775c5ba6ffff0b65-OSL
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 906
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 07 Dec 2022 09:50:36 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://amrkhaled.ahlamontada.net
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
vidstat.taboola.com/lite-unit/3.9.8/UnitWidgetItemDesktop.min.js
200 OK 30 kB URL HTTP/2 vidstat.taboola.com/lite-unit/3.9.8/UnitWidgetItemDesktop.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash aac1042207afd54e1cf1befcaf3420cd
00f0597866330a850a1d6222861591f24dd18380
ea77ece8880eb28ffe83e94ef787b4204f8b1b3d09f443011b898b13ed4bb706
GET /lite-unit/3.9.8/UnitWidgetItemDesktop.min.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 07:02:09 GMT
etag: "1842444d4bb92087143326a4d508875d"
server: AmazonS3
via: 1.1 b34d5d8e5954d0b7b46d5f0eb534c166.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: iVxUQ_yUDgKIDSZaR21P2jFvv94ZUaTAMQdnd9xsEMFJTpsmb2NMlg==
cache-control: public, max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:36 GMT
age: 1306079
x-served-by: cache-bma1627-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 52701
x-timer: S1670406637.961001,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 29909
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/userx.20221206-9-RELEASE.es6.js
200 OK 5.4 kB URL HTTP/2 cdn.taboola.com/libtrc/userx.20221206-9-RELEASE.es6.js
IP
File type ASCII text, with very long lines (17842)
Hash 4957c15ac288ba5085679ffaf3f7798e
33f2569b3f3239aa332430c24ffda92d0dc11735
4dbc2d23b59a6aeefdac9ea2269fc4f35f6ca9c053c2e500239bcfc518cc229b
GET /libtrc/userx.20221206-9-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: kDQiCjRxgtPAPlOD9JISa+DF6OatqUNG9RrE8so00foHmVV40MPksof0N6eH/qVTaW2holDeCkc=
x-amz-request-id: RX2Q1J6EFA817R2Q
x-amz-replication-status: PENDING
last-modified: Tue, 06 Dec 2022 19:43:36 GMT
etag: "364422da529caf2611941f23d30b1dfd"
x-amz-version-id: hpdZ5OqplvrBOfgvKbxU3JQU0Slz_M.b
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:36 GMT
via: 1.1 varnish
age: 91
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 23
x-timer: S1670406637.961118,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 17
content-length: 5397
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/cta-component.20221206-9-RELEASE.es6.js
200 OK 5.1 kB URL HTTP/2 cdn.taboola.com/libtrc/cta-component.20221206-9-RELEASE.es6.js
IP
File type ASCII text, with very long lines (18924)
Hash 449d828d62f571055c54b8a7e49244b4
4dfbe2025dfc960ca12629f997efe45ba6d26504
b572c7ba9c8bb6144ab522b478c832c8cdd6426732129967fb3872ca0519208f
GET /libtrc/cta-component.20221206-9-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: JyALMskmpFBGAAMf6YUkpAiEo0iAiz6a72Yh/c6efhgZ/y7ZQgGuAmXe3RsEyj64cmUL3laV11A=
x-amz-request-id: W9WK3KNYTHYFPFTP
x-amz-replication-status: PENDING
last-modified: Tue, 06 Dec 2022 19:42:37 GMT
etag: "b3ae8f65d597f8a0e6e7e82ad7bbd2aa"
x-amz-version-id: l9oa1xXJu.GuPPgZtfMAzA0JWpSj68WD
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:36 GMT
via: 1.1 varnish
age: 67
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 35
x-timer: S1670406637.961272,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 17
content-length: 5108
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//s29588.pcdn.co/wp-content/uploads/sites/2/2021/04/aqua-dam-793x526resize.jpg.optimal.jpg
200 OK 16 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//s29588.pcdn.co/wp-content/uploads/sites/2/2021/04/aqua-dam-793x526resize.jpg.optimal.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e3fb67223d6da33f2ff20d05609f5952
c889218c4b46a7892ef7aa2a2c35a4284201b6d1
a45aa76480af2ed69be99bcaa63a6926ea527508692799898fb02dd71b6531d5
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//s29588.pcdn.co/wp-content/uploads/sites/2/2021/04/aqua-dam-793x526resize.jpg.optimal.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 373234355486729988163224879813363204491,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 373234355486729988163224879813363204491,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
etag: "48bc7e840df12c9e245fa36e94b62722"
expiration: expiry-date="Fri, 25 Nov 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Tue, 25 Oct 2022 07:03:18 GMT
req-referer: https://acdn.adnxs-simple.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 279
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb203
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:36 GMT
age: 2857565
x-served-by: cache-iad-kiad7000082-IAD, cache-iad-kcgs7200167-IAD, cache-lax10655-LGB, cache-iad-kiad7000128-IAD, cache-bma1627-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 7, 1
x-timer: S1670406637.962527,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//s29588.pcdn.co/wp-content/uploads/sites/2/2021/04/aqua-dam-793x526resize.jpg.optimal.jpg
x-vcl-time-ms: 2
content-length: 15708
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/4711eef68e0927efbaf8d6187a15f80b.jpg
200 OK 9.6 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/4711eef68e0927efbaf8d6187a15f80b.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f89178c6cf9a907d48e546aedca42e9b
9b7f921258749237999575e98a1dbd0cd61e8a10
d3cd4952ff0ca20694858e55abc8de951dd2e9fcc331fac8099fcbab3e6d6771
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/4711eef68e0927efbaf8d6187a15f80b.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 462258627838964650258306556080298149850,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 462258627838964650258306556080298149850,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "da08f01a5b28eb651caf68215c1f624e"
expiration: expiry-date="Sun, 04 Dec 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Thu, 03 Nov 2022 21:01:38 GMT
req-referer: https://www.afterdawn.com/news/article.cfm/2021/01/21/lg-planning-to-sell-its-phone-manufacturing-to-vietnam
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 234
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb802
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:36 GMT
age: 2879516
x-served-by: cache-iad-kjyo7100029-IAD, cache-iad-kjyo7100156-IAD, cache-chi-kigq8000141-CHI, cache-iad-kcgs7200149-IAD, cache-bma1627-BMA
x-cache: MISS, HIT, MISS, HIT, HIT
x-cache-hits: 0, 1, 0, 10, 1
x-timer: S1670406637.963366,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/4711eef68e0927efbaf8d6187a15f80b.jpg
x-vcl-time-ms: 2
content-length: 9592
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f48/18/35/85/13/2a2d1610.jpg
200 OK 13 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f48/18/35/85/13/2a2d1610.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 934611ad31f00fb3bd6103015d20abcd
02884dcc04f35ee11751a0261eeb4c5a1f13c431
829dc16b27bfad7b10341679eabcf7f4b1a6f923de7813d58cc052369364da27
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f48/18/35/85/13/2a2d1610.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 579644804371337419811325140648862925219,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 579644804371337419811325140648862925219,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "3fe5dc23926e454ea183a75b2e7fc7ff"
expiration: expiry-date="Sat, 05 Nov 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Wed, 05 Oct 2022 08:12:04 GMT
req-referer: https://hossam-antar.yoo7.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 718
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb803
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:36 GMT
age: 4334655
x-served-by: cache-iad-kcgs7200086-IAD, cache-iad-kjyo7100085-IAD, cache-chi-kigq8000169-CHI, cache-iad-kcgs7200155-IAD, cache-bma1627-BMA
x-cache: HIT, MISS, HIT, HIT, HIT
x-cache-hits: 1, 0, 1, 47, 1
x-timer: S1670406637.965159,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f48/18/35/85/13/2a2d1610.jpg
x-vcl-time-ms: 1
content-length: 13446
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/2ee484e8144104fddbcd51037349c4d7.jpg
200 OK 7.3 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/2ee484e8144104fddbcd51037349c4d7.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7282b24a3f84c5937a626f889bbe617a
64dac37f7a2c308ca9d950e0eb15903b5955d63c
9c47ee38edc418be8f1553be6fe9b562ad005ce158e67bcbdb9ecb7d27fd2197
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/2ee484e8144104fddbcd51037349c4d7.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 423865706808355818896800989616508196410,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 423865706808355818896800989616508196410,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "30e96232c7d6ec42786b4d7c4ec53823"
expiration: expiry-date="Tue, 13 Sep 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Sat, 13 Aug 2022 08:03:02 GMT
req-referer: http://oqn.rse.argus.int/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 112
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb803
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:36 GMT
age: 7414312
x-served-by: cache-iad-kcgs7200110-IAD, cache-iad-kcgs7200110-IAD, cache-lga21925-LGA, cache-iad-kiad7000141-IAD, cache-bma1627-BMA
x-cache: HIT, HIT, HIT, HIT, HIT
x-cache-hits: 1, 1, 1, 67, 1
x-timer: S1670406637.964745,VS0,VE4
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/2ee484e8144104fddbcd51037349c4d7.jpg
x-vcl-time-ms: 4
content-length: 7254
X-Firefox-Spdy: h2
api.viglink.com/api/sync.gif?key=74bad24252620514d1244cfba01f2ee2
200 OK 43 B URL HTTP/1.1 api.viglink.com/api/sync.gif?key=74bad24252620514d1244cfba01f2ee2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /api/sync.gif?key=74bad24252620514d1244cfba01f2ee2 HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: image/gif;charset=UTF-8
Date: Wed, 07 Dec 2022 09:50:36 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1e181f9ed09fb72bf80535f26ad7b91a
df966a15abb5b870e71527d73592f7d977011eb2
741e73d12b0fa5e76d9b4a78e8e70dbe307e059a0018aca245da0db44c5a5958
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.viglink.com/api/domains
200 OK 42 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 1a7c3842ce41b8838fc94dcd5679e018
42853571586cfa16b8f8caa4ab53c07398097fa2
6c03253c7895846056dcb245ee90bf4a3c611c7a651be8aab21f8b10875fa709
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 255
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://amrkhaled.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Wed, 07 Dec 2022 09:50:36 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 42
Connection: keep-alive
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/1ea46f957708662a097ea2ce0d0b0228.jpg
200 OK 7.6 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/1ea46f957708662a097ea2ce0d0b0228.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash fac6376bb4686d0c9be247aff6d63c69
66284c3375a00f96dec5f52c77c47c8b66a2dd11
6ad361e34885981470ffc6db0e9d7590b2b8171d00c7fc566d0930316b98e801
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/1ea46f957708662a097ea2ce0d0b0228.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 491705918612267754357656709696317210599,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 491705918612267754357656709696317210599,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "58f26ae26a3863ebe1bb7708e51320c9"
last-modified: Tue, 15 Nov 2022 13:42:42 GMT
req-referer: https://f7.no/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 1abb5f2a3cb3eb0166ff2485859ac69c
x-envoy-upstream-service-time: 598
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb202
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
age: 1787767
x-served-by: cache-iad-kjyo7100086-IAD, cache-iad-kcgs7200148-IAD, cache-bur-kbur8200077-BUR, cache-iad-kjyo7100103-IAD, cache-bma1627-BMA
x-cache: MISS, MISS, MISS, HIT, MISS
x-cache-hits: 0, 0, 0, 5, 0
x-timer: S1670406637.964627,VS0,VE98
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/1ea46f957708662a097ea2ce0d0b0228.jpg
x-vcl-time-ms: 98
content-length: 7644
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=2083348433.1670406633&jid=776916768&gjid=839849340&_gid=962705222.1670406633&_u=YEBAAUAAAAAAACAAI~&z=1689535974
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=2083348433.1670406633&jid=776916768&gjid=839849340&_gid=962705222.1670406633&_u=YEBAAUAAAAAAACAAI~&z=1689535974
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=2083348433.1670406633&jid=776916768&gjid=839849340&_gid=962705222.1670406633&_u=YEBAAUAAAAAAACAAI~&z=1689535974 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://amrkhaled.ahlamontada.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 07 Dec 2022 09:50:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1e181f9ed09fb72bf80535f26ad7b91a
df966a15abb5b870e71527d73592f7d977011eb2
741e73d12b0fa5e76d9b4a78e8e70dbe307e059a0018aca245da0db44c5a5958
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.viglink.com/api/sync.js?key=74bad24252620514d1244cfba01f2ee2
200 OK 43 B URL HTTP/1.1 api.viglink.com/api/sync.js?key=74bad24252620514d1244cfba01f2ee2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /api/sync.js?key=74bad24252620514d1244cfba01f2ee2 HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: image/gif;charset=UTF-8
Date: Wed, 07 Dec 2022 09:50:36 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive
api.viglink.com/api/domains
200 OK 41 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 3a2119550a98b44bae11c5115a2304a3
f0c558c8c79b4c788fc7d307de926f76bf075676
0fcd30b29444c7a48607104cd2256c772c375a58048958ea7a5b6667635467b1
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 243
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://amrkhaled.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Wed, 07 Dec 2022 09:50:36 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 41
Connection: keep-alive
api.viglink.com/api/domains
200 OK 42 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 761761e69b51f0ab8bf8ab615a13edec
baee4d0549b245319d7ef0f80f8ad8f9169c699d
a5a0583ff4e0105acd92da935655024dea1e398ab6030ae7a4473d937cb8120a
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 226
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://amrkhaled.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Wed, 07 Dec 2022 09:50:36 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 42
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0fa282ae07239f0cf04503485877d681
631aa2fff49d29c46341db6540d25917b3626ef5
9020928ea0c9addf3e0a04d78db4158b54b4f29577785b5adb4cf7f2949ced17
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9084a518c70ad57bb3226fb519b648fd
79348ebe6f5900a035d4d65e08a7409fd9708f15
f0c6b0f66c31aa7cb2d2808eb4c04c3681d48e731efc8cbba0f3fef1d218ce7b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
il-trc-events.taboola.com/forumotion-ar/log/3/bulk-metrics?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=2
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/3/bulk-metrics?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=2
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/bulk-metrics?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=2 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1693
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 07 Dec 2022 09:50:37 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A50%3A36.718&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=4500&cv=20221206-9-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A50%3A36.718&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=4500&cv=20221206-9-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A50%3A36.718&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=4500&cv=20221206-9-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 07 Dec 2022 09:50:37 GMT
x-fastly-to-nlb-rtt: 84559
access-control-allow-credentials: true
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/log/3/visible?tvi2=-2&route=AM%3AIL%3AV<i=deflated
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/visible?tvi2=-2&route=AM%3AIL%3AV<i=deflated
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/visible?tvi2=-2&route=AM%3AIL%3AV<i=deflated HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2593
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670406637.316483,VS0,VE87
x-vcl-time-ms: 87
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/log/3/bulk?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=2
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/bulk?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/bulk?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 4987
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670406637.322714,VS0,VE99
x-vcl-time-ms: 99
X-Firefox-Spdy: h2
15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic&encoded=1&uid=e5b98bb5-4f30-4844-a8d5-7132714fc50a-tucta89e769&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1670406635948&tagid=&cntry=NO&platform=1&sesid=1d56d9f6522f0d735903dc1a6c290c9b&itemid=/t270-topic&viewid=1670406633149&geolat=&geoing=&deviceifa=&appid=&sd=v2_1d56d9f6522f0d735903dc1a6c290c9b_e5b98bb5-4f30-4844-a8d5-7132714fc50a-tucta89e769_1670406633_1670406633_CNawjgYQ3pxDGL3t-d_OMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=81f3d59d56f7c3a735a67948a7ac27d5&appname=&cdb=&gdprApplies=true&rid=&sii=-4234658103797510756&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=
200 OK 8.9 kB URL HTTP/2 15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic&encoded=1&uid=e5b98bb5-4f30-4844-a8d5-7132714fc50a-tucta89e769&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1670406635948&tagid=&cntry=NO&platform=1&sesid=1d56d9f6522f0d735903dc1a6c290c9b&itemid=/t270-topic&viewid=1670406633149&geolat=&geoing=&deviceifa=&appid=&sd=v2_1d56d9f6522f0d735903dc1a6c290c9b_e5b98bb5-4f30-4844-a8d5-7132714fc50a-tucta89e769_1670406633_1670406633_CNawjgYQ3pxDGL3t-d_OMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=81f3d59d56f7c3a735a67948a7ac27d5&appname=&cdb=&gdprApplies=true&rid=&sii=-4234658103797510756&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=
IP
Hash 40abf198b6a66afb53ebc48de7229630
bb15dc7ed463ef64b62545e5a1a9d0f096b26bc4
f9e97a8a887146d4778d49235f509223a6321eed93984a924378a9048eb37f62
GET /tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic&encoded=1&uid=e5b98bb5-4f30-4844-a8d5-7132714fc50a-tucta89e769&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1670406635948&tagid=&cntry=NO&platform=1&sesid=1d56d9f6522f0d735903dc1a6c290c9b&itemid=/t270-topic&viewid=1670406633149&geolat=&geoing=&deviceifa=&appid=&sd=v2_1d56d9f6522f0d735903dc1a6c290c9b_e5b98bb5-4f30-4844-a8d5-7132714fc50a-tucta89e769_1670406633_1670406633_CNawjgYQ3pxDGL3t-d_OMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=81f3d59d56f7c3a735a67948a7ac27d5&appname=&cdb=&gdprApplies=true&rid=&sii=-4234658103797510756&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv= HTTP/1.1
Host: 15.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
machineid: 1483
link: <https://am-wf.taboola.com>; rel=preconnect
xvid-debug: mrmr - :
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670406637.998947,VS0,VE34
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=2083348433.1670406633&jid=776916768&_u=YEBAAUAAAAAAACAAI~&z=1947137350
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=2083348433.1670406633&jid=776916768&_u=YEBAAUAAAAAAACAAI~&z=1947137350
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=2083348433.1670406633&jid=776916768&_u=YEBAAUAAAAAAACAAI~&z=1947137350 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 09:50:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&cmcv=&pix=undefined&cb=1670406637049&uv=123073532&tms=1670406637049&abt=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=30482bed-9351-4052-acac-56d2fca2dfc7&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 866 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&cmcv=&pix=undefined&cb=1670406637049&uv=123073532&tms=1670406637049&abt=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=30482bed-9351-4052-acac-56d2fca2dfc7&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
Hash 4146482a81137987bd4bd2c11b04d7e8
2b55b3e7ea6d11176949466c09da51f385837971
9e1e574f1635e5cd54eb00cc227b81e9569b7281a1edc3fa7bb8e7f644d041c9
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&cmcv=&pix=undefined&cb=1670406637049&uv=123073532&tms=1670406637049&abt=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=30482bed-9351-4052-acac-56d2fca2dfc7&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670406637.372384,VS0,VE23
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&cmcv=&pix=31589837&cb=1670406637048&uv=123073532&tms=1670406637048&abt=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1670406630772!ts:1670406637048&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&cmcv=&pix=31589837&cb=1670406637048&uv=123073532&tms=1670406637048&abt=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1670406630772!ts:1670406637048&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&cmcv=&pix=31589837&cb=1670406637048&uv=123073532&tms=1670406637048&abt=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1670406630772!ts:1670406637048&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:37 GMT
content-length: 0
X-Firefox-Spdy: h2
connect.topicit.net/scripts/connect.js
200 OK 1.8 kB URL HTTP/2 connect.topicit.net/scripts/connect.js
IP
File type ASCII text, with very long lines (615)
Hash 29756add28d8cc6f5db4004c306d7b6f
17374aa2e7bb27611300a2113ee8a095ef6b8766
01ee1e289172dfd60d277acf770ad584bb8095aa197358eb8a1a6c01ca517a04
GET /scripts/connect.js HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5437
access-control-allow-origin: *
etag: W/"5d653880-153d"
last-modified: Tue, 27 Aug 2019 14:04:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=86400
cf-cache-status: HIT
age: 2557
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=huB6TwbJRU8nLMaPv%2FfvRXzlDR6kI0T4v2%2BqWmxNs1gd11YcWPb%2F0Ke%2BfFPrLvUd6nDNsvRUPoe%2BAeYvm50v5mJJWTiEGkBFt2j%2FD%2FzAYnMEhSOZ4Zawkpg9GyukwFh%2BeC1T8wHY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8f3bd00afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 83b14c1d1aad24849306b04249fca7ef
a5277e7a4b9c65431ee3be6d2694321abb8292ce
1f7c73b75fc9d8461bc6ccd6e95ca441c545de9d2a018e24095a1ca07b75a8a2
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3631
Cache-Control: max-age=141780
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:37 GMT
Etag: "638fda92-1d7"
Expires: Fri, 09 Dec 2022 01:13:37 GMT
Last-Modified: Wed, 07 Dec 2022 00:13:06 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
vidstat.taboola.com/vpaid/units/123073_532/assets/css/cmOsUnit.css
200 OK 8.3 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/123073_532/assets/css/cmOsUnit.css
IP
Hash a28320a69408adba1f01f56d6eb80708
8012c7108fab547cf31481cfda7cb49e654a0542
befbb274b7045e7e5791a4badbe46e1a2e367e6570da7cd0ac127acc4b8e8991
GET /vpaid/units/123073_532/assets/css/cmOsUnit.css HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7Es+l/G2/jWYMFZjotYuKna8q2enfov8gC3xX9s76oaiR1iYcZjgArOyK4/9da3HZsXw9sRGPCk=
x-amz-request-id: W3VGAVAZNQX8GEQF
last-modified: Wed, 07 Dec 2022 08:54:08 GMT
etag: "a28320a69408adba1f01f56d6eb80708"
x-amz-meta-ctime: 1670403247
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1670403246
content-type: text/css
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
via: 1.1 varnish
age: 2299
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 109
x-timer: S1670406638.668181,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 8297
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 07 Dec 2022 09:50:37 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9a3006a0-7614-11ed-96e3-169e7f670306; expires=Wed, 04-Jan-2023 09:50:37 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a300701-7614-11ed-96e3-169e7f670306
X-fe: 38
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1670406637064&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=123073227&pt=854287221&tz=0&viewable=true&ddast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Famrkhaled.ahlamontada.net&en=1
200 OK 504 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1670406637064&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=123073227&pt=854287221&tz=0&viewable=true&ddast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Famrkhaled.ahlamontada.net&en=1
IP
File type ASCII text, with very long lines (1344), with no line terminators
Hash 3a42793572e8cddc6381781765e89280
50ab08c0a70c1f26d6106393d0b5bbcdb6c8e85a
a57d92ba766695f988c35db3c06cb86f0bc25bb54b90a0e9b4dc158352142e69
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1670406637064&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=123073227&pt=854287221&tz=0&viewable=true&ddast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Famrkhaled.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1430
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670406638.501565,VS0,VE82
vary: Accept-Encoding
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 07 Dec 2022 09:50:37 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9a35fb97-7614-11ed-a9a8-1be234f70506; expires=Wed, 04-Jan-2023 09:50:37 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a35fbcf-7614-11ed-a9a8-1be234f70506
X-fe: 142
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 07 Dec 2022 09:50:37 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9a395251-7614-11ed-9d21-1a27ea400406; expires=Wed, 04-Jan-2023 09:50:37 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a3952bd-7614-11ed-9d21-1a27ea400406
X-fe: 26
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a300701-7614-11ed-96e3-169e7f670306
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a300701-7614-11ed-96e3-169e7f670306
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a300701-7614-11ed-96e3-169e7f670306 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 07 Dec 2022 09:50:37 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9a395a96-7614-11ed-893b-1342c0320206; expires=Wed, 04-Jan-2023 09:50:37 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 90
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a35bc7d-7614-11ed-b9cc-14f0ef8b0106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a35bc7d-7614-11ed-b9cc-14f0ef8b0106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a35bc7d-7614-11ed-b9cc-14f0ef8b0106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 07 Dec 2022 09:50:37 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9a406e12-7614-11ed-9345-14684a3a0206; expires=Wed, 04-Jan-2023 09:50:37 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 117
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a35fbcf-7614-11ed-a9a8-1be234f70506
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a35fbcf-7614-11ed-a9a8-1be234f70506
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a35fbcf-7614-11ed-a9a8-1be234f70506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 07 Dec 2022 09:50:37 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9a409944-7614-11ed-a6e3-175cf56a0106; expires=Wed, 04-Jan-2023 09:50:37 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 24
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
vidstat.taboola.com/vpaid/units/123073_532/infra/cmTagWIDGET_ITEM.js
200 OK 129 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/123073_532/infra/cmTagWIDGET_ITEM.js
IP
File type Unicode text, UTF-8 text, with very long lines (65489), with no line terminators
Size 129 kB (128682 bytes)
Hash bd9899d4bd24ac617b6b316b68e1c847
513ec47feef40ecebcae7a00e552f224883d91f1
5cee9a8011c3d4245f454ae86ed6fe36b6bd7ebee930cafa7952e4c18aafb1f7
GET /vpaid/units/123073_532/infra/cmTagWIDGET_ITEM.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: k/LiczltAnip7jjZE1pY1Lh8/n1zOF65+g7Mc4PWdfGZB0VccsaAkojL6K/KDN7j2tiC7g0S00M=
x-amz-request-id: 9FD2RK8THGDBPTR2
last-modified: Wed, 07 Dec 2022 08:53:16 GMT
etag: "bd9899d4bd24ac617b6b316b68e1c847"
x-amz-meta-ctime: 1670403195
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1670403194
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
via: 1.1 varnish
age: 2291
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 58
x-timer: S1670406638.787079,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 128682
X-Firefox-Spdy: h2
amrkhaled.ahlamontada.net/sw.js
200 OK 2.5 kB URL HTTP/2 amrkhaled.ahlamontada.net/sw.js
IP
File type ASCII text, with very long lines (5459)
Hash 14adaa41acb449e7b61d7391c9994902
cf5e416a6ddc253ccad888ff1618378045371976
c5a09ff853f82b62a246cbd4c1f583a9696a782526d04388a1252d82620bf328
GET /sw.js HTTP/1.1
Host: amrkhaled.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amrkhaled.ahlamontada.net/t270-topic
Connection: keep-alive
Cookie: exadd=167042; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; toolbar_state=fa_show; _ga=GA1.2.2083348433.1670406633; _gid=GA1.2.962705222.1670406633; _gat_gtag_UA_144347007_1=1; _gat_gtag_UA_47873483_1=1; trc_cookie_storage=taboola%2520global%253Auser-id%3De5b98bb5-4f30-4844-a8d5-7132714fc50a-tucta89e769
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:36 GMT
content-type: application/javascript
last-modified: Tue, 27 Aug 2019 13:54:01 GMT
etag: W/"5d6535f9-1554"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&cmcv=&pix=undefined&cb=1670406637302&uv=123073532&tms=1670406637302&abt=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=53d58f3e-b854-471b-8599-4e4b89e7d51d&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 448 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&cmcv=&pix=undefined&cb=1670406637302&uv=123073532&tms=1670406637302&abt=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=53d58f3e-b854-471b-8599-4e4b89e7d51d&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (928), with no line terminators
Hash 47897f1252effd372a718835c1852fa8
6e520767370f2787794a30be50e2403b610c877a
73dad968c97d0cb73a780f1d3812810ddbe1e00185069a2ee8cea8386f0e2589
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&cmcv=&pix=undefined&cb=1670406637302&uv=123073532&tms=1670406637302&abt=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=53d58f3e-b854-471b-8599-4e4b89e7d51d&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670406638.625020,VS0,VE25
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash b255b92f542b46f6800fc1edfd572b11
18f16314bffcefd30d30b3d4223e930a1b3faff4
e302a28c6860eadcf050556bf99a8a5d3327e595505e1878de6bce506fa11bfe
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 09:50:37 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 11 Dec 2022 06:44:39 GMT
ETag: "18f16314bffcefd30d30b3d4223e930a1b3faff4"
Last-Modified: Wed, 07 Dec 2022 06:44:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2207
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775c5bae8d5ab527-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 9cf3ccbda3bc6b018f1dee2e36b1706f
8ff67eb73ad0be65572b3335016e88d7eb7c6acf
8d859aa693421fc54385d70644f1157fb2c988fbb25570908fcc8ff3d1cf18e0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3585
Cache-Control: max-age=109295
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 09:50:37 GMT
Etag: "638f5bdb-1d7"
Expires: Thu, 08 Dec 2022 16:12:12 GMT
Last-Modified: Tue, 06 Dec 2022 15:12:27 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ups.analytics.yahoo.com/ups/58534/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 07 Dec 2022 09:50:37 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58534/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBO1hkGMCEP45Iiq3z173GUTGCqqWWwIFEgEBAQGzkWOaYwAAAAAA_eMAAA&S=AQAAAkGUyu5rEg_aKEi1f9RChvw; Expires=Thu, 7 Dec 2023 15:50:37 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:37 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 07 Dec 2022 09:50:37 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBO1hkGMCEI_xN1gQ9K5w_LH7B0OkHecFEgEBAQGzkWOaYwAAAAAA_eMAAA&S=AQAAAguRchVEyF7Ex0KA-Y2Y2DM; Expires=Thu, 7 Dec 2023 15:50:37 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4a4d131bd7d8c86082311ef51a15aec1
4d0ab3e3ed92eafa5f130bb95be983f548c2af26
3b5e894fb9f5ec86402893a5d6ea151d6948b6220d77889aca066bc2b826c70f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117095
Date: Wed, 07 Dec 2022 09:50:38 GMT
Etag: "638f7832-1d7"
Expires: Thu, 08 Dec 2022 18:22:13 GMT
Last-Modified: Tue, 06 Dec 2022 17:13:22 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ivoQxiPTA3gJWgghEUUZdlcYqkCsEWVOWrp2OxCDDH3zZl9lWgwH-w==
Age: 4131
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 43 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:38 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&excid=22&docw=0&cijs=1&nlb=true
200 OK 1.4 kB URL HTTP/2 am-match.taboola.com/sync?dast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
Hash 3c5336b8e8d8b1f1e8d24d3b022dfa90
37adc011c26b1befd7d232af1ba559457a50718a
4e00b9434076922470fc9f21b508354d4668dc0a12aca71473f94825c445bfe6
GET /sync?dast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:37 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3401
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a7fd07f-7614-11ed-89af-1fe3cd8f0506
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a7fd07f-7614-11ed-89af-1fe3cd8f0506
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a7fd07f-7614-11ed-89af-1fe3cd8f0506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 07 Dec 2022 09:50:38 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9a856538-7614-11ed-bc7b-153cf9b00106; expires=Wed, 04-Jan-2023 09:50:38 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 122
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
200 OK 43 B URL HTTP/2 x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?gdpr=1&us_privacy=1---&ssp=taboola HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:38 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
vidstat.taboola.com/vpaid/vPlayer/player/v123073.227/OvaMediaPlayer.js
200 OK 88 kB URL HTTP/2 vidstat.taboola.com/vpaid/vPlayer/player/v123073.227/OvaMediaPlayer.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 4d191cc3ed7c1bf176cb4b3a4b7cca92
5df0df11a5629558be2bb21d6752bb5d11715898
4a2d281532671565121e860dfe684695d49335923631d08231fab6ccd2eee111
GET /vpaid/vPlayer/player/v123073.227/OvaMediaPlayer.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: f2pgx/DlyU52Cl2OfWCiXU52RNBZbDZgP5cX2Mp9OaE/kSstiYeCS6/Z57fDqNeIOc8bRKWFJ/c=
x-amz-request-id: 9WCVVDPQYR0VSBXB
last-modified: Wed, 07 Dec 2022 08:54:42 GMT
etag: "4d191cc3ed7c1bf176cb4b3a4b7cca92"
x-amz-meta-ctime: 1670403281
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1670403269
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:38 GMT
via: 1.1 varnish
age: 2299
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 107
x-timer: S1670406638.270908,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 88528
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
200 OK 254 B URL HTTP/2 cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
IP
File type PNG image data, 12 x 12, 8-bit gray+alpha, non-interlaced\012- data
Hash dfa7b52c86e56bd67fa4002f6ed19854
7df722645482433c2b5c8d8ab4272a9874592f27
f68019eb4b4e5933301d4ee75969e0cb94ed8333bf514630fa749eb9c3e483c9
GET /libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: c3AK0F63Rmz1U+ZkwDZRH6hJiJRTGpZB8kTBPWz0vwbg9siBxtMOH8aEqr1NtVeNHtLhLAVUR9E=
x-amz-request-id: 4JKSR0YA3KVH073N
x-amz-replication-status: COMPLETED
last-modified: Wed, 24 Jun 2015 07:14:11 GMT
etag: "dfa7b52c86e56bd67fa4002f6ed19854"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1377415166/atime:1435052450/md5:dfa7b52c86e56bd67fa4002f6ed19854/ctime:1422381567
x-amz-version-id: hL.cyLD7Q4TL5ceY.7JQwF9m5IYI8mkC
content-type: image/png
server: AmazonS3
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:38 GMT
via: 1.1 varnish
age: 8269
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 1003
x-timer: S1670406638.271194,VS0,VE0
cache-control: private,max-age=31536000
abp: 17
content-length: 254
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&excid=22&docw=0&cijs=1&nlb=false
200 OK 92 kB URL HTTP/2 am-match.taboola.com/sync?dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
Hash ef84803260ff9aeee43436bb420278e5
8fd146a9db73949fedec9b0968cbed7db9ad40c9
dfcae763d57efb77d0be77f4fdc20d9477e0eb5f2b535876d6355f27db1cfcfd
GET /sync?dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:38 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3408
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:38 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&excid=22&docw=0&cijs=1&nlb=true
200 OK 928 B URL HTTP/2 am-match.taboola.com/sync?dast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (928), with no line terminators
Hash 8227d4c992bdc2c4c5804d84b62fda07
83839cdf21b0918f46e16e1e2c732c94b3c13f4f
59b21f9cd8081c4bd058979d3b7c6fab9785b7ce8214db75f94d2bb0d92142cb
GET /sync?dast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:38 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a9f8dd0-7614-11ed-80a7-1384e0ef0206
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a9f8dd0-7614-11ed-80a7-1384e0ef0206
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9a9f8dd0-7614-11ed-80a7-1384e0ef0206 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 07 Dec 2022 09:50:38 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9aa849ef-7614-11ed-9474-1fe3cd8f0206; expires=Wed, 04-Jan-2023 09:50:38 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 23
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cdn.taboola.com/scripts/cds-pips.js
200 OK 1.3 kB URL HTTP/2 cdn.taboola.com/scripts/cds-pips.js
IP
File type ASCII text, with very long lines (3545), with no line terminators
Hash 780c5c514014519ce276709f515905a0
04fe86d00b9c9077effe05171d066d243ecab221
015db06150b62ad2ad533883652174ebb6f07e24a7147fdac01a0ccd266e3f30
GET /scripts/cds-pips.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2KBeU0d7OyPXtZDYUoIqlTBmhGhsve90tjYoemCxISjKQrNgcxT28sPXVt5KfJt+6r7dFoJgA8g=
x-amz-request-id: NFWGDQGY1WQ95XHE
x-amz-replication-status: COMPLETED
last-modified: Wed, 12 Oct 2022 13:57:57 GMT
etag: "383fa66d2a0a09f4a6e64a9593ad43bb"
x-amz-version-id: z5FoayaLm_Bvew3pbkytkoHczFCvkPwT
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:38 GMT
via: 1.1 varnish
age: 2753
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 5123
x-timer: S1670406638.465414,VS0,VE0
vary: Accept-Encoding
abp: 17
cache-control: private, max-age=3600
content-length: 1340
X-Firefox-Spdy: h2
x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
200 OK 43 B URL HTTP/2 x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?gdpr=1&us_privacy=1---&ssp=taboola HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:38 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 07 Dec 2022 09:50:38 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58534/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBO5hkGMCEEjED0SQ7-YtccjiQqxllXsFEgEBAQGzkWOaYwAAAAAA_eMAAA&S=AQAAAsC15ykxG4uvWJ0LolMWPko; Expires=Thu, 7 Dec 2023 15:50:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
pips.taboola.com/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 6c3e226b4d4795d518ab341b0824ec29
eef19c54306daa69eda49c0272623bdb5e2b341f
fb329000228cc5a24c264c57139de8bf854fc86fc18bf1c04ab61a2b5cb4b921
GET / HTTP/1.1
Host: pips.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-allow-methods: GET
access-control-allow-origin: https://amrkhaled.ahlamontada.net
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1632-BMA
x-cache: HIT
x-cache-hits: 0
cache-control: no-store
content-length: 4
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 07 Dec 2022 09:50:38 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBO5hkGMCEM2CX1HoqSJjVVrwBDyqB8MFEgEBAQGzkWOaYwAAAAAA_eMAAA&S=AQAAApdj80Ng78a73oNgc0XtYc0; Expires=Thu, 7 Dec 2023 15:50:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amrkhaled.ahlamontada.net/
Content-Type: application/json
Origin: https://amrkhaled.ahlamontada.net
Content-Length: 405
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:40 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 41af609250248e994f4e1e0c4f6af630
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&excid=22&docw=0&cijs=1&nlb=false
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7YWcCFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJDMYDScTl8mt3KwWa9FgNVkrPA6PWzUbWWYeh2Vk8_iGQDKD0XAycZncys1qsRYNVpO1wuPwuFWzkWXmcVhGNo9vChE3GQ6fg4Go6Hpb7A6n2fMGFjSdDp_rXq9wW75Gh9llsiuMZofbbzc9TA673GX6iy67wVr0Nzw9dgAAAAB4-P___4cAAAAAiAAAAACQAAAAAKAIqPi3ELgAAAAAwPj____XAPjkIHjP2e8PAAAAABAAAAAAEoCB1YASgI_zlZP__________5gB-swbmf____8bgx6ABx-AByEAAICLIUZ1xfdzWR1oooK_IkYAAAAAW1oqmkeTOqGyqPr__--3ArgCAAggXPfHw87SHZR4CwMAAAgYW6CHxe83O-wav9tl__________9m_2f_aEJvo9dpQSyj12q_gAAAa7-AAABs6gYA8BYAF3QErRgMVqcQu-FssRvNNqPZAQAAANz9____64HEyDUbOWe21WQyM4x8m9VysBl5HAvbxrIcbJwT791RmSSQLTef9UXcZDh8DgaiouttsTucZs_9KFqy3C13q9FkMRotl5vdcDMa7G8gBqsBTsRguZxMFpPdarQabYa70WywQIEYTJCiJavlcrnabFar3WgxG2yWw80GKVq1mo02g-FqNpntdqvhYLgcjZCiJcvdcrcaTRaj0XK52Q03o8EQYco1cQ4nFtdaNPMM1qLhaLRWGEeutW6xmewWo5nHNVi4Ra-P6WFcrnyz5RYFAzb2InlapBOJc7LZrBwWm2XhnHk8NpNtslvOPLbBZuIc7DbOiViiOVmkE9ll3xi5ZiPnzLaaTGaGkW-zWg42I49jYdtYloONc-JvuSbO4cTiWotmnsFaNByN1grjyLXWLTaT3WI087gGC7fo9TE9jMuVb7bcN2a7wWgwm202-8ZsNxgNZrPNZt-hM3xXn7PRGRxPPDJn9Bb5-2wOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4htfE8PdTP6_d7O0gNhgUsURwkU5kfsvr7Tc9_Xa3wnIRS5Smi3SiF112g7Xob3h6LGKJ4HSRTkQv4-mi_iNDLubKwVw0mStWo1UCAAAAAAAAAFjCnHkTAAAAgNNARoPNcLXOAxksB7vlarkAEM5euj93BiHQpuKou8U7eOQJ642cxY0fN5jf8nr7TU-_3a2wXBnggZqcefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAAAgvg8U5YQbtV74AQ!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:37 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 0 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:38 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
twemoji.maxcdn.com/twemoji.min.js
200 OK 0 B URL HTTP/2 twemoji.maxcdn.com/twemoji.min.js
IP
GET /twemoji.min.js HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:15 GMT
access-control-allow-origin: *
etag: W/"62451edf-3bc8"
expires: Fri, 06 Jan 2023 09:50:32 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: 7B1C:D2D3:4824A8:4A013B:638A8635
vary: Accept-Encoding
x-fastly-request-id: 13302c302e4dcbfe7e16260e2cd5983d6eec8ece
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
amrkhaled.ahlamontada.net/serviceworker.js
200 OK 0 B URL HTTP/2 amrkhaled.ahlamontada.net/serviceworker.js
IP
GET /serviceworker.js HTTP/1.1
Host: amrkhaled.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: exadd=167042; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/javascript
last-modified: Thu, 25 Feb 2021 14:30:57 GMT
etag: W/"6037b4a1-b0d"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
illiweb.com/rs3/66/frm/jquery//ticker/ticker.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/66/frm/jquery//ticker/ticker.js
IP
GET /rs3/66/frm/jquery//ticker/ticker.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=8803
access-control-allow-origin: *
expires: Thu, 23 Nov 2023 09:26:05 GMT
last-modified: Tue, 27 Aug 2019 14:00:13 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1211067
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xE4evXJqiWCmWT%2F1PXBI9bGjKnm1tXVD2mVZzx1cVeDRd5jNTPt6Y2NTmSp%2BDhMCXI40G3QkeYir59jro8DnBbT5rbdtMTUJYB7COsLgzMzAD0sGWPZ2EnXeTYJE2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8bfc7c0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/trc/3/json?tim=09%3A50%3A33.152<i=deflated&data=%7B%22id%22%3A966%2C%22ii%22%3A%22%2Ft270-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1670357703571%2C%22vi%22%3A1670406633149%2C%22cv%22%3A%2220221206-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic%22%2C%22vpi%22%3A%22%2Ft270-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A27134%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A548.4000244140625%2C%22mw%22%3A0%2C%22amw%22%3A1107.7666015625%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A27099.900390625%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft270-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
200 OK 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/trc/3/json?tim=09%3A50%3A33.152<i=deflated&data=%7B%22id%22%3A966%2C%22ii%22%3A%22%2Ft270-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1670357703571%2C%22vi%22%3A1670406633149%2C%22cv%22%3A%2220221206-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic%22%2C%22vpi%22%3A%22%2Ft270-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A27134%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A548.4000244140625%2C%22mw%22%3A0%2C%22amw%22%3A1107.7666015625%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A27099.900390625%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft270-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
IP
GET /forumotion-ar/trc/3/json?tim=09%3A50%3A33.152<i=deflated&data=%7B%22id%22%3A966%2C%22ii%22%3A%22%2Ft270-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1670357703571%2C%22vi%22%3A1670406633149%2C%22cv%22%3A%2220221206-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic%22%2C%22vpi%22%3A%22%2Ft270-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A27134%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A548.4000244140625%2C%22mw%22%3A0%2C%22amw%22%3A1107.7666015625%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A27099.900390625%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft270-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:34 GMT
via: 1.1 varnish
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670406634.585195,VS0,VE424
vary: Accept-Encoding
x-vcl-time-ms: 424
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 70501
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
amrkhaled.ahlamontada.net/?utm_source=pwa
200 OK 0 B URL HTTP/2 amrkhaled.ahlamontada.net/?utm_source=pwa
IP
GET /?utm_source=pwa HTTP/1.1
Host: amrkhaled.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amrkhaled.ahlamontada.net/serviceworker.js
Connection: keep-alive
Cookie: exadd=167042; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; toolbar_state=fa_show
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:33 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
expires: Wed, 07 Dec 2022 00:00:00 GMT
last-modified: Wed, 07 Dec 2022 09:50:33 GMT
vary: User-Agent
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
illiweb.com/rs3/66/frm/lang/ar.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/66/frm/lang/ar.js
IP
GET /rs3/66/frm/lang/ar.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=74879
access-control-allow-origin: *
expires: Thu, 23 Nov 2023 09:36:20 GMT
last-modified: Thu, 08 Sep 2022 07:38:48 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1210452
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F9WqXH5CjylJ4jQMUDyrSWeZOYp3i4%2B0brbKvv8frns0KzztiFyTG3Rb379zxOot48KwHoul1DLBNM1goim0jxrzqYugF%2BNlRjlFZcWa7h9Lcdm1CLtmCKwG8KG4Jg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8bdc630afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/66/frm/jquery/cookie/jquery.cookie.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/66/frm/jquery/cookie/jquery.cookie.js
IP
GET /rs3/66/frm/jquery/cookie/jquery.cookie.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Thu, 23 Nov 2023 09:22:23 GMT
last-modified: Wed, 09 Sep 2020 09:40:28 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1211289
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ALDmzHKs2DI61WHD%2FFFO6zCM%2BC99YEPepXausrGHOY85v62fyt9uDYsldsza92W5mOERkoK1q3nPQjt8gUqSWTIAQ0cTuR1mbzgHohu7V2wlB%2FJ8ff4UwYXZGqzYmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8bdc690afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=amrkhaled.ahlamontada.net
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=amrkhaled.ahlamontada.net
IP
GET /syncframe?origin=publishertag&topUrl=amrkhaled.ahlamontada.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=25ea62eb-4f28-40fa-a720-7757695a43b0; expires=Mon, 01 Jan 2024 09:50:31 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 859910
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.betgorebysson.club/?rb=2ae6HK8ECEKrUFv5CrCFo0t-R8sBo0nkiuO8NTPlcbuMxN5W1CMhVquh8oTYJSwxpx8PjjrOAnqZPAp5jgmJjWoCsHbkIXJr76YWuQ-s_eDxj937StJNf2PCa4j9ApWvprvV1woHSQuxQlE1CGxlosthijZBp1-nPHk_nLOXZHkmCgcMVMH0295GO201Jl52w1ajJQ7W9aAAW4Q4OTQzYfjYbQ27bSPbWKUe_XgEfbLRIPioXab7oKwcj8k-X3T_&request_ab2=96001&zoneid=3765907&js_build=iclick-v1.458.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.458.0&bs=e328bc39-974e-4906-84d3-e969992258a0&userId=769d551d98944dbb85cd531cdeb3b22f&m=link
200 OK 0 B URL HTTP/2 cdn.betgorebysson.club/?rb=2ae6HK8ECEKrUFv5CrCFo0t-R8sBo0nkiuO8NTPlcbuMxN5W1CMhVquh8oTYJSwxpx8PjjrOAnqZPAp5jgmJjWoCsHbkIXJr76YWuQ-s_eDxj937StJNf2PCa4j9ApWvprvV1woHSQuxQlE1CGxlosthijZBp1-nPHk_nLOXZHkmCgcMVMH0295GO201Jl52w1ajJQ7W9aAAW4Q4OTQzYfjYbQ27bSPbWKUe_XgEfbLRIPioXab7oKwcj8k-X3T_&request_ab2=96001&zoneid=3765907&js_build=iclick-v1.458.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.458.0&bs=e328bc39-974e-4906-84d3-e969992258a0&userId=769d551d98944dbb85cd531cdeb3b22f&m=link
IP
GET /?rb=2ae6HK8ECEKrUFv5CrCFo0t-R8sBo0nkiuO8NTPlcbuMxN5W1CMhVquh8oTYJSwxpx8PjjrOAnqZPAp5jgmJjWoCsHbkIXJr76YWuQ-s_eDxj937StJNf2PCa4j9ApWvprvV1woHSQuxQlE1CGxlosthijZBp1-nPHk_nLOXZHkmCgcMVMH0295GO201Jl52w1ajJQ7W9aAAW4Q4OTQzYfjYbQ27bSPbWKUe_XgEfbLRIPioXab7oKwcj8k-X3T_&request_ab2=96001&zoneid=3765907&js_build=iclick-v1.458.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Famrkhaled.ahlamontada.net%2Ft270-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.458.0&bs=e328bc39-974e-4906-84d3-e969992258a0&userId=769d551d98944dbb85cd531cdeb3b22f&m=link HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amrkhaled.ahlamontada.net/
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Cookie: OAID=769d551d98944dbb85cd531cdeb3b22f; oaidts=1670406636
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:36 GMT
content-type: application/json
x-trace-id: df75abd50145a90f27d6643a6d63b8f8
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=769d551d98944dbb85cd531cdeb3b22f; expires=Thu, 07 Dec 2023 09:50:36 GMT; path=/; secure; SameSite=None
oaidts=1670406636; expires=Thu, 07 Dec 2023 09:50:36 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 14 Dec 2022 09:50:36 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:36 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 15:07:42 GMT
etag: W/"637e373e-32a6"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4961
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kg8h72sYWeM7bg9AqlDqxgbGsR9KoY6l81XZI2IgA7LnsJvvAQpH%2BBOH9o7oXulumFJFx9bbFFDH7oY%2FV3FbN1EGIvc9tKThuMX6do6%2F81sODL0UJ%2BuOv1SIvPgs2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5ba5fbc50b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/66/frm/embed/FA_Embed.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/66/frm/embed/FA_Embed.js
IP
GET /rs3/66/frm/embed/FA_Embed.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Thu, 23 Nov 2023 09:22:27 GMT
last-modified: Tue, 20 Apr 2021 14:17:00 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1211285
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=baXzUIgJ56WYI4VLXdCce4U38rFp8gze0f6Lw063ii2d5iv91XVA8DkdL%2BDciwyVAR1LL1OoJFYF%2Bvp%2BmJ6QEROr%2FhUWxpWeM0u%2BT2CbqLrhOTeqK%2B4Bbj4nlE5XAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8bec750afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/66/frm/jquery/toolbar/FAToolbar.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/66/frm/jquery/toolbar/FAToolbar.js
IP
GET /rs3/66/frm/jquery/toolbar/FAToolbar.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Thu, 23 Nov 2023 09:22:23 GMT
last-modified: Wed, 17 Aug 2022 08:52:02 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1211289
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HMj6mcwbeOAQZmlR0kX9wldssyDBDNX0EPF8TvbpQG2KC5j5uUHUhfUxRmv7v0ARhHm%2BxYvj9zSj4C8bh%2BajywnYG%2FkIqYHyv%2BdJ9aRmPxEjCVRnkwKTm5J9CxioVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775c5b8bfc7e0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stootsou.net/pfe/current/tag.min.js?z=2308013
200 OK 0 B URL HTTP/2 stootsou.net/pfe/current/tag.min.js?z=2308013
IP
GET /pfe/current/tag.min.js?z=2308013 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 15:42:47 GMT
etag: W/"6388cb77-390a"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1670406637307&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=123073227&pt=854287221&tz=0&viewable=true&ddast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Famrkhaled.ahlamontada.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1670406637307&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=123073227&pt=854287221&tz=0&viewable=true&ddast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Famrkhaled.ahlamontada.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1670406637307&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=123073227&pt=854287221&tz=0&viewable=true&ddast=V7UK8CFgO0vKQsPZa8lQS0vKQsPZa8lQUAAAAGBuIHJLUZuYYzz8otMa5Ga9FuMXELV8vlWrQyTYzLlW_kWoyMQAKzkcPlmQzXEtNu5RZtPLa1xDPbrVWGjc043Kw8tuHMCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjewoOl0-Fz3eoXb8jU6zC6TXWE0O9x-u-lhctjlLtNfdNkN1qK_4emxAwAAAMADgNVbJsQPIABABAAAAIAEAAAAAEVAxb-FwAUAAAAABoAByYUGwCcHwXvOfn8AADRsgQAACGCQAAysBpQAfJyvnAAAAAAAAAAAsPz____HAOxhjckAjOzv9AA8-AA8EBUsFzECAAAA2NJS0Tya1AmVRRUAAEG6FcAVAEAA4bp_4XQYAABAwNgCPSx-v9lh1_jdLgMAAAAAAAAAMPs_-0cTesOVSgtiGb1W-wUEAFj7BQQAYFM3AIC3ALigI2jFYLA6hdgNZ4vdaLYZzQ4AAADg7v___18PJEau2cg5s60mk5lh5NusloPNyONY2DaW5WDjnHjvjsokgWy5-azPQ1hmv-8gYnm-pr_hIONbXm-DqOh6W-wOp9lzP4qWLHfL3Wo0WYxGy-VmN9yMBvsbiMFqgBMxWC4nk8VktxqtRpvhbjQbLFAgBhOkaMlquVyuNpvVajdazAab5XCzQYpWrWajzWC4mk1mu91qOBguRyOkaMlyt9ytRpPFaLRcbnbDzWgwRJhyTZzDicW1Fs08g7VoOBqtFcaRa61bbCa7xWjmcQ0WbtHrY3oYlyvfbLlFwYCNvQgu0onMb3m9_aan3-5WWC5iieZkkU5kl31j5JqNnDPbajKZGUa-zWo52Iw8joVtY1kONs6Jv-WaOIcTi2stmnkGa9FwNForjCPXWrfYTHaL0czjGizcotfH9DAuV77Zct-Y7QajwWy22ewbs91gNJjNNpt9h87wXX3ORmdwPPHInNFb5O-zOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwekinYhextNFLJE8LdKJcDHzjFzLkWs28208C99mtbDtlqPhwrfwWHYj10QsUZou0oledNkN1qK_4emxqP_IkIu5cjAXTeaK1WiVAAAAAAAAAACWMGfeBAAAAOA0kNFgM1wtFwDC2Uv3584gBNpUHHW3eAePPGG9kbO48eMG81teb7_p6be7FZYrAzxQkzNv9kwQa7Va1gAAAALYAAAAAdy6eQvAZuT2gaKccKPWCz8A!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!pl123073-227_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Famrkhaled.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://amrkhaled.ahlamontada.net
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1408
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://amrkhaled.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 09:50:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1627-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670406638.795605,VS0,VE112
vary: Accept-Encoding
X-Firefox-Spdy: h2
amrkhaled.ahlamontada.net/t270-topic
200 OK 0 B URL HTTP/2 amrkhaled.ahlamontada.net/t270-topic
IP
GET /t270-topic HTTP/1.1
Host: amrkhaled.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:31 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache
pragma: no-cache
expires: Wed, 07 Dec 2022 00:00:00 GMT
last-modified: Wed, 07 Dec 2022 09:50:31 GMT
vary: User-Agent
set-cookie: exadd=167042; expires=Wed, 07-Dec-2022 13:50:31 GMT; Max-Age=14400
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.js
IP
GET /js/ld/publishertag.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-1e444"
expires: Thu, 08 Dec 2022 09:50:32 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
illiweb.com/rs3/66/frm/jquery/ticker/ticker.css
200 OK 0 B URL HTTP/2 illiweb.com/rs3/66/frm/jquery/ticker/ticker.css
IP
GET /rs3/66/frm/jquery/ticker/ticker.css HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: text/css;charset=UTF-8
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=390
access-control-allow-origin: *
expires: Thu, 23 Nov 2023 09:22:29 GMT
last-modified: Tue, 27 Aug 2019 14:00:13 GMT
vary: Accept-Encoding
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1211283
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sx9UOWIyI7NLG64y4MrKlGDbuMcYvV56IqO9r6UcUnVCEWpszUzuP2I7BxJ2IOsHBstDx2AP2h4fTDVdXQbi7CtNEmxT6bdU%2FhYi%2Fha%2BQPwnkk%2F6L8xh6KbNtO71KA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 775c5b8bec790afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amrkhaled.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 09:50:32 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 311014
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
94.23.159.185
178.33.43.178
34.102.187.140
104.18.21.226
141.226.228.48
52.31.137.189
23.36.76.226
3.126.56.137
185.106.33.48
94.23.73.212