firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 05:37:59 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _TRkOQ9OEefJRnz68IoiVrKc4hBEp1hSy_aAzlzk1y9VzdMc0_TAyA==
Age: 2568
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3567
Expires: Tue, 06 Sep 2022 07:20:14 GMT
Date: Tue, 06 Sep 2022 06:20:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EnymqmFR-m772IC9KMYt7W-mmDF8C3SD5YD-Ya1WuTEF-pgJg9Lwuw==
age: 18330
X-Firefox-Spdy: h2
linkfree.me/9szbJL5kQJ?yanddsn87=email=&post=_1&cc_key=6456
302 Found 336 B URL HTTP/1.1 linkfree.me/9szbJL5kQJ?yanddsn87=email=&post=_1&cc_key=6456
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6c5846253d2b1c19a616106a7470d8d2
0ce84e706b85a9d6b9d4a8f39bf2932d8fce5a6d
f465f999ba8bc9d6720f0d92d85b0d234ceeea1f914162758a571036f1c22e44
GET /9szbJL5kQJ?yanddsn87=email=&post=_1&cc_key=6456 HTTP/1.1
Host: linkfree.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 06 Sep 2022 06:20:47 GMT
Server: Apache/2.4.29 (Ubuntu)
Location: https://linkfree.me/9szbJL5kQJ?yanddsn87=email=&post=_1&cc_key=6456
Content-Length: 336
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 06:20:48 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 06 Sep 2022 05:38:18 GMT
Cache-Control: max-age=3600
Expires: Tue, 06 Sep 2022 06:35:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XA0MkJnUqwvIWCrgrl53AilZjIuNwHDQqAB2LQuMfcDHCUHP9aUKQQ==
Age: 2550
ocsp.digicert.com/
200 OK 471 B IP
Hash b57a9dd04797bf34612c80361f1dffb3
56573166d8b9cd9b8dae19fd905e4f3293af306b
b03552109f1e7d1e482aa14614ffb1e38fb53ae4951152aab307b927674dad98
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4976
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:48 GMT
Last-Modified: Tue, 06 Sep 2022 04:57:52 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 472 B IP
Hash db35d79b441865843985a9625806b175
af73893edf33e6845d2df4caa2cd8a556a639f1b
c034e86800c71b4a249c9a98e7ad62b359f303609599ba5a4c9ac7a996ed4a9b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 06:20:48 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 00:41:07 GMT
Expires: Sun, 11 Sep 2022 00:41:06 GMT
Etag: "af73893edf33e6845d2df4caa2cd8a556a639f1b"
Cache-Control: max-age=411017,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746519d4389b0b61-OSL
linkfree.me/9szbJL5kQJ?yanddsn87=email=&post=_1&cc_key=6456
301 Moved Permanently 0 B URL HTTP/1.1 linkfree.me/9szbJL5kQJ?yanddsn87=email=&post=_1&cc_key=6456
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /9szbJL5kQJ?yanddsn87=email=&post=_1&cc_key=6456 HTTP/1.1
Host: linkfree.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: s_statistics_31752=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Sep 2022 06:20:48 GMT
Server: Apache/2.4.29 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Content-Type
Set-Cookie: PHPSESSID=i0gvko0c1un7dsaek9i7iqt93i; path=/; SameSite=Lax
s_statistics_38646=0; expires=Wed, 07-Sep-2022 06:20:48 GMT; Max-Age=86400
Location: https://href.li/?https://securemyaccount-amazonbillingremanpasarnihbos.4nmn.com/?verify
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: zxhiXlIyUPtUzUXyqEYyDA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: l9bm5eihnXWEEI7qcc64Zz+udcs=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e496a4ae2f2470f7ba64aeb3b41d6e6
9dc184be61beecbeac392be25cb2d4e0ced8d440
778bb7b7218fa885f5a65ae5d9cd8f872239d549838eef8c9c31fc4033cc6848
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "778BB7B7218FA885F5A65AE5D9CD8F872239D549838EEF8C9C31FC4033CC6848"
Last-Modified: Sun, 04 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2593
Expires: Tue, 06 Sep 2022 07:04:02 GMT
Date: Tue, 06 Sep 2022 06:20:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7511
Expires: Tue, 06 Sep 2022 08:26:01 GMT
Date: Tue, 06 Sep 2022 06:20:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7511
Expires: Tue, 06 Sep 2022 08:26:01 GMT
Date: Tue, 06 Sep 2022 06:20:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7511
Expires: Tue, 06 Sep 2022 08:26:01 GMT
Date: Tue, 06 Sep 2022 06:20:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78f3c06-9254-405a-8dbf-2fa65b66376b.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78f3c06-9254-405a-8dbf-2fa65b66376b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 022be15c9cc450f4af703fe8b9fcc702
82342473945f187bbf9b4455c440a01f9269c12b
df07001b8e2b79632e1a3100d957a215fcec7550a9802df87d6d3bee42c14696
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78f3c06-9254-405a-8dbf-2fa65b66376b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8322
x-amzn-requestid: 9ea441c6-67b1-4325-96b0-54862e35c2bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYHkFKEIAMFR7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d63-5c6ce0ad219286c66f7280bd;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6uMJTARUoTKpxJQmsg2jOYLz1-wew33PQECfoW_7FR2s3ccBk8QqIg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:58:51 GMT
etag: "82342473945f187bbf9b4455c440a01f9269c12b"
content-type: image/jpeg
age: 30119
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d13129-50cd-414b-b7d2-918afd9144b6.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d13129-50cd-414b-b7d2-918afd9144b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bf0314072a1c7cc981f0640ee708c25
47109d3c10438ee4a598d60e43c6f92645eaf0c9
31cc505951d7d9ced676d6b4c600e986bdd835e44ff67a65d1138552291abcbf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d13129-50cd-414b-b7d2-918afd9144b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7677
x-amzn-requestid: e1fcebb9-140c-4a2d-bcb2-79e192757079
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYH6EQgIAMFR4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d65-62f355c751c3c7250070ed91;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:43:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 3Rjz2v5eU-sicy0iBG2nxIA4DTp878y_igYE4eyXkGXBaqDvB3TbMg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:58:51 GMT
etag: "47109d3c10438ee4a598d60e43c6f92645eaf0c9"
content-type: image/jpeg
age: 30119
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31f372dd-03b1-4e12-91bc-08ff7d47b9ff.png
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31f372dd-03b1-4e12-91bc-08ff7d47b9ff.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f9d13dec6194417882e71afdc1bd9b9a
156bafa4c7c089cf26639feacc9a25db6ef3870e
7e4f2932cd41776d120ac1e14b322c3b94c07449adc7904f222f46ed35570fd0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31f372dd-03b1-4e12-91bc-08ff7d47b9ff.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10985
x-amzn-requestid: 97f3ea4d-135f-4e76-a2db-05bad96e01eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWsgHMdIAMFbXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-1a8b9af405cd8e6b1e3c0e1d;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: wjawu8nRjwWvl-Eldm4No6GY6gKO-PFbJNkv9FkpOCSDW14Mfx67Sg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:06:45 GMT
age: 29645
etag: "156bafa4c7c089cf26639feacc9a25db6ef3870e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 983e705542fa78b4d5c876e0c1eada7e
5fc951e5236edd282d4975853ca35dab2e55fb17
fa6e478fc213f6cb6c9f33c96c51105262c857bfe313b3d310755be30b1feeb3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6656
x-amzn-requestid: 2703eaf4-1a5a-41a6-859b-47255865efb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAX-3F2ZIAMFpLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d2b-6df026de5a9230ed429d08c1;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FIIvB2jeQ_PBDzi8XRN0jnNxze3OwDbz8TBaIcadRvmQd2EFhCwX7Q==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:44:33 GMT
age: 30977
etag: "5fc951e5236edd282d4975853ca35dab2e55fb17"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86e2429c-04f6-4791-b0ac-bfe10ee01611.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86e2429c-04f6-4791-b0ac-bfe10ee01611.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 567b5c4783f4affe56eab1cd640447d0
e02a994b68bca6eb31847ca69e574759629d1029
f3b8af815de503b88bba689b28a1d2b4b7616936ecc5d62d15fa00adaa5e340f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86e2429c-04f6-4791-b0ac-bfe10ee01611.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7021
x-amzn-requestid: 110fef70-1cfe-4d9c-b70b-ae79bae60d7f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X32-4EFZoAMF7jA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313052b-1481c6fe0e01c53b56608e14;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:41:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xWd68t8cJN-4D3x_veAgxzFX0uUClx7T0U6dPnHukKaAPzjt7mnOvA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 05:49:51 GMT
age: 1859
etag: "e02a994b68bca6eb31847ca69e574759629d1029"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa64096ba-be1d-410c-8f5f-91e53e173c69.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa64096ba-be1d-410c-8f5f-91e53e173c69.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 82415c19dc5c495d88093346d9538ea0
d378158dfa08278f1ffa477111c74a5dbb1d4f3c
cb31fff4e6845e445f30f2637e9c45b82af94767845e38a6d675c0651988971f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa64096ba-be1d-410c-8f5f-91e53e173c69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8792
x-amzn-requestid: 32828d39-6bd8-4367-9f6e-e73c78866465
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAX-4EZSIAMFeAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d2b-0ae6a63e21ac4c8659c3dee3;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FeVWXyGDdcDvZ82lyKDnkqAenGm40Eb1knTlhJpp5TVrEaoXypEuMQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:46:42 GMT
etag: "d378158dfa08278f1ffa477111c74a5dbb1d4f3c"
content-type: image/jpeg
age: 30848
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
securemyaccount-amazonbillingremanpasarnihbos.4nmn.com/?verify
307 Temporary Redirect 0 B URL HTTP/1.1 securemyaccount-amazonbillingremanpasarnihbos.4nmn.com/?verify
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery DynDNS domain detected
fortinet Phishing
quad9 Sinkholed
GET /?verify HTTP/1.1
Host: securemyaccount-amazonbillingremanpasarnihbos.4nmn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Date: Tue, 06 Sep 2022 06:20:49 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=88fff87e41c386fc161215127641b2d0; path=/
Location: https://spokesman.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e146873cbe291fcc4c6a985b96487924
791efb678a12acaf34affbb2e7baebac82993221
78da48e529d1d021bac913943392774e58ac23c04b99b8875b5910c388b3bac3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 06:20:50 GMT
Server: ECS (dcb/7EA5)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3GPDOb8vb7Ovicr-WPqiSfB-opo__gDgPEflZcFQCeBPdV_EoCMNNg==
spokesman.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-length: 0
location: https://www.spokesman.com/
date: Tue, 06 Sep 2022 05:56:43 GMT
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YPQWUhbJPRL8pUxYx87nSpmJSYki688xaRvZRqHNEb368ZheoFoa-g==
age: 1449
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c2a148f7b22e24d84091ab6a61fb2354
d026a802f94d52c75a4a8d04b16ca8b577411f4d
7a2c236e22cc4ae452733990a5b506e918ddcb3ed487ae151b30840e2ab21d07
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 06:20:51 GMT
Last-Modified: Tue, 06 Sep 2022 05:47:26 GMT
Server: ECS (dcb/7FA7)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yfosSdqrYsX7Zd2YVFvmXZiXG8gZ3LNR5HQv4VMab-7yoOr1Oer2jQ==
Age: 2005
thumb.spokesman.com/uO6q6eDqVn9RLDznlEJuDvMVKgE=/600x0/media.spokesman.com/graphics/2018/07/sr-loader.png
200 OK 12 kB URL HTTP/2 thumb.spokesman.com/uO6q6eDqVn9RLDznlEJuDvMVKgE=/600x0/media.spokesman.com/graphics/2018/07/sr-loader.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 479877866bfeb412c802adbfce4a08e8
7b6592542ec6d8d4377eb143251c2f5b7d76aad9
ab2e65cd767ab27b65e3bd2f97ffa0163af196c8a0eceb292f5d57527c9adce8
GET /uO6q6eDqVn9RLDznlEJuDvMVKgE=/600x0/media.spokesman.com/graphics/2018/07/sr-loader.png HTTP/1.1
Host: thumb.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 11662
date: Sat, 28 May 2022 10:15:29 GMT
expires: Tue, 23 May 2023 10:15:29 GMT
server: Thumbor/6.7.5
etag: "7b6592542ec6d8d4377eb143251c2f5b7d76aad9"
cache-control: max-age=31104000,public
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H2DpAloD0SB7DXK-cPez5XH2AIC4p4RM_S-XMqMujwoqHfp9mN_K0A==
age: 8712322
X-Firefox-Spdy: h2
static.spokesman.com/sv3/img/weather/header-icons/1-clear-night-375.cfbc2a974b92.png
200 OK 9.6 kB URL HTTP/2 static.spokesman.com/sv3/img/weather/header-icons/1-clear-night-375.cfbc2a974b92.png
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash cfbc2a974b927c26c8df6866e878aef3
ac57caf1ea50d51be03b9050806360c8fc283033
ed9e813277c06bdabd0e1296455d8aa94d1037e7e47e665f0198d6ec8bedd91f
GET /sv3/img/weather/header-icons/1-clear-night-375.cfbc2a974b92.png HTTP/1.1
Host: static.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9557
date: Mon, 05 Sep 2022 07:20:30 GMT
last-modified: Fri, 02 Sep 2022 21:30:39 GMT
etag: "cfbc2a974b927c26c8df6866e878aef3"
cache-control: max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZZGUGTIT8g66VbSIcyd8LKU6ztm7CM9u362b4Li6vWekZQeQS7rHlw==
age: 82821
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 29 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (44995)
Hash 8aed6b4fa3d76d5ec39e536ee7c2ebd8
a4b599f8c132914eaffa5caa4481dd31fceb06c6
da0f169bda47bfac0b75008e11b26fc205e047d63b9327a8f6a5f0ea0984024d
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 28557
date: Tue, 06 Sep 2022 06:20:51 GMT
expires: Tue, 06 Sep 2022 06:20:51 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1325 / 977 of 1000 / last-modified: 1662156382"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.spokesman.com/sv3/fonts/mercury/MercuryTextG3-Italic-Pro.edfe4723e09e.otf
200 OK 99 kB URL HTTP/2 static.spokesman.com/sv3/fonts/mercury/MercuryTextG3-Italic-Pro.edfe4723e09e.otf
IP
File type OpenType font data\012- data
Hash edfe4723e09ee8d5e8b042a82c5a2ef2
2fb6ec457682dceda656c126ea55c42083712169
6dfc02a8e6f295102871d721f23120a13077e491345a93614fcbb43867de3301
GET /sv3/fonts/mercury/MercuryTextG3-Italic-Pro.edfe4723e09e.otf HTTP/1.1
Host: static.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://static.spokesman.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 98936
date: Fri, 12 Aug 2022 08:28:36 GMT
access-control-allow-origin: https://www.spokesman.com
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Wed, 10 Aug 2022 16:42:00 GMT
etag: "edfe4723e09ee8d5e8b042a82c5a2ef2"
cache-control: max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PHFDSlI4j2zkLbTp_kpRxBsfaVdAOPdkn26Ll94X5LZk1935DuykYg==
age: 2152335
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
media.spokesman.com/photos/2022/09/02/6312b9add977a.hires.jpg
200 OK 1.3 MB URL HTTP/2 media.spokesman.com/photos/2022/09/02/6312b9add977a.hires.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4239x2824, components 3\012- data
Size 1.3 MB (1315012 bytes)
Hash 6b2c950f66227de6562f35ca3e432621
33a69810f5117cb60f70d55952b3cf5d9c5daefc
f1c216583784ec2b7e4474ac4f8ee2b891c864760f005557e50b1b7233785d43
GET /photos/2022/09/02/6312b9add977a.hires.jpg HTTP/1.1
Host: media.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1315012
x-amz-replication-status: COMPLETED
last-modified: Sat, 03 Sep 2022 02:23:17 GMT
x-amz-version-id: 3_.4Q.m1KznxnwfPTpWHsDQgvHxyLYHR
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 05:44:07 GMT
etag: "6b2c950f66227de6562f35ca3e432621"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: y6a8c74vPzbAjd3X5R_vjTvcqWjprkGRGqEpedLyuSq4GL3rhNQQvw==
age: 2205
X-Firefox-Spdy: h2
media.spokesman.com/then_now_images/cozza1954tease.jpg
200 OK 591 kB URL HTTP/2 media.spokesman.com/then_now_images/cozza1954tease.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1008, bps=0, PhotometricIntepretation=BlackIsZero, orientation=upper-left, width=2056], baseline, precision 8, 1792x1008, components 1\012- data
Size 591 kB (591269 bytes)
Hash bfb840e3680d04d68821c1edc1b29294
fda2df8d170649c344258d27bb159db716a35e3f
98ad5510c5b5388e0665d52291e015e0b2d528738abc6954d9ec4c39e835116e
GET /then_now_images/cozza1954tease.jpg HTTP/1.1
Host: media.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 591269
x-amz-replication-status: COMPLETED
last-modified: Mon, 29 Aug 2022 05:43:52 GMT
x-amz-version-id: Sd3cMrd8tFiO2CcTuiNx_UrTm3Gg8Zfa
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 05:21:01 GMT
etag: "bfb840e3680d04d68821c1edc1b29294"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tQCRvug4CFu7CtcDc7YtidBv5ZumcSBFfhE-hrYPTf22A2vypUcREQ==
age: 3591
X-Firefox-Spdy: h2
media.spokesman.com/photos/2022/09/05/6316aeed232b3.hires.jpg
200 OK 888 kB URL HTTP/2 media.spokesman.com/photos/2022/09/05/6316aeed232b3.hires.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3000x1642, components 3\012- data
Size 888 kB (888481 bytes)
Hash b2e62609192c64cb7ebf365d1dc17162
e30b5dba94105aa346027b17d0f5f4f452e10d59
595128d6cdc885f1e969bf1cd1bf900452a9baa345d844f13cf639d87d0cfe28
GET /photos/2022/09/05/6316aeed232b3.hires.jpg HTTP/1.1
Host: media.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 888481
x-amz-replication-status: COMPLETED
last-modified: Tue, 06 Sep 2022 02:29:34 GMT
x-amz-version-id: rXvBpwjlrw.5B98VJnPi4fX7nSbsTl5g
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 06:01:26 GMT
etag: "b2e62609192c64cb7ebf365d1dc17162"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EbANefc_cAac0v1C1zhJDQwnifRsJfd0BVckiaLqfZTBm6mQzVKcrw==
age: 1166
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5P9SH6
200 OK 49 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5P9SH6
IP
File type ASCII text, with very long lines (7270)
Hash f3e8487e6f18e8e4e93d1453b7941449
120f70d42ea3abff146f4a1a1c498d0554def05b
be89ee3f5cd35b26ccd19f73da0eb5a55c65fa55fc1242fd6290dca61a599995
GET /gtm.js?id=GTM-5P9SH6 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Sep 2022 06:20:51 GMT
expires: Tue, 06 Sep 2022 06:20:51 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Sep 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 49159
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
media.spokesman.com/photos/2022/09/03/63143fc4a702a.hires.jpg
200 OK 2.5 MB URL HTTP/2 media.spokesman.com/photos/2022/09/03/63143fc4a702a.hires.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4298x3058, components 3\012- data
Size 2.5 MB (2515567 bytes)
Hash f51ee0fff28167b29aacfa3ed56daadf
ad3caf6281be0ea39cb9f717e13fdd99adfce3aa
d6fb06a03c370189bac45b8c067259fe92c9bf359d705853cec6adbb4cca9305
GET /photos/2022/09/03/63143fc4a702a.hires.jpg HTTP/1.1
Host: media.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2515567
x-amz-replication-status: COMPLETED
last-modified: Sun, 04 Sep 2022 06:14:30 GMT
x-amz-version-id: HVj_JMcyJGT23SM6PE_cgnbTjFZZSbfQ
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 05:21:01 GMT
etag: "f51ee0fff28167b29aacfa3ed56daadf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eVjozKH774Ws-QOzD_ggLF-KsqvWNbUblMKBm0jqX882G5aobNVOCA==
age: 3590
X-Firefox-Spdy: h2
media.spokesman.com/photos/2022/09/03/6313f627d973c.hires.jpg
200 OK 3.6 MB URL HTTP/2 media.spokesman.com/photos/2022/09/03/6313f627d973c.hires.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3915x3712, components 3\012- data
Size 3.6 MB (3568289 bytes)
Hash d6c3c93405c6ddb4a586bde047ad4694
b2b583dc6aac9d8bd95a930c659ea9714ff53a01
fe34128a6e651443c392a3a96628e1834bdb5bd5c63692a58d6c24fe9efb3e64
GET /photos/2022/09/03/6313f627d973c.hires.jpg HTTP/1.1
Host: media.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3568289
x-amz-replication-status: COMPLETED
last-modified: Sun, 04 Sep 2022 02:57:15 GMT
x-amz-version-id: aEz6YokxCZ8R935BcS.c54ZzzMQvw19I
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 05:21:01 GMT
etag: "d6c3c93405c6ddb4a586bde047ad4694"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: exK80KXk6SkVnEXRWBf0mjHycp2nz2SXaNsEcvPqN62k1fZf2LTJKA==
age: 3591
X-Firefox-Spdy: h2
media.spokesman.com/photos/2022/09/03/6312b8e8ad7a6.hires.jpg
200 OK 2.8 MB URL HTTP/2 media.spokesman.com/photos/2022/09/03/6312b8e8ad7a6.hires.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=II*], progressive, precision 8, 6000x4000, components 3\012- data
Size 2.8 MB (2820110 bytes)
Hash 8a456b197f5392a39f0af5fd83c22ef6
34245ffc2f3548b8ed0b0aa012bacbfbac0f6e90
74d195c4733707b497b04cacc8be2e0437754b9fe20910b023bf4050a988c4df
GET /photos/2022/09/03/6312b8e8ad7a6.hires.jpg HTTP/1.1
Host: media.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2820110
x-amz-replication-status: COMPLETED
last-modified: Sat, 03 Sep 2022 21:58:22 GMT
x-amz-version-id: 2pIU7Dc7NoC0xcXzWCaqSE5dZzmH1wBv
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 06:08:33 GMT
etag: "8a456b197f5392a39f0af5fd83c22ef6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rKTEqHJMCNjSCbHq2z37ZIbolPVac5U6SHe41S7DPfXcXti1sB4IDA==
age: 739
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-G3BY0LGVDL&l=dataLayer&cx=c
200 OK 74 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-G3BY0LGVDL&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (16399)
Hash 9b6e785987fefdeccc85e9355696afbf
1d8f4688194a781c8c4bc0262383ff357f807fef
57a7d2b96825bb498ad988b53962ab8cdc166b344a8bd512ad92a11cf9d1a041
GET /gtag/js?id=G-G3BY0LGVDL&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Sep 2022 06:20:51 GMT
expires: Tue, 06 Sep 2022 06:20:51 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74515
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 281f4e6e1bebf5442e918afd041b6062
183df454c196be29b4eff2de58253cd670ffa2af
8d376dac8b01d7edb74bda7071b2fa315f6c988b6495935cacc2c14c58dff474
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117026
Date: Tue, 06 Sep 2022 06:20:52 GMT
Etag: "6316028b-1d7"
Expires: Wed, 07 Sep 2022 14:51:18 GMT
Last-Modified: Mon, 05 Sep 2022 14:07:07 GMT
Server: ECS (dcb/7FA5)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gyVh3blBO8Vi1JYLTd1F6jbwvNh3tTQGJz0TF7dv0qNKYoxn4F07Sg==
Age: 2651
thumb.spokesman.com/ddgGllv7Ot2VoempGaXct93leg8=/720x408/smart/media.spokesman.com/photos/2022/09/05/63166c707f420.hires.jpg
200 OK 29 kB URL HTTP/2 thumb.spokesman.com/ddgGllv7Ot2VoempGaXct93leg8=/720x408/smart/media.spokesman.com/photos/2022/09/05/63166c707f420.hires.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 08c7a918bd790ecf6c6d0854a2acc442
1b7f27640de97d8a52b95f244ac5f7301acf1d4e
69c06236234276b2fb7d629871995af874e612f45036ff00c79f7c41a2984c36
GET /ddgGllv7Ot2VoempGaXct93leg8=/720x408/smart/media.spokesman.com/photos/2022/09/05/63166c707f420.hires.jpg HTTP/1.1
Host: thumb.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 28910
date: Tue, 06 Sep 2022 02:09:52 GMT
expires: Fri, 01 Sep 2023 02:09:52 GMT
server: Thumbor/6.7.5
etag: "1b7f27640de97d8a52b95f244ac5f7301acf1d4e"
cache-control: max-age=31104000,public
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ECHgt2eq-fAgXlndlQ-cKN-n_XwkUKWZFOkteV6bpQvaze0Kw9s1Pw==
age: 15060
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/fYfmQcvWVoM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/fYfmQcvWVoM
IP
Hash 3b42e2afacf13643f7ca945bd6ebf56a
23049dcf361215535fb8111bad2871f35b661ecf
808f61a6a8ec1eafd9a83f3fdad834a51921ca2922f2faefdaabb1d3c232cfe0
POST /s/gts1d4/fYfmQcvWVoM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.matheranalytics.com/static/ltm/ma20153/575681700/20/ml.br.js
200 OK 44 kB URL HTTP/2 js.matheranalytics.com/static/ltm/ma20153/575681700/20/ml.br.js
IP
File type ASCII text, with very long lines (39917)
Hash 0033e6720ea8d009cad21d1cffea7a41
8af979aec22f73cfc2a03ab346715be7bcfde6dd
ecbdfbb45863a8028ed8e07b120d38595ba9158cbb8b601e9d7ee6f90c3fc9fe
GET /static/ltm/ma20153/575681700/20/ml.br.js HTTP/1.1
Host: js.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spokesman.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 43903
content-encoding: br
x-cache: HIT Fri, 05 Aug 2022 08:49:46 GMT
vary: Accept-Encoding
via: 1.1 google
date: Mon, 05 Sep 2022 18:29:55 GMT
age: 42657
last-modified: Fri, 05 Aug 2022 08:39:28 GMT
etag: "0033e6720ea8d009cad21d1cffea7a41"
content-type: application/x-javascript
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/fYfmQcvWVoM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/fYfmQcvWVoM
IP
Hash 3b42e2afacf13643f7ca945bd6ebf56a
23049dcf361215535fb8111bad2871f35b661ecf
808f61a6a8ec1eafd9a83f3fdad834a51921ca2922f2faefdaabb1d3c232cfe0
POST /s/gts1d4/fYfmQcvWVoM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
thumb.spokesman.com/_DNKtEzt-LCylST0KjDDrGjWhdk=/530x298/smart/media.spokesman.com/photos/2022/09/05/631540c298571.image.jpg
200 OK 12 kB URL HTTP/2 thumb.spokesman.com/_DNKtEzt-LCylST0KjDDrGjWhdk=/530x298/smart/media.spokesman.com/photos/2022/09/05/631540c298571.image.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 530x298, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash aea5a2e34e952f3e908db28a6e944b6a
e1282da1eb5846ec54a87d3cb0eeaed7526318ae
ac1b27cab2a4050888f5a0bda1dc2e5b66b48907cca211d72a7d50afd0ad8928
GET /_DNKtEzt-LCylST0KjDDrGjWhdk=/530x298/smart/media.spokesman.com/photos/2022/09/05/631540c298571.image.jpg HTTP/1.1
Host: thumb.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Cookie: _ga_G3BY0LGVDL=GS1.1.1662445247.1.0.1662445247.0.0.0; _ga=GA1.1.1164884552.1662445247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 12506
date: Tue, 06 Sep 2022 01:33:57 GMT
expires: Fri, 01 Sep 2023 01:33:57 GMT
server: Thumbor/6.7.5
etag: "e1282da1eb5846ec54a87d3cb0eeaed7526318ae"
cache-control: max-age=31104000,public
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1hiZRLaNs14A9DD2n_mHPKbecB9R973cu0eEKKe-vX62uY23aUbGUg==
age: 17215
X-Firefox-Spdy: h2
thumb.spokesman.com/2bVa4orVwetNBOnRs_8u_AH5ZuE=/530x298/smart/media.spokesman.com/photos/2022/09/05/6316949463f9e.hires.jpg
200 OK 24 kB URL HTTP/2 thumb.spokesman.com/2bVa4orVwetNBOnRs_8u_AH5ZuE=/530x298/smart/media.spokesman.com/photos/2022/09/05/6316949463f9e.hires.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 530x298, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6a8a8e7d674dcf18024f884e4730fb4b
1f649a5bf7e9db0f1c8d1367f85f54962a0881a2
610b6518158654730d1f82254d0a171d4f840ff1dd12d1c42c30c28e90dae48c
GET /2bVa4orVwetNBOnRs_8u_AH5ZuE=/530x298/smart/media.spokesman.com/photos/2022/09/05/6316949463f9e.hires.jpg HTTP/1.1
Host: thumb.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Cookie: _ga_G3BY0LGVDL=GS1.1.1662445247.1.0.1662445247.0.0.0; _ga=GA1.1.1164884552.1662445247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 24388
date: Tue, 06 Sep 2022 03:06:48 GMT
expires: Fri, 01 Sep 2023 03:06:48 GMT
server: Thumbor/6.7.5
etag: "1f649a5bf7e9db0f1c8d1367f85f54962a0881a2"
cache-control: max-age=31104000,public
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xt0YyjZ0T-9nNlSKSX7Lk9t-PvWaUvRLytCNfiViL2ZlN5tyLvA_wQ==
age: 11644
X-Firefox-Spdy: h2
thumb.spokesman.com/mY3GUfbnQ5d4W862ZdeuhQxC6k4=/530x298/smart/media.spokesman.com/photos/2022/09/05/6316affc772b2.hires.jpg
200 OK 44 kB URL HTTP/2 thumb.spokesman.com/mY3GUfbnQ5d4W862ZdeuhQxC6k4=/530x298/smart/media.spokesman.com/photos/2022/09/05/6316affc772b2.hires.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 530x298, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9c26f450afc31241096c0a58e6d19b97
d629999228e2e9eb92116ed108f35fcffb4d289b
dcce82b8f083051422b0932638207d6286181c0a1c7d1e66c601296ed94f2fd0
GET /mY3GUfbnQ5d4W862ZdeuhQxC6k4=/530x298/smart/media.spokesman.com/photos/2022/09/05/6316affc772b2.hires.jpg HTTP/1.1
Host: thumb.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Cookie: _ga_G3BY0LGVDL=GS1.1.1662445247.1.0.1662445247.0.0.0; _ga=GA1.1.1164884552.1662445247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 43752
date: Tue, 06 Sep 2022 04:35:25 GMT
expires: Fri, 01 Sep 2023 04:35:25 GMT
server: Thumbor/6.7.5
etag: "d629999228e2e9eb92116ed108f35fcffb4d289b"
cache-control: max-age=31104000,public
vary: Accept
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rlKNSAE4kL86nmOg6l2r_WdPmYTN-5QHOLW9VaE0_C5NCcLGBIiwTg==
age: 6327
X-Firefox-Spdy: h2
loader-cdn.azureedge.net/prod/spokesman/loader.min.js
200 OK 12 kB URL HTTP/2 loader-cdn.azureedge.net/prod/spokesman/loader.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (42899), with CRLF line terminators
Hash 0e0aa330906b22cfca4d151f74d9122f
6209757d256364e81db29929c4c0bfe34d3b940b
2d92b6e309eda847e8ffaa82e7a18324fc46706737972eacdf13145fc64deecd
GET /prod/spokesman/loader.min.js HTTP/1.1
Host: loader-cdn.azureedge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 231
cache-control: max-age=43200
content-md5: NLGw43qr7RAjJbL7IjQ5SQ==
content-type: application/javascript
date: Tue, 06 Sep 2022 06:20:52 GMT
etag: 0x8D9B96207AD07FC
last-modified: Tue, 07 Dec 2021 09:14:53 GMT
server: ECAcc (ska/F777)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 2b2050aa-b01e-0034-0eb8-c1c476000000
x-ms-version: 2009-09-19
content-length: 11867
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a51bd2f85bf9993a6f1970e60b224441
4ae2a55a4fa8ec9a0e46bebf2b22b46c190dff19
b42c6dec54520f73c994b89412f5c7da46547e9f30f7f2445ff992958c21442a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 06:20:52 GMT
Last-Modified: Tue, 06 Sep 2022 05:53:09 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: t7f9KsksGfGX4P37jEU-n-Bc_Jm41hOXXFBp3rTg489zehvOCP-Tzw==
Age: 1663
www.i.matheranalytics.com/i?e=pv&page=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&dnt=1&hier=Homepage&ptype=homepage&pubname=The%20Spokesman-Review&sec=Homepage&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=81914c5d-5fc4-4632-b58d-705a2cefce09&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445247110&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1268x10774&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700&cx=eyJwZXJmIjp7InN0YXJ0IjoiMTY2MjQ0NTI0NDA1NSIsInJlZGlyQ250IjoiMCIsIm5hdlR5cGUiOiJ1bmtub3duKDI1NSkiLCJmc3RQYWludCI6IjIzNTYiLCJmZXRjaFMiOiIxODgxIiwiZG9tYWluUyI6IjE4ODMiLCJkb21haW5FIjoiMTg4OSIsImNvbm5TIjoiMTg4OSIsImNvbm5FIjoiMjAxNSIsInNzbFMiOiIxODk0IiwicmVxdVMiOiIyMDE2IiwicmVzcFMiOiIyMDM5IiwicmVzcEUiOiIyMDQwIiwiZG9tTG9hZCI6IjIwNDkiLCJkb21JbnRlciI6IjIyNDcifSwiaWRlbnRpdGllcyI6W3sidHlwZSI6ImdhIiwiaWQiOiIxMTY0ODg0NTUyIiwicmVmVGltZSI6IjE2NjI0NDUyNDcxMTAifV19
200 OK 43 B URL HTTP/1.1 www.i.matheranalytics.com/i?e=pv&page=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&dnt=1&hier=Homepage&ptype=homepage&pubname=The%20Spokesman-Review&sec=Homepage&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=81914c5d-5fc4-4632-b58d-705a2cefce09&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445247110&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1268x10774&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700&cx=eyJwZXJmIjp7InN0YXJ0IjoiMTY2MjQ0NTI0NDA1NSIsInJlZGlyQ250IjoiMCIsIm5hdlR5cGUiOiJ1bmtub3duKDI1NSkiLCJmc3RQYWludCI6IjIzNTYiLCJmZXRjaFMiOiIxODgxIiwiZG9tYWluUyI6IjE4ODMiLCJkb21haW5FIjoiMTg4OSIsImNvbm5TIjoiMTg4OSIsImNvbm5FIjoiMjAxNSIsInNzbFMiOiIxODk0IiwicmVxdVMiOiIyMDE2IiwicmVzcFMiOiIyMDM5IiwicmVzcEUiOiIyMDQwIiwiZG9tTG9hZCI6IjIwNDkiLCJkb21JbnRlciI6IjIyNDcifSwiaWRlbnRpdGllcyI6W3sidHlwZSI6ImdhIiwiaWQiOiIxMTY0ODg0NTUyIiwicmVmVGltZSI6IjE2NjI0NDUyNDcxMTAifV19
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 24290d55bbf8c5c8712543cf56ebe357
90d0084e78e359a9dbc746642d836df93a0ca697
d6fbd6d46b0a1be6a3cdc49f712f83d661805a42fc37993340e2cc4493819adc
GET /i?e=pv&page=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&dnt=1&hier=Homepage&ptype=homepage&pubname=The%20Spokesman-Review&sec=Homepage&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=81914c5d-5fc4-4632-b58d-705a2cefce09&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445247110&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1268x10774&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700&cx=eyJwZXJmIjp7InN0YXJ0IjoiMTY2MjQ0NTI0NDA1NSIsInJlZGlyQ250IjoiMCIsIm5hdlR5cGUiOiJ1bmtub3duKDI1NSkiLCJmc3RQYWludCI6IjIzNTYiLCJmZXRjaFMiOiIxODgxIiwiZG9tYWluUyI6IjE4ODMiLCJkb21haW5FIjoiMTg4OSIsImNvbm5TIjoiMTg4OSIsImNvbm5FIjoiMjAxNSIsInNzbFMiOiIxODk0IiwicmVxdVMiOiIyMDE2IiwicmVzcFMiOiIyMDM5IiwicmVzcEUiOiIyMDQwIiwiZG9tTG9hZCI6IjIwNDkiLCJkb21JbnRlciI6IjIyNDcifSwiaWRlbnRpdGllcyI6W3sidHlwZSI6ImdhIiwiaWQiOiIxMTY0ODg0NTUyIiwicmVmVGltZSI6IjE2NjI0NDUyNDcxMTAifV19 HTTP/1.1
Host: www.i.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 06 Sep 2022 06:20:52 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Content-Length: 43
Connection: keep-alive
static.spokesman.com/icons/apple-touch-icon.7b46cccfb1e7.png
200 OK 6.7 kB URL HTTP/2 static.spokesman.com/icons/apple-touch-icon.7b46cccfb1e7.png
IP
File type PNG image data, 180 x 180, 8-bit grayscale, non-interlaced\012- data
Hash 7b46cccfb1e7ee634e9efbb8893b17e9
0b30ace0ad99b332fe4336a5be3e0d0b05b927b8
4d179ff0399b4858ecb8c19e33693f05d437c474c608e149fe678b5fd9e69967
GET /icons/apple-touch-icon.7b46cccfb1e7.png HTTP/1.1
Host: static.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Cookie: _ga_G3BY0LGVDL=GS1.1.1662445247.1.0.1662445247.0.0.0; _ga=GA1.1.1164884552.1662445247; _sp_id.53c5=3dcd3407-73c3-4af2-9b91-84c52f1d9c08.1662445247.1.1662445247.1662445247; _sp_ses.53c5=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 6745
date: Mon, 23 May 2022 02:30:25 GMT
last-modified: Tue, 10 May 2022 02:20:34 GMT
etag: "7b46cccfb1e7ee634e9efbb8893b17e9"
cache-control: max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MGoJ1omr6Mh_fVummnyuIndh7wyIYHTkunTEFGzvGELjdIngC9AMbw==
age: 9172228
X-Firefox-Spdy: h2
js.matheranalytics.com/s/ma20153/575681700/ml.js?cb3=1603
301 Moved Permanently 386 kB URL HTTP/2 js.matheranalytics.com/s/ma20153/575681700/ml.js?cb3=1603
IP
File type gzip compressed data, from Unix\012- data
Size 386 kB (385868 bytes)
Hash c26d8687f08d36787b6a412e8b63dcba
82d670c8addfb0509962e4544cbdf059a5e41430
27427d4c7474d7d25b1ecbf4deb48e8ce4df9666df46bb89eeb665b844c6002d
GET /s/ma20153/575681700/ml.js?cb3=1603 HTTP/1.1
Host: js.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 06 Sep 2022 06:20:52 GMT
location: https://js.matheranalytics.com/static/ltm/ma20153/575681700/20/ml.br.js
x-served-by: 2-gc-euw1-10922
cache-control: public, max-age=269200
vary: Accept-Encoding
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Tue, 06 Sep 2022 04:41:12 GMT
expires: Tue, 06 Sep 2022 06:41:12 GMT
cache-control: public, max-age=7200
age: 5980
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-G3BY0LGVDL>m=2oe8v0&_p=591487048&cid=1164884552.1662445247&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&dt=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&sid=1662445247&sct=1&seg=0&dl=https%3A%2F%2Fwww.spokesman.com%2F&en=page_view&_fv=1&_nsi=1&_ss=1&ep.content_type=homepage
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-G3BY0LGVDL>m=2oe8v0&_p=591487048&cid=1164884552.1662445247&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&dt=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&sid=1662445247&sct=1&seg=0&dl=https%3A%2F%2Fwww.spokesman.com%2F&en=page_view&_fv=1&_nsi=1&_ss=1&ep.content_type=homepage
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-G3BY0LGVDL>m=2oe8v0&_p=591487048&cid=1164884552.1662445247&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&dt=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&sid=1662445247&sct=1&seg=0&dl=https%3A%2F%2Fwww.spokesman.com%2F&en=page_view&_fv=1&_nsi=1&_ss=1&ep.content_type=homepage HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.spokesman.com
date: Tue, 06 Sep 2022 06:20:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
h.cloudengage.com/widget/data.json?time=1662445247115&url=https%3A%2F%2Fwww.spokesman.com%2F&referrer=
200 OK 2 B URL HTTP/2 h.cloudengage.com/widget/data.json?time=1662445247115&url=https%3A%2F%2Fwww.spokesman.com%2F&referrer=
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /widget/data.json?time=1662445247115&url=https%3A%2F%2Fwww.spokesman.com%2F&referrer= HTTP/1.1
Host: h.cloudengage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 06:20:52 GMT
content-type: application/json; charset=utf-8
content-length: 2
set-cookie: AWSALBTG=w2DYOHNxWO575SLFKEaNnAIQGpfMzU9nQtIP1GM3wJWN6IsUq1N5L+YGMSZeinnNQ+2WJwdvvteJCoIdQAIVkwIv7ahQ04uD1tKOgHAlsAUg8Uqu1wgERECPyxi1CAUTgHJ08kmjBWWXzShsaVe27jZr5HxtbFJiCwqgEDLUueTDlfquJrA=; Expires=Tue, 13 Sep 2022 06:20:52 GMT; Path=/
AWSALBTGCORS=w2DYOHNxWO575SLFKEaNnAIQGpfMzU9nQtIP1GM3wJWN6IsUq1N5L+YGMSZeinnNQ+2WJwdvvteJCoIdQAIVkwIv7ahQ04uD1tKOgHAlsAUg8Uqu1wgERECPyxi1CAUTgHJ08kmjBWWXzShsaVe27jZr5HxtbFJiCwqgEDLUueTDlfquJrA=; Expires=Tue, 13 Sep 2022 06:20:52 GMT; Path=/; SameSite=None; Secure
server: nginx
expires: Wed, 06 Sep 2023 06:20:52 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da4692f1529a23a6cfb04391e382c936
7befa8be966f1128ff3c25be47986e7fa7087de9
d8460cc7719813509b4e38be06b8d184306f9451695c3e1974c1d06e5c29039c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 80f29cbbe260408ee1418a6fbce5a537
96cfe52bcf90cfdba5cba7907d49a91f44adc032
de264b42b7c59bdadf606387adaca04af680705a947096d048f288c3e5be8517
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.spokesman.com/ads/spokesman/homepage.ba1889af7be1.json
200 OK 764 B URL HTTP/2 static.spokesman.com/ads/spokesman/homepage.ba1889af7be1.json
IP
File type JSON data\012- , ASCII text
Hash 620717961eff9ac0c9367e11a3d832ba
5d5868ddb9d31178c135b0676c3c00211138cc8c
1de5f3b7ee3e244d367d6ee87d89259800f9246b2d6a3ca4b42a2de72b063b2b
GET /ads/spokesman/homepage.ba1889af7be1.json HTTP/1.1
Host: static.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Tue, 23 Aug 2022 00:34:09 GMT
access-control-allow-origin: https://www.spokesman.com
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Tue, 23 Aug 2022 00:24:45 GMT
etag: W/"ba1889af7be1a2a7e8f93d1af49b39ef"
cache-control: max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WsoQaJLTwaQ6gFqDZoNzWWeFK4fLfUIHUNez20thYtzguxNV8WWjIA==
age: 1230404
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.spokesman.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.spokesman.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.spokesman.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 06:20:53 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
polyfill.io/v3/polyfill.min.js?flags=gated&features=es5%2CCustomEvent%2CArray.from%2CArray.isArray%2CArray.prototype.filter%2CArray.prototype.find%2CArray.prototype.findIndex%2CArray.prototype.forEach%2CArray.prototype.indexOf%2CArray.prototype.keys%2CArray.prototype.lastIndexOf%2CArray.prototype.map%2CArray.prototype.reduce%2CDate.prototype.toISOString%2CDocumentFragment%2CDocumentFragment.prototype.append%2CDocumentFragment.prototype.prepend%2CElement%2CElement.prototype.after%2CElement.prototype.append%2CElement.prototype.before%2CElement.prototype.classList%2CElement.prototype.cloneNode%2CElement.prototype.closest%2CElement.prototype.dataset%2CElement.prototype.matches%2CElement.prototype.placeholder%2CElement.prototype.prepend%2CElement.prototype.remove%2CElement.prototype.replaceWith%2CElement.prototype.toggleAttribute%2CEvent%2CJSON%2CMap%2CNumber.parseInt%2CNumber.parseFloat%2CObject.assign%2CObject.create%2CObject.defineProperties%2CObject.defineProperty%2CObject.entries%2CObject.getOwnPropertyDescriptor%2CObject.getOwnPropertyNames%2CObject.is%2CObject.keys%2CObject.values%2CPromise%2CPromise.prototype.finally%2CSet%2CString.prototype.trim%2CXMLHttpRequest%2Cdocument.getElementsByClassName%2Cdocument.currentScript%2Cdocument.querySelector%2Cfetch%2CgetComputedStyle%2ClocalStorage%2CArray.prototype.some%2CDate.now%2CEvent.focusin%2CEventSource%2CFunction.prototype.bind%2CFunction.prototype.name%2CHTMLDocument%2CNodeList.prototype.forEach%2CNodeList.prototype.%40%40iterator%2CNode.prototype.contains%2CObject.getPrototypeOf%2CObject.setPrototypeOf%2CRegExp.prototype.flags%2CString.prototype.%40%40iterator%2CString.prototype.startsWith%2CString.prototype.endsWith%2Cconsole%2Cconsole.debug%2Cconsole.error%2Cconsole.info%2Cconsole.log%2Cdocument%2Cdocument.head%2Cdocument.visibilityState%2Clocation.origin%2CrequestIdleCallback%2Cscreen.orientation%2CmatchMedia%2CURL
200 OK 94 B URL HTTP/2 polyfill.io/v3/polyfill.min.js?flags=gated&features=es5%2CCustomEvent%2CArray.from%2CArray.isArray%2CArray.prototype.filter%2CArray.prototype.find%2CArray.prototype.findIndex%2CArray.prototype.forEach%2CArray.prototype.indexOf%2CArray.prototype.keys%2CArray.prototype.lastIndexOf%2CArray.prototype.map%2CArray.prototype.reduce%2CDate.prototype.toISOString%2CDocumentFragment%2CDocumentFragment.prototype.append%2CDocumentFragment.prototype.prepend%2CElement%2CElement.prototype.after%2CElement.prototype.append%2CElement.prototype.before%2CElement.prototype.classList%2CElement.prototype.cloneNode%2CElement.prototype.closest%2CElement.prototype.dataset%2CElement.prototype.matches%2CElement.prototype.placeholder%2CElement.prototype.prepend%2CElement.prototype.remove%2CElement.prototype.replaceWith%2CElement.prototype.toggleAttribute%2CEvent%2CJSON%2CMap%2CNumber.parseInt%2CNumber.parseFloat%2CObject.assign%2CObject.create%2CObject.defineProperties%2CObject.defineProperty%2CObject.entries%2CObject.getOwnPropertyDescriptor%2CObject.getOwnPropertyNames%2CObject.is%2CObject.keys%2CObject.values%2CPromise%2CPromise.prototype.finally%2CSet%2CString.prototype.trim%2CXMLHttpRequest%2Cdocument.getElementsByClassName%2Cdocument.currentScript%2Cdocument.querySelector%2Cfetch%2CgetComputedStyle%2ClocalStorage%2CArray.prototype.some%2CDate.now%2CEvent.focusin%2CEventSource%2CFunction.prototype.bind%2CFunction.prototype.name%2CHTMLDocument%2CNodeList.prototype.forEach%2CNodeList.prototype.%40%40iterator%2CNode.prototype.contains%2CObject.getPrototypeOf%2CObject.setPrototypeOf%2CRegExp.prototype.flags%2CString.prototype.%40%40iterator%2CString.prototype.startsWith%2CString.prototype.endsWith%2Cconsole%2Cconsole.debug%2Cconsole.error%2Cconsole.info%2Cconsole.log%2Cdocument%2Cdocument.head%2Cdocument.visibilityState%2Clocation.origin%2CrequestIdleCallback%2Cscreen.orientation%2CmatchMedia%2CURL
IP
Hash eb8b0ba88b3acfb11ea81d5c02be9108
4b7f14cc2db25abdbe25472934b7469b2488f9d4
7237f15a97fe102c6ed13eadc0f7980da03cd06a20dfb7c7b8050e60dada617d
GET /v3/polyfill.min.js?flags=gated&features=es5%2CCustomEvent%2CArray.from%2CArray.isArray%2CArray.prototype.filter%2CArray.prototype.find%2CArray.prototype.findIndex%2CArray.prototype.forEach%2CArray.prototype.indexOf%2CArray.prototype.keys%2CArray.prototype.lastIndexOf%2CArray.prototype.map%2CArray.prototype.reduce%2CDate.prototype.toISOString%2CDocumentFragment%2CDocumentFragment.prototype.append%2CDocumentFragment.prototype.prepend%2CElement%2CElement.prototype.after%2CElement.prototype.append%2CElement.prototype.before%2CElement.prototype.classList%2CElement.prototype.cloneNode%2CElement.prototype.closest%2CElement.prototype.dataset%2CElement.prototype.matches%2CElement.prototype.placeholder%2CElement.prototype.prepend%2CElement.prototype.remove%2CElement.prototype.replaceWith%2CElement.prototype.toggleAttribute%2CEvent%2CJSON%2CMap%2CNumber.parseInt%2CNumber.parseFloat%2CObject.assign%2CObject.create%2CObject.defineProperties%2CObject.defineProperty%2CObject.entries%2CObject.getOwnPropertyDescriptor%2CObject.getOwnPropertyNames%2CObject.is%2CObject.keys%2CObject.values%2CPromise%2CPromise.prototype.finally%2CSet%2CString.prototype.trim%2CXMLHttpRequest%2Cdocument.getElementsByClassName%2Cdocument.currentScript%2Cdocument.querySelector%2Cfetch%2CgetComputedStyle%2ClocalStorage%2CArray.prototype.some%2CDate.now%2CEvent.focusin%2CEventSource%2CFunction.prototype.bind%2CFunction.prototype.name%2CHTMLDocument%2CNodeList.prototype.forEach%2CNodeList.prototype.%40%40iterator%2CNode.prototype.contains%2CObject.getPrototypeOf%2CObject.setPrototypeOf%2CRegExp.prototype.flags%2CString.prototype.%40%40iterator%2CString.prototype.startsWith%2CString.prototype.endsWith%2Cconsole%2Cconsole.debug%2Cconsole.error%2Cconsole.info%2Cconsole.log%2Cdocument%2Cdocument.head%2Cdocument.visibilityState%2Clocation.origin%2CrequestIdleCallback%2Cscreen.orientation%2CmatchMedia%2CURL HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
last-modified: Mon, 01 Aug 2022 11:01:11 GMT
content-encoding: br
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
referrer-policy: origin-when-cross-origin
timing-allow-origin: *
normalized-user-agent: firefox/96.0.0
detected-user-agent: Firefox/96.0.
accept-ranges: bytes
date: Tue, 06 Sep 2022 06:20:53 GMT
age: 3033249
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: User-Agent, Accept-Encoding
server-timing: HIT-CLUSTER, fastly;desc="Edge time";dur=1, HIT-CLUSTER, fastly;desc="Edge time";dur=2
content-length: 94
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da4692f1529a23a6cfb04391e382c936
7befa8be966f1128ff3c25be47986e7fa7087de9
d8460cc7719813509b4e38be06b8d184306f9451695c3e1974c1d06e5c29039c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 80f29cbbe260408ee1418a6fbce5a537
96cfe52bcf90cfdba5cba7907d49a91f44adc032
de264b42b7c59bdadf606387adaca04af680705a947096d048f288c3e5be8517
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-230256-14&cid=1164884552.1662445247&jid=2128050288&gjid=460852894&_gid=99436434.1662445248&_u=YCDAiEABBAAAAE~&z=710937270
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-230256-14&cid=1164884552.1662445247&jid=2128050288&gjid=460852894&_gid=99436434.1662445248&_u=YCDAiEABBAAAAE~&z=710937270
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-230256-14&cid=1164884552.1662445247&jid=2128050288&gjid=460852894&_gid=99436434.1662445248&_u=YCDAiEABBAAAAE~&z=710937270 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.spokesman.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 06 Sep 2022 06:20:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
h.cloudengage.com/get-ce.min.js
200 OK 2.3 kB URL HTTP/2 h.cloudengage.com/get-ce.min.js
IP
File type ASCII text, with very long lines (1939), with CRLF, LF line terminators
Hash d1f95e1b07bc325c3f16010a3a8231d8
3c5e346b286d5a3e47bae45e20e38f0d8c402346
15b5bef28c1cca12f9515b86d8d105de0d9cec68c11df62d028affad8df720ef
GET /get-ce.min.js HTTP/1.1
Host: h.cloudengage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 06:20:52 GMT
content-type: application/javascript; charset=utf-8
set-cookie: AWSALBTG=fV4BPRTm3iGRyMR7tG63+TdYTJlHMn0B2v4J6X4uKm+ObOqRZeqa3fDruM+L0ZzUnv5Fhu9wmkkupK5x+JyUAPQC4sYvm9UQCML8YqkI+r0lT/Vs2/elbxnrcG0sNc7cctq5FJ5cc+TP4vcm5A66TdRce+/eN+LQhDx31b9pI2BDIKJMt0c=; Expires=Tue, 13 Sep 2022 06:20:52 GMT; Path=/
AWSALBTGCORS=fV4BPRTm3iGRyMR7tG63+TdYTJlHMn0B2v4J6X4uKm+ObOqRZeqa3fDruM+L0ZzUnv5Fhu9wmkkupK5x+JyUAPQC4sYvm9UQCML8YqkI+r0lT/Vs2/elbxnrcG0sNc7cctq5FJ5cc+TP4vcm5A66TdRce+/eN+LQhDx31b9pI2BDIKJMt0c=; Expires=Tue, 13 Sep 2022 06:20:52 GMT; Path=/; SameSite=None; Secure
server: nginx
last-modified: Thu, 30 Jun 2022 15:17:26 GMT
vary: Accept-Encoding
etag: W/"62bdbe86-6b1"
expires: Tue, 06 Sep 2022 06:20:51 GMT
cache-control: no-cache, public
x-ua-compatible: IE=Edge
content-encoding: gzip
X-Firefox-Spdy: h2
8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
200 OK 3.1 kB URL HTTP/2 8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5835)
Hash 3fa5e95a358d660ddb3c45769ae1357f
5f6164fbaf8cfbccfd061b00ae48dedfc16bbcd9
d32f4b680031c0e11222eb17385aa9d3b11d2903b05bff34c3d4eb6292631137
GET /safeframe/1-0-38/html/container.html HTTP/1.1
Host: 8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 3108
date: Tue, 06 Sep 2022 06:20:53 GMT
expires: Wed, 06 Sep 2023 06:20:53 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 02 Mar 2021 20:17:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
az416426.vo.msecnd.net/scripts/a/ai.0.js
200 OK 22 kB URL HTTP/2 az416426.vo.msecnd.net/scripts/a/ai.0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash affc2b93a9fc23bbba65931b19b1e12c
a175097d2aa7ffb4b54193f197f296ab57967308
1c383d5958a56ed0858150b049c83da4d4b31a4ac05314ae9a4f623933a3df25
GET /scripts/a/ai.0.js HTTP/1.1
Host: az416426.vo.msecnd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 1076
cache-control: public, max-age=1800
content-md5: HdY95yzx9wIyQkVEGES+Ew==
content-type: application/x-javascript
date: Tue, 06 Sep 2022 06:20:53 GMT
etag: 0x8D8E461DA1A5889
expires: Tue, 06 Sep 2022 06:50:53 GMT
last-modified: Thu, 11 Mar 2021 07:46:59 GMT
server: ECAcc (ska/F773)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-meta-lastmodified: 2020-10-01 19:31:04
x-ms-request-id: 0d732e75-a01e-0011-20b6-c172c1000000
x-ms-version: 2009-09-19
content-length: 22495
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3df811ac19fde08f49ef246c29cef161
e1c8d54b357adaf32e80427028cc884fa35959e0
e2749178e0bf0c4045a96388a58029ddd92d13a866021737864cd68e11317292
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-230256-14&cid=1164884552.1662445247&jid=2128050288&_u=YCDAiEABBAAAAE~&z=1597499510
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-230256-14&cid=1164884552.1662445247&jid=2128050288&_u=YCDAiEABBAAAAE~&z=1597499510
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-230256-14&cid=1164884552.1662445247&jid=2128050288&_u=YCDAiEABBAAAAE~&z=1597499510 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Sep 2022 06:20:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-230256-14&cid=1164884552.1662445247&jid=2128050288&_u=YCDAiEABBAAAAE~&z=1597499510
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-230256-14&cid=1164884552.1662445247&jid=2128050288&_u=YCDAiEABBAAAAE~&z=1597499510
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-230256-14&cid=1164884552.1662445247&jid=2128050288&_u=YCDAiEABBAAAAE~&z=1597499510 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Sep 2022 06:20:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fp-cdn.azureedge.net/prod/spokesman/fp.min.js
200 OK 21 kB URL HTTP/2 fp-cdn.azureedge.net/prod/spokesman/fp.min.js
IP
File type ASCII text, with very long lines (64089), with CRLF line terminators
Hash bbe2e60eefa93dd23b794ec8f73d3997
4a354a528ba456e682f0d321d2b842842d286811
2a582d0a9e8fd7889f2f671fbe0405a74e9e461094821dd85b8761078d71c73f
GET /prod/spokesman/fp.min.js HTTP/1.1
Host: fp-cdn.azureedge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 17404
cache-control: max-age=43200
content-md5: lgzPoyz75nle9SCu4zir4w==
content-type: application/javascript
date: Tue, 06 Sep 2022 06:20:53 GMT
etag: 0x8D9B961F0D7C8FB
last-modified: Tue, 07 Dec 2021 09:14:15 GMT
server: ECAcc (ska/F72E)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 8a00bc12-801e-005d-4f90-c1fd3a000000
x-ms-version: 2009-09-19
content-length: 21083
X-Firefox-Spdy: h2
g2insights-cdn.azureedge.net/prod/spokesman/g2i.min.js
200 OK 76 kB URL HTTP/2 g2insights-cdn.azureedge.net/prod/spokesman/g2i.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (376), with CRLF, LF line terminators
Hash 1eeada68b709c624abe6dfb4505232a8
9275ff780fb102ca362aa72963848806443a3a4a
98940523d64b55acb3f43c80dce1216635d167fe29cd02e4fef09d7c359b00e7
GET /prod/spokesman/g2i.min.js HTTP/1.1
Host: g2insights-cdn.azureedge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 22028
cache-control: max-age=43200
content-md5: hWVpf+tV9C2V7tkaq/lTzA==
content-type: application/x-javascript
date: Tue, 06 Sep 2022 06:20:53 GMT
etag: 0x8D9B96202A01F05
last-modified: Tue, 07 Dec 2021 09:14:45 GMT
server: ECAcc (ska/F686)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 93382219-d01e-009b-0785-c136bb000000
x-ms-version: 2009-09-19
content-length: 75960
X-Firefox-Spdy: h2
cdn.ayc0zsm69431gfebd.xyz/prod/spokesman/t8y9347t.min.css
200 OK 35 kB URL HTTP/2 cdn.ayc0zsm69431gfebd.xyz/prod/spokesman/t8y9347t.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (752), with CRLF, LF line terminators
Hash 47d2683270ce47052925d0aa44a1d3af
735d0ee5cbb4c919f465de2a14b72e02b28b6458
34463eadd806fc3ed60f838d99dfcc9fed3b1153ed058637fd30b0bbe320a705
GET /prod/spokesman/t8y9347t.min.css HTTP/1.1
Host: cdn.ayc0zsm69431gfebd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 36260
cache-control: max-age=43200
content-md5: HBagnSR9fGL2/9/2zSnVqw==
content-type: text/css
date: Tue, 06 Sep 2022 06:20:53 GMT
etag: 0x8D9B96211AC9D6C
last-modified: Tue, 07 Dec 2021 09:15:10 GMT
server: ECAcc (ska/F6E3)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: ce1b862d-e01e-0039-6264-c10ca2000000
x-ms-version: 2009-09-19
content-length: 35356
X-Firefox-Spdy: h2
cdn.ayc0zsm69431gfebd.xyz/prod/spokesman/t8y9347t.min.js
200 OK 202 kB URL HTTP/2 cdn.ayc0zsm69431gfebd.xyz/prod/spokesman/t8y9347t.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 202 kB (202029 bytes)
Hash a357e163590a649d68a1a1ef8d284cef
fe276540aea5d210483705ab8e95fc0257179c5c
0b21a1610ef152a82276a25549671fbfca4a34b2cdccdbd4d77e35c86ea6e687
GET /prod/spokesman/t8y9347t.min.js HTTP/1.1
Host: cdn.ayc0zsm69431gfebd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 426849
content-md5: Jb+gGXPvjosL/lZesASgSw==
content-type: text/javascript
date: Tue, 06 Sep 2022 06:20:53 GMT
etag: 0x8DA528A05F484DE
last-modified: Mon, 20 Jun 2022 06:56:38 GMT
server: ECAcc (ska/F6BA)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e8d7f51a-401e-0089-3ad6-bd4d6b000000
x-ms-version: 2009-09-19
content-length: 202029
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 76f02dc7a8aaf5b91325a4fc3513bbdd
bdc084e9d72e9fa1c95ab79783010defc559f618
1f2e6fe39cf8bd11b8aa3713f16db66c5e9b38e2ca21086e7fdca174fe0be294
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 06:20:53 GMT
Last-Modified: Tue, 06 Sep 2022 04:46:43 GMT
Server: ECS (dcb/7EEE)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6aHD2SwuyTpbt-7Sifusv7_Fsvst5m9JLuZB8ld4l50N2LASkHYZGQ==
Age: 5650
aamcftag.aamsitecertifier.com/aam.js
200 OK 26 kB URL HTTP/2 aamcftag.aamsitecertifier.com/aam.js
IP
File type ASCII text, with very long lines (559)
Hash d01602293dda6546ca8f8ededd0e44e8
4b48dab164145c414f3060f75fb2df7ba3319712
e65f88f18320967783a318857486ed0ddd94052657f5969acd06c382e2889c79
GET /aam.js HTTP/1.1
Host: aamcftag.aamsitecertifier.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 25648
last-modified: Mon, 01 Feb 2021 19:46:45 GMT
x-amz-meta-s3b-last-modified: 20210201T194158Z
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 04:23:38 GMT
etag: "d01602293dda6546ca8f8ededd0e44e8"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3um99MqN2H5fNfn5feEL5bep2OrI8zvYez68ryFHZyMLf9OTkIs8pA==
age: 7036
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash acf569002fbfcce182a756efcae572fe
592d3f9465968b91a720bc376b09444bd862a555
c958786cfff50bc230ecbb2d06feb197e5f8578a05e9075b0dbb960e15c0d9bc
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Sep 2022 06:20:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 05 Sep 2022 17:25:54 GMT
Expires: Tue, 06 Sep 2022 17:25:54 GMT
ETag: "592d3f9465968b91a720bc376b09444bd862a555"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
pymx5.com/scripts/load_tags.js
200 OK 8.9 kB URL HTTP/2 pymx5.com/scripts/load_tags.js
IP
File type ASCII text, with very long lines (8946), with no line terminators
Hash f6b06694767e707999eecbe9538b403a
ac369703a0e2aa4ef1233646c19799b49b3cc30f
492f490d3a8cae053f8ab9f525210cfcd792987a02d65783aa81ce4edf926fa2
GET /scripts/load_tags.js HTTP/1.1
Host: pymx5.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycds8YD4MjK0hQ5mzpHLxjlLzMVhH32e3ayCYBZRBwBe35Udjcyg-mh4y_LDPFmCpDbejb7gKFoueDb8gNvjp6dIC-A
x-goog-generation: 1654079928343051
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8946
x-goog-hash: crc32c=xz4nKQ==, md5=9rBmlHZ+cHmZ7svpU4tAOg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 8946
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
date: Tue, 06 Sep 2022 06:19:22 GMT
age: 91
last-modified: Fri, 15 Jul 2022 06:19:11 GMT
etag: "f6b06694767e707999eecbe9538b403a"
content-type: application/javascript
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 282e30bb1ff2decb700d84bebff341b5
17041adbfb3fd69fbf47f1a86e0816cdd2274a40
3a71f5e28f466482b547f62fbfa8cdc07f64a79fcf57ca56e0c854576ff7bbaa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d31qbv1cthcecs.cloudfront.net/atrk.js
200 OK 4.3 kB URL HTTP/1.1 d31qbv1cthcecs.cloudfront.net/atrk.js
IP
File type ASCII text, with very long lines (4255), with no line terminators
Hash d89453438fbf10dcf4c13265c40d5160
02d5f4e46c94bf34e12b2d773f63f643ea2b3518
5e84ce936bc3e3844a5d9efb3ac7d28107fa17234fa2a6c2bf3491fc284f0d4f
GET /atrk.js HTTP/1.1
Host: d31qbv1cthcecs.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 4255
Connection: keep-alive
Date: Sat, 13 Aug 2022 04:02:04 GMT
Last-Modified: Tue, 27 Apr 2021 18:03:54 GMT
ETag: "d89453438fbf10dcf4c13265c40d5160"
Cache-Control: max-age=26920000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6ZOJ6pDKbb_bHrfTXcH3v-6KhaWhqqDsIxouuNNH7_zjBI-LSoqScA==
Age: 2081930
tpc.googlesyndication.com/pagead/js/r20220831/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220831/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1621)
Hash a4c731f85862faf40d4fae51bf83fb0c
537ddcb9b854155e5f9136d0585dd54e26447baf
0826f7dfc1e4a221aba4cc7c381d0259c54f5fed8a9f50c0a247696f40af2d49
GET /pagead/js/r20220831/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9632
x-xss-protection: 0
date: Tue, 06 Sep 2022 06:15:04 GMT
expires: Tue, 20 Sep 2022 06:15:04 GMT
cache-control: public, max-age=1209600
etag: 2755732409155645664
content-type: text/javascript; charset=UTF-8
age: 349
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1893
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:53 GMT
Last-Modified: Tue, 06 Sep 2022 05:49:20 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
www.facebook.com/tr?id=260139058256176&ev=PageView
200 OK 44 B URL HTTP/2 www.facebook.com/tr?id=260139058256176&ev=PageView
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr?id=260139058256176&ev=PageView HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 06:20:53 GMT
expires: Tue, 06 Sep 2022 06:20:53 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 45 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash e233451d114b7f2754d6a4eb131920ce
34aab2498621e84e7946aeb1830c8178c2417f52
8e31af45a596f9d000300c2220b1953f3d6adbb5bfafdf9a493f6b29ac1df323
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44792
date: Tue, 06 Sep 2022 06:20:53 GMT
expires: Tue, 06 Sep 2022 06:20:53 GMT
cache-control: private, max-age=3000
etag: "1661945761880069"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022083001&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022083001&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14393), with no line terminators
Hash c938f8425c07af4aa3255ac9fab15aa7
6afa45a86051b6e391a86e6ef0ec4d05c5012b73
8cdc21bbb1d543899b9aa841242b81a7c81c1ec96775b7b099b937ba5db9a3f3
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022083001&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 06:20:53 GMT
server: cafe
cache-control: private
content-length: 10923
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash acf569002fbfcce182a756efcae572fe
592d3f9465968b91a720bc376b09444bd862a555
c958786cfff50bc230ecbb2d06feb197e5f8578a05e9075b0dbb960e15c0d9bc
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Sep 2022 06:20:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 05 Sep 2022 17:25:54 GMT
Expires: Tue, 06 Sep 2022 17:25:54 GMT
ETag: "592d3f9465968b91a720bc376b09444bd862a555"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
200 OK 471 B IP
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1893
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:53 GMT
Last-Modified: Tue, 06 Sep 2022 05:49:20 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjoiNDk5NDYyMzkwNCIsImVidXkiOiIzODU2NTMwMTEiLCJlYWR2IjoiNDQzMDUzMjExIiwiZWNpZCI6IjEzODM0NjkyNjY4NiIsImVlbnYiOiJqIiwiZXBpZCI6Ii8xMDA5NjQxL1Nwb2tlc21hbkRlc2t0b3BfU3VwZXJMZWFkZXJCb2FyZF9Ib21lUGFnZV8xMjgweDEwMCIsImVzaWQiOm51bGwsInNpemUiOiIxMjgweDEwMCIsInJlbmRlcmVkIjoiMSJ9&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=ad1745e9-ea89-4f8a-b306-7400170026c0&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248532&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700
200 OK 43 B URL HTTP/1.1 www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjoiNDk5NDYyMzkwNCIsImVidXkiOiIzODU2NTMwMTEiLCJlYWR2IjoiNDQzMDUzMjExIiwiZWNpZCI6IjEzODM0NjkyNjY4NiIsImVlbnYiOiJqIiwiZXBpZCI6Ii8xMDA5NjQxL1Nwb2tlc21hbkRlc2t0b3BfU3VwZXJMZWFkZXJCb2FyZF9Ib21lUGFnZV8xMjgweDEwMCIsImVzaWQiOm51bGwsInNpemUiOiIxMjgweDEwMCIsInJlbmRlcmVkIjoiMSJ9&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=ad1745e9-ea89-4f8a-b306-7400170026c0&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248532&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 24290d55bbf8c5c8712543cf56ebe357
90d0084e78e359a9dbc746642d836df93a0ca697
d6fbd6d46b0a1be6a3cdc49f712f83d661805a42fc37993340e2cc4493819adc
GET /i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjoiNDk5NDYyMzkwNCIsImVidXkiOiIzODU2NTMwMTEiLCJlYWR2IjoiNDQzMDUzMjExIiwiZWNpZCI6IjEzODM0NjkyNjY4NiIsImVlbnYiOiJqIiwiZXBpZCI6Ii8xMDA5NjQxL1Nwb2tlc21hbkRlc2t0b3BfU3VwZXJMZWFkZXJCb2FyZF9Ib21lUGFnZV8xMjgweDEwMCIsImVzaWQiOm51bGwsInNpemUiOiIxMjgweDEwMCIsInJlbmRlcmVkIjoiMSJ9&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=ad1745e9-ea89-4f8a-b306-7400170026c0&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248532&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700 HTTP/1.1
Host: www.i.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 06 Sep 2022 06:20:53 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Content-Length: 43
Connection: keep-alive
api.pymx5.com/v1/sites/load_optional_tags
200 OK 0 B URL HTTP/2 api.pymx5.com/v1/sites/load_optional_tags
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/sites/load_optional_tags HTTP/1.1
Host: api.pymx5.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.13.7
date: Tue, 06 Sep 2022 06:20:53 GMT
content-type: text/html; charset=utf-8
content-length: 0
allow: GET, HEAD, OPTIONS
x-frame-options: SAMEORIGIN
set-cookie: _ia_uid=eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.9G9WbHDdZbsCwpBMrY_FAG4YTfho3gYAhk_mMcAeU3iiwRWSiLAf-w.CdldzJnRCeWo6-2W.sMr2UWyrNhXBNsP152wQDEzSl2x56rPX-2bWQyGUUsX6h5QQ7ekZINJJbC7_snMtSiKJQyVy8ID1igAYU6VA7TlXGcMuJye-jPMRyB4cGa07EKwHoPBj8JOrt61hGUCaUnddhI54nZWwa8jZ6A6OK4lcXZM3tO6-S2-CMiXADEE3q5TvxVXffcIg80uF7J771SeRJBOGFlKRZen3dcRAJCSdnL3Ycf_JIUz-JY6XOVUjoaangtaCwvOiNUwlY8fc7MQRStW81SbdPfHU5MiJWp6W4U6_GwUG13HnsNgWIrTjUKo9svVFUL0mRRvLlKfirQIHKyx63ViJ4-Ds0Q8LIcAGNTgP_69Xo8D-VNw3_QI.zVmpq3oYWbyNFD4kQ4SFbQ; Domain=pymx5.com; expires=Sun, 05-Mar-2023 06:20:53 GMT; Max-Age=15552000; Path=/; SameSite=None; Secure
_ia_version=2; Domain=pymx5.com; expires=Sun, 05-Mar-2023 06:20:53 GMT; Max-Age=15552000; Path=/; SameSite=None; Secure
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjoiNTIzOTEzMzY2NSIsImVidXkiOiIyMzEzNzk1NzgxIiwiZWFkdiI6IjQ1NzEwODI5NDAiLCJlY2lkIjoiMTM4NDAyMTAwNTQzIiwiZWVudiI6ImoiLCJlcGlkIjoiLzEwMDk2NDEvU3Bva2VzbWFuX2hvbWVwYWdlX3RvcF8zMDB4MjUwIiwiZXNpZCI6bnVsbCwic2l6ZSI6IjMwMHg2MDAiLCJyZW5kZXJlZCI6IjEifQ&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=b7409a36-47b2-4765-a2cf-434add51908e&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248539&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700
200 OK 43 B URL HTTP/1.1 www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjoiNTIzOTEzMzY2NSIsImVidXkiOiIyMzEzNzk1NzgxIiwiZWFkdiI6IjQ1NzEwODI5NDAiLCJlY2lkIjoiMTM4NDAyMTAwNTQzIiwiZWVudiI6ImoiLCJlcGlkIjoiLzEwMDk2NDEvU3Bva2VzbWFuX2hvbWVwYWdlX3RvcF8zMDB4MjUwIiwiZXNpZCI6bnVsbCwic2l6ZSI6IjMwMHg2MDAiLCJyZW5kZXJlZCI6IjEifQ&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=b7409a36-47b2-4765-a2cf-434add51908e&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248539&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 24290d55bbf8c5c8712543cf56ebe357
90d0084e78e359a9dbc746642d836df93a0ca697
d6fbd6d46b0a1be6a3cdc49f712f83d661805a42fc37993340e2cc4493819adc
GET /i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjoiNTIzOTEzMzY2NSIsImVidXkiOiIyMzEzNzk1NzgxIiwiZWFkdiI6IjQ1NzEwODI5NDAiLCJlY2lkIjoiMTM4NDAyMTAwNTQzIiwiZWVudiI6ImoiLCJlcGlkIjoiLzEwMDk2NDEvU3Bva2VzbWFuX2hvbWVwYWdlX3RvcF8zMDB4MjUwIiwiZXNpZCI6bnVsbCwic2l6ZSI6IjMwMHg2MDAiLCJyZW5kZXJlZCI6IjEifQ&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=b7409a36-47b2-4765-a2cf-434add51908e&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248539&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700 HTTP/1.1
Host: www.i.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 06 Sep 2022 06:20:54 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Content-Length: 43
Connection: keep-alive
cdn.czx5eyk0exbhwp43ya.biz/index.js
200 OK 2.4 kB URL HTTP/2 cdn.czx5eyk0exbhwp43ya.biz/index.js
IP
File type ASCII text, with CRLF line terminators
Hash 7b5edddadc18d005c8721716929276e1
33374ed0e1567e799bb1395b3b93c76bdc2e7789
bc82b1866a603c1d7021e9b07cada5987f763a4c0b0cea50eac3224774e559ff
GET /index.js HTTP/1.1
Host: cdn.czx5eyk0exbhwp43ya.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 600649
content-md5: nynBpfvYghYqzIzsvfssRw==
content-type: text/javascript
date: Tue, 06 Sep 2022 06:20:54 GMT
etag: 0x8DA5083F65AD9E0
last-modified: Fri, 17 Jun 2022 17:08:13 GMT
server: ECAcc (ska/F76A)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 0b59ad43-801e-004d-3942-bc3852000000
x-ms-version: 2009-09-19
content-length: 2382
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/xbbe/pixel?d=CIzfKBCp2d0CGJ6WucoBMAE&v=APEucNW5-Snw5gjLc4mY0L0kKY3ie9JCnxPApc388k8dKSWrnCq6_idnhGWorZ9sUgt5jJ70jP55pLlc1mRBfANFv1Vq0vo4c-OSvlrEsqJ0w2qfjTZxa-d34GFXU5oJQrd05MKTkfosqlBTxvRmCFVmWsZHWj5M5yxdFGgzmse447OtTRTHku4
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/xbbe/pixel?d=CIzfKBCp2d0CGJ6WucoBMAE&v=APEucNW5-Snw5gjLc4mY0L0kKY3ie9JCnxPApc388k8dKSWrnCq6_idnhGWorZ9sUgt5jJ70jP55pLlc1mRBfANFv1Vq0vo4c-OSvlrEsqJ0w2qfjTZxa-d34GFXU5oJQrd05MKTkfosqlBTxvRmCFVmWsZHWj5M5yxdFGgzmse447OtTRTHku4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xbbe/pixel?d=CIzfKBCp2d0CGJ6WucoBMAE&v=APEucNW5-Snw5gjLc4mY0L0kKY3ie9JCnxPApc388k8dKSWrnCq6_idnhGWorZ9sUgt5jJ70jP55pLlc1mRBfANFv1Vq0vo4c-OSvlrEsqJ0w2qfjTZxa-d34GFXU5oJQrd05MKTkfosqlBTxvRmCFVmWsZHWj5M5yxdFGgzmse447OtTRTHku4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 06 Sep 2022 06:20:54 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Sep-2022 06:35:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 06 Sep 2022 06:20:54 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AwARpKCQ4WjoU4X8w0bgrKbh5Pvw3Kr7W2iy68HhnLXKmE5_GBy_6VXTJG2HoNeyTXvzEduVVLbPOagPGpB19TopS-9CySWWvRTavkDOydvAlOCku7j2S8ADsFRdXt-2Z7Cvynm1sJjUNbEuagMpl8X5RVqQ&dbm_d=AKAmf-C7awhvDauTRGh8POZao00cz6PosD-oOK7Zxa-9OxQfHsbSxV0py-2-CTZYhdfa-LIIsX1iL29-XqPi8UxJY0-5tpKTVFAuSwhm6KZFAg7csTuK2F8Wc6jMWSPlSaoHZdI_PMZNXkTkj7ZbPS7cc-ZmYAPcE8HWw8eCL-oD_ekzHtB9JS9dKzxdrxBJp1JGshZvdgLx2nQaIXaxcqyuzWOeNK7qLjbK5hZ1VGB3DTGQCXooibhmPOFRvQtdk3-2jvvt_eMVjl9uhBft3JpCNWDkl9FxvInHjo87Mn6ed6yVrUYd3_ONxY7HKAjmpKV47JBPBiqUzC9asgEVuu-bKa-z4mNN-V7YDfoP8uJfSkYQf6uxUKfzOArGSRWeOtcS7Q9VPUz0Kgp5Xfh3SQoZBgqkkwNFYGFCANACX8VHnlq9H_Nxoml5WeauJgL14wHHP_2W-EpcDBR0hWf9g7c7Eyzx7zkWnC1B8uRmMxdvxPLbvoHFz6kE7PPw6kl0hsKnuhmpWaa4TYTIfdtMH5pkl7Ejy9VK3XjgkXdAd9-UUJiBXENf2pGpS5pNec4i9cAbsAGJq75SDTxWnx60AGCWNTiWSnih0KmYf9D1ixCdMCtXBW2VnYcHNv9o_BfhWdN0KtdEzK8_T4cPSOSyTYDLIZWNqQ1aCp7aJbcBfhcezXRQ-jNi33gV24vlfUyJCxD6mtY0h0P6OzyrP1Xx0rOOwNp5Wq8Gr3XG7cwhmzxbDGMBkfcLTfZTxYigT-BwDPhYXNCMpJhNgY6MUId-ZJbufrWrHNhLK44ds7NGRfJfnOJs_lBFlcbnrVPY3mmcZN3fyWIBh1RR_f5MAQAW_gSLWYv-a0Olj3bdck-oGKZd8XcVUqdGM8g5WXvGuWX8dOfspmO6chXWNsYglVmFrtl6U3V7IjHFt2-q12QoKQ-2cpo21fcx12DimY5I6SMH0Y7AypwZhULMnoLAflIgYbLqYF1kT6a4YBQQzRuRSNi3YbAzH_xfXoV_Hxl5Y3FtZ9pCtV-k-YNZynXX04bcEORzJpvgphAAphwi2o96kON7xiqiuKtErJer2yp-0AeswQ1XwAFWfoAB8EAm9xHlRY5juCUgqOyR09top1dwMRwzwkpWYf0XsA5x59Gl2jWz1WW24abhFEXKj_mCpmZje8ZC7CpVXWexM2p0tX9uPKpgx-hU7qSpFPTR-e-EqrfjoXmS8A3j_Rfbj5h-2yWy0BzcftFZ6l30XtH6hoNrXwAzVFFVoVlxJSbVL2kqRCnDEzvhE3qZksAyzUmC_72lfrNkVXOTEnnJYxLB7nIYmjhpxjLAWQbCjELORSY5jWBGNw60BsVAD17bz8z6PM2MpmX1eA__fvJxlxxletLgygbUtlLdoSCtw4cp98ZkpVGLBJ41R9BxPyjn_MYXCbe78HdHAHQD4GVA73Tf1-39gEkN9PA_F1bt2xpQoCoOs_eURJJJyOms0OgPaW3Noo5epdECup5KEvXcXywfqOlA0SVn0pTLpC0pEF16JHYebD4kxZcfZEQXI1B-ZoSA6-UYJDxiieKnVuoicYd4I-R894KO5tQy5DBBYW4yoNtNi5Wf5vnx7HydbDOHOXIwSNw6nSSYiVgYY6DoqUmMM9vUPjGrr1qGK7sD8n89U6g614lt9K3w7LBeriTl1eHltk6csOST3KtnhlJbwcEc-DbdEmkzwKFRGK_3TeDKQsN4CdcM-08xn27x2rOr7kruLJBERQH-hTi-OlXp0SACbbtVslh6EpiMvcnaGyyMAJ3a6ZPkSjKeu2CaMXoasNTJG7BGuXYg7gHAgRX7-MhC0GzQN2hVWYq7Hc2EZIa3jJGl1ZDroZ9yp2s_ApPK8uhakwe8lauAQ1El8U0GAU--SH9Rx5ocQv7JUY4jVovC-xp9mJgSBYPcSTTFcqWEs8NWagzabSVq6uC-D1_FFNgBdI5JNlsW9COSumGCfCBKN_NkEbzFhuAua0EMVO6Y3e45qc6XQb5GkJ0CTlNe0ZGPcM2vOjjyL4jfM9EC2HyZhbVO61XW03aiuyVnreb6_50R2k8bUNxOPm4N8djhBzqLYuGQ0nxNsJzF4N20fJsN-ox0gdt-ARK4Oc_YEQC82SV7Y1phDkWe8xXzcs3RNNIyGZxcQ8gBiASDFOqX7uNRHastvvChIsUoig_nhK86KT3E_OgslD1UI_P-MERweZPgWUaxbdUfigJpe3gGBK4QWfR_UcQqy5wmJbx-a3jLw0fC0PqwPOhxgxuyXi4szY21w3I6DEQry-MpLtMF71jzWDDL5QBRDtmcIAuC2JSr-IEf75m-miza_yDHH1epv8uuf_EVeFtUdabwuKww8_P9hGGJLKYa2KMHTYZDiC_Mju88oRhYqqbnpDZ6d1_F8dje70n_VRl_oZfy_7-NfRttsceGpWVq4ub1VTtWucx7GdMS99bKNZ9gQHmWZqhT6CY09jx0vf3i0gCNprvDpsxck3H_X83Cn_U_33dBHzybaTYOw0LV6YfKFdTjiMWQJ-CcFPGnT9l8jPYF3MW3M2P0VQPjuE9Rgir_WtiVMJEsxeYu9295FOOC_JI-qt39XrXgaJoHAvsE1CIamB7D_t4WG-pWd3Pm1_OedicuQUCT3i6ZumUNVyEostXQtCRiu4VGx_ow9guLfre9s52x2FK9-ovJqYvPC1rl0s9MOCnIoU0--V4y21uqQX8GncZGv30HL0lz2-rJWqgzGgN5Z4-4BC3N4qJBLAkMTpWbKKmu6DroqonDEOY0re_be-fnQftZmwbxZi89-DZLUeJDu3dAu-yUnbTEF6r0QmWqzTmqN087IA_5Rv86BsP0367DTQumHSXyGTDfZtJ42JtBDi3gs1kIMJ-YWhwjP9KTt_cX2TDPESd5UXlMBp_rn0MWCHLKV9UtECl7g79Qv5BfN3xpM0tGo2dpBWyP2lANo6zw_up_9yQi7fAxRe1Q88KKx8GY27O2hjtuXdvr5IRAuYBTl11BH1c9HuG_3Y56fLMhAXqu7I3XRkzst6nGTve5bXcryKqUGy5FbRSwQbuw0rUOvSQxta2X7rwsJmrQP_herIrZFKVqtU9EoSFzWD7jkPTbyxtnk418U271kvVAID36foqbBGFkHVZhauqtBBu6eSMPjjQOjEiYIDO9bet3NNgFhScgQObjG2wSxwqSBLuXrfRxqKdF_n-9WVoixHYF-VGOwnkUxYvWXUQy6FAphJJMCoEjzG5FgP4TlCe8VLAoVrhwUFGlQKG7fLa-l3OVrvbrqfTLGBILnCEStwDsMjPR6Z7VUmuGkNVFkrf4QgrN0Dh157yU59f5WiDxod6YaUD9Da7c-pIFzItDmedpQw&cid=CAASKORoReSaxYfvkiKV39xhSmqiSh97-7OsbnhLbPxKOcXeRubz3VLxBNQ&rfl=1%2Chttps%253A%252F%252Fwww.spokesman.com%252F%240
200 OK 35 kB URL HTTP/2 googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AwARpKCQ4WjoU4X8w0bgrKbh5Pvw3Kr7W2iy68HhnLXKmE5_GBy_6VXTJG2HoNeyTXvzEduVVLbPOagPGpB19TopS-9CySWWvRTavkDOydvAlOCku7j2S8ADsFRdXt-2Z7Cvynm1sJjUNbEuagMpl8X5RVqQ&dbm_d=AKAmf-C7awhvDauTRGh8POZao00cz6PosD-oOK7Zxa-9OxQfHsbSxV0py-2-CTZYhdfa-LIIsX1iL29-XqPi8UxJY0-5tpKTVFAuSwhm6KZFAg7csTuK2F8Wc6jMWSPlSaoHZdI_PMZNXkTkj7ZbPS7cc-ZmYAPcE8HWw8eCL-oD_ekzHtB9JS9dKzxdrxBJp1JGshZvdgLx2nQaIXaxcqyuzWOeNK7qLjbK5hZ1VGB3DTGQCXooibhmPOFRvQtdk3-2jvvt_eMVjl9uhBft3JpCNWDkl9FxvInHjo87Mn6ed6yVrUYd3_ONxY7HKAjmpKV47JBPBiqUzC9asgEVuu-bKa-z4mNN-V7YDfoP8uJfSkYQf6uxUKfzOArGSRWeOtcS7Q9VPUz0Kgp5Xfh3SQoZBgqkkwNFYGFCANACX8VHnlq9H_Nxoml5WeauJgL14wHHP_2W-EpcDBR0hWf9g7c7Eyzx7zkWnC1B8uRmMxdvxPLbvoHFz6kE7PPw6kl0hsKnuhmpWaa4TYTIfdtMH5pkl7Ejy9VK3XjgkXdAd9-UUJiBXENf2pGpS5pNec4i9cAbsAGJq75SDTxWnx60AGCWNTiWSnih0KmYf9D1ixCdMCtXBW2VnYcHNv9o_BfhWdN0KtdEzK8_T4cPSOSyTYDLIZWNqQ1aCp7aJbcBfhcezXRQ-jNi33gV24vlfUyJCxD6mtY0h0P6OzyrP1Xx0rOOwNp5Wq8Gr3XG7cwhmzxbDGMBkfcLTfZTxYigT-BwDPhYXNCMpJhNgY6MUId-ZJbufrWrHNhLK44ds7NGRfJfnOJs_lBFlcbnrVPY3mmcZN3fyWIBh1RR_f5MAQAW_gSLWYv-a0Olj3bdck-oGKZd8XcVUqdGM8g5WXvGuWX8dOfspmO6chXWNsYglVmFrtl6U3V7IjHFt2-q12QoKQ-2cpo21fcx12DimY5I6SMH0Y7AypwZhULMnoLAflIgYbLqYF1kT6a4YBQQzRuRSNi3YbAzH_xfXoV_Hxl5Y3FtZ9pCtV-k-YNZynXX04bcEORzJpvgphAAphwi2o96kON7xiqiuKtErJer2yp-0AeswQ1XwAFWfoAB8EAm9xHlRY5juCUgqOyR09top1dwMRwzwkpWYf0XsA5x59Gl2jWz1WW24abhFEXKj_mCpmZje8ZC7CpVXWexM2p0tX9uPKpgx-hU7qSpFPTR-e-EqrfjoXmS8A3j_Rfbj5h-2yWy0BzcftFZ6l30XtH6hoNrXwAzVFFVoVlxJSbVL2kqRCnDEzvhE3qZksAyzUmC_72lfrNkVXOTEnnJYxLB7nIYmjhpxjLAWQbCjELORSY5jWBGNw60BsVAD17bz8z6PM2MpmX1eA__fvJxlxxletLgygbUtlLdoSCtw4cp98ZkpVGLBJ41R9BxPyjn_MYXCbe78HdHAHQD4GVA73Tf1-39gEkN9PA_F1bt2xpQoCoOs_eURJJJyOms0OgPaW3Noo5epdECup5KEvXcXywfqOlA0SVn0pTLpC0pEF16JHYebD4kxZcfZEQXI1B-ZoSA6-UYJDxiieKnVuoicYd4I-R894KO5tQy5DBBYW4yoNtNi5Wf5vnx7HydbDOHOXIwSNw6nSSYiVgYY6DoqUmMM9vUPjGrr1qGK7sD8n89U6g614lt9K3w7LBeriTl1eHltk6csOST3KtnhlJbwcEc-DbdEmkzwKFRGK_3TeDKQsN4CdcM-08xn27x2rOr7kruLJBERQH-hTi-OlXp0SACbbtVslh6EpiMvcnaGyyMAJ3a6ZPkSjKeu2CaMXoasNTJG7BGuXYg7gHAgRX7-MhC0GzQN2hVWYq7Hc2EZIa3jJGl1ZDroZ9yp2s_ApPK8uhakwe8lauAQ1El8U0GAU--SH9Rx5ocQv7JUY4jVovC-xp9mJgSBYPcSTTFcqWEs8NWagzabSVq6uC-D1_FFNgBdI5JNlsW9COSumGCfCBKN_NkEbzFhuAua0EMVO6Y3e45qc6XQb5GkJ0CTlNe0ZGPcM2vOjjyL4jfM9EC2HyZhbVO61XW03aiuyVnreb6_50R2k8bUNxOPm4N8djhBzqLYuGQ0nxNsJzF4N20fJsN-ox0gdt-ARK4Oc_YEQC82SV7Y1phDkWe8xXzcs3RNNIyGZxcQ8gBiASDFOqX7uNRHastvvChIsUoig_nhK86KT3E_OgslD1UI_P-MERweZPgWUaxbdUfigJpe3gGBK4QWfR_UcQqy5wmJbx-a3jLw0fC0PqwPOhxgxuyXi4szY21w3I6DEQry-MpLtMF71jzWDDL5QBRDtmcIAuC2JSr-IEf75m-miza_yDHH1epv8uuf_EVeFtUdabwuKww8_P9hGGJLKYa2KMHTYZDiC_Mju88oRhYqqbnpDZ6d1_F8dje70n_VRl_oZfy_7-NfRttsceGpWVq4ub1VTtWucx7GdMS99bKNZ9gQHmWZqhT6CY09jx0vf3i0gCNprvDpsxck3H_X83Cn_U_33dBHzybaTYOw0LV6YfKFdTjiMWQJ-CcFPGnT9l8jPYF3MW3M2P0VQPjuE9Rgir_WtiVMJEsxeYu9295FOOC_JI-qt39XrXgaJoHAvsE1CIamB7D_t4WG-pWd3Pm1_OedicuQUCT3i6ZumUNVyEostXQtCRiu4VGx_ow9guLfre9s52x2FK9-ovJqYvPC1rl0s9MOCnIoU0--V4y21uqQX8GncZGv30HL0lz2-rJWqgzGgN5Z4-4BC3N4qJBLAkMTpWbKKmu6DroqonDEOY0re_be-fnQftZmwbxZi89-DZLUeJDu3dAu-yUnbTEF6r0QmWqzTmqN087IA_5Rv86BsP0367DTQumHSXyGTDfZtJ42JtBDi3gs1kIMJ-YWhwjP9KTt_cX2TDPESd5UXlMBp_rn0MWCHLKV9UtECl7g79Qv5BfN3xpM0tGo2dpBWyP2lANo6zw_up_9yQi7fAxRe1Q88KKx8GY27O2hjtuXdvr5IRAuYBTl11BH1c9HuG_3Y56fLMhAXqu7I3XRkzst6nGTve5bXcryKqUGy5FbRSwQbuw0rUOvSQxta2X7rwsJmrQP_herIrZFKVqtU9EoSFzWD7jkPTbyxtnk418U271kvVAID36foqbBGFkHVZhauqtBBu6eSMPjjQOjEiYIDO9bet3NNgFhScgQObjG2wSxwqSBLuXrfRxqKdF_n-9WVoixHYF-VGOwnkUxYvWXUQy6FAphJJMCoEjzG5FgP4TlCe8VLAoVrhwUFGlQKG7fLa-l3OVrvbrqfTLGBILnCEStwDsMjPR6Z7VUmuGkNVFkrf4QgrN0Dh157yU59f5WiDxod6YaUD9Da7c-pIFzItDmedpQw&cid=CAASKORoReSaxYfvkiKV39xhSmqiSh97-7OsbnhLbPxKOcXeRubz3VLxBNQ&rfl=1%2Chttps%253A%252F%252Fwww.spokesman.com%252F%240
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 1a9591426f7f7abd3d79bca34a3ef8bd
7c2585126d2cddd2dc80c15785fe33ada81d965e
68e74fe6dfcea68ad688ce4d7dcb2ff4b21c4ba8fc5c007479890c644fc3a9e8
GET /dbm/ad?dbm_c=AKAmf-AwARpKCQ4WjoU4X8w0bgrKbh5Pvw3Kr7W2iy68HhnLXKmE5_GBy_6VXTJG2HoNeyTXvzEduVVLbPOagPGpB19TopS-9CySWWvRTavkDOydvAlOCku7j2S8ADsFRdXt-2Z7Cvynm1sJjUNbEuagMpl8X5RVqQ&dbm_d=AKAmf-C7awhvDauTRGh8POZao00cz6PosD-oOK7Zxa-9OxQfHsbSxV0py-2-CTZYhdfa-LIIsX1iL29-XqPi8UxJY0-5tpKTVFAuSwhm6KZFAg7csTuK2F8Wc6jMWSPlSaoHZdI_PMZNXkTkj7ZbPS7cc-ZmYAPcE8HWw8eCL-oD_ekzHtB9JS9dKzxdrxBJp1JGshZvdgLx2nQaIXaxcqyuzWOeNK7qLjbK5hZ1VGB3DTGQCXooibhmPOFRvQtdk3-2jvvt_eMVjl9uhBft3JpCNWDkl9FxvInHjo87Mn6ed6yVrUYd3_ONxY7HKAjmpKV47JBPBiqUzC9asgEVuu-bKa-z4mNN-V7YDfoP8uJfSkYQf6uxUKfzOArGSRWeOtcS7Q9VPUz0Kgp5Xfh3SQoZBgqkkwNFYGFCANACX8VHnlq9H_Nxoml5WeauJgL14wHHP_2W-EpcDBR0hWf9g7c7Eyzx7zkWnC1B8uRmMxdvxPLbvoHFz6kE7PPw6kl0hsKnuhmpWaa4TYTIfdtMH5pkl7Ejy9VK3XjgkXdAd9-UUJiBXENf2pGpS5pNec4i9cAbsAGJq75SDTxWnx60AGCWNTiWSnih0KmYf9D1ixCdMCtXBW2VnYcHNv9o_BfhWdN0KtdEzK8_T4cPSOSyTYDLIZWNqQ1aCp7aJbcBfhcezXRQ-jNi33gV24vlfUyJCxD6mtY0h0P6OzyrP1Xx0rOOwNp5Wq8Gr3XG7cwhmzxbDGMBkfcLTfZTxYigT-BwDPhYXNCMpJhNgY6MUId-ZJbufrWrHNhLK44ds7NGRfJfnOJs_lBFlcbnrVPY3mmcZN3fyWIBh1RR_f5MAQAW_gSLWYv-a0Olj3bdck-oGKZd8XcVUqdGM8g5WXvGuWX8dOfspmO6chXWNsYglVmFrtl6U3V7IjHFt2-q12QoKQ-2cpo21fcx12DimY5I6SMH0Y7AypwZhULMnoLAflIgYbLqYF1kT6a4YBQQzRuRSNi3YbAzH_xfXoV_Hxl5Y3FtZ9pCtV-k-YNZynXX04bcEORzJpvgphAAphwi2o96kON7xiqiuKtErJer2yp-0AeswQ1XwAFWfoAB8EAm9xHlRY5juCUgqOyR09top1dwMRwzwkpWYf0XsA5x59Gl2jWz1WW24abhFEXKj_mCpmZje8ZC7CpVXWexM2p0tX9uPKpgx-hU7qSpFPTR-e-EqrfjoXmS8A3j_Rfbj5h-2yWy0BzcftFZ6l30XtH6hoNrXwAzVFFVoVlxJSbVL2kqRCnDEzvhE3qZksAyzUmC_72lfrNkVXOTEnnJYxLB7nIYmjhpxjLAWQbCjELORSY5jWBGNw60BsVAD17bz8z6PM2MpmX1eA__fvJxlxxletLgygbUtlLdoSCtw4cp98ZkpVGLBJ41R9BxPyjn_MYXCbe78HdHAHQD4GVA73Tf1-39gEkN9PA_F1bt2xpQoCoOs_eURJJJyOms0OgPaW3Noo5epdECup5KEvXcXywfqOlA0SVn0pTLpC0pEF16JHYebD4kxZcfZEQXI1B-ZoSA6-UYJDxiieKnVuoicYd4I-R894KO5tQy5DBBYW4yoNtNi5Wf5vnx7HydbDOHOXIwSNw6nSSYiVgYY6DoqUmMM9vUPjGrr1qGK7sD8n89U6g614lt9K3w7LBeriTl1eHltk6csOST3KtnhlJbwcEc-DbdEmkzwKFRGK_3TeDKQsN4CdcM-08xn27x2rOr7kruLJBERQH-hTi-OlXp0SACbbtVslh6EpiMvcnaGyyMAJ3a6ZPkSjKeu2CaMXoasNTJG7BGuXYg7gHAgRX7-MhC0GzQN2hVWYq7Hc2EZIa3jJGl1ZDroZ9yp2s_ApPK8uhakwe8lauAQ1El8U0GAU--SH9Rx5ocQv7JUY4jVovC-xp9mJgSBYPcSTTFcqWEs8NWagzabSVq6uC-D1_FFNgBdI5JNlsW9COSumGCfCBKN_NkEbzFhuAua0EMVO6Y3e45qc6XQb5GkJ0CTlNe0ZGPcM2vOjjyL4jfM9EC2HyZhbVO61XW03aiuyVnreb6_50R2k8bUNxOPm4N8djhBzqLYuGQ0nxNsJzF4N20fJsN-ox0gdt-ARK4Oc_YEQC82SV7Y1phDkWe8xXzcs3RNNIyGZxcQ8gBiASDFOqX7uNRHastvvChIsUoig_nhK86KT3E_OgslD1UI_P-MERweZPgWUaxbdUfigJpe3gGBK4QWfR_UcQqy5wmJbx-a3jLw0fC0PqwPOhxgxuyXi4szY21w3I6DEQry-MpLtMF71jzWDDL5QBRDtmcIAuC2JSr-IEf75m-miza_yDHH1epv8uuf_EVeFtUdabwuKww8_P9hGGJLKYa2KMHTYZDiC_Mju88oRhYqqbnpDZ6d1_F8dje70n_VRl_oZfy_7-NfRttsceGpWVq4ub1VTtWucx7GdMS99bKNZ9gQHmWZqhT6CY09jx0vf3i0gCNprvDpsxck3H_X83Cn_U_33dBHzybaTYOw0LV6YfKFdTjiMWQJ-CcFPGnT9l8jPYF3MW3M2P0VQPjuE9Rgir_WtiVMJEsxeYu9295FOOC_JI-qt39XrXgaJoHAvsE1CIamB7D_t4WG-pWd3Pm1_OedicuQUCT3i6ZumUNVyEostXQtCRiu4VGx_ow9guLfre9s52x2FK9-ovJqYvPC1rl0s9MOCnIoU0--V4y21uqQX8GncZGv30HL0lz2-rJWqgzGgN5Z4-4BC3N4qJBLAkMTpWbKKmu6DroqonDEOY0re_be-fnQftZmwbxZi89-DZLUeJDu3dAu-yUnbTEF6r0QmWqzTmqN087IA_5Rv86BsP0367DTQumHSXyGTDfZtJ42JtBDi3gs1kIMJ-YWhwjP9KTt_cX2TDPESd5UXlMBp_rn0MWCHLKV9UtECl7g79Qv5BfN3xpM0tGo2dpBWyP2lANo6zw_up_9yQi7fAxRe1Q88KKx8GY27O2hjtuXdvr5IRAuYBTl11BH1c9HuG_3Y56fLMhAXqu7I3XRkzst6nGTve5bXcryKqUGy5FbRSwQbuw0rUOvSQxta2X7rwsJmrQP_herIrZFKVqtU9EoSFzWD7jkPTbyxtnk418U271kvVAID36foqbBGFkHVZhauqtBBu6eSMPjjQOjEiYIDO9bet3NNgFhScgQObjG2wSxwqSBLuXrfRxqKdF_n-9WVoixHYF-VGOwnkUxYvWXUQy6FAphJJMCoEjzG5FgP4TlCe8VLAoVrhwUFGlQKG7fLa-l3OVrvbrqfTLGBILnCEStwDsMjPR6Z7VUmuGkNVFkrf4QgrN0Dh157yU59f5WiDxod6YaUD9Da7c-pIFzItDmedpQw&cid=CAASKORoReSaxYfvkiKV39xhSmqiSh97-7OsbnhLbPxKOcXeRubz3VLxBNQ&rfl=1%2Chttps%253A%252F%252Fwww.spokesman.com%252F%240 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Sep 2022 06:20:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 34945
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Sep-2022 06:35:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjpudWxsLCJlYnV5IjoiMCIsImVhZHYiOiIwIiwiZWNpZCI6bnVsbCwiZWVudiI6ImoiLCJlcGlkIjoiLzEwMDk2NDEvU3Bva2VzbWFuRGVza3RvcF9Ib21lcGFnZV9EYXNoYm9hcmRfMzAweDI1MCIsImVzaWQiOm51bGwsInNpemUiOiIzMDB4MjUwIiwicmVuZGVyZWQiOiIxIn0&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=477e5769-01c8-4dbf-b5d6-1cdca0ff8818&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248542&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700
200 OK 43 B URL HTTP/1.1 www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjpudWxsLCJlYnV5IjoiMCIsImVhZHYiOiIwIiwiZWNpZCI6bnVsbCwiZWVudiI6ImoiLCJlcGlkIjoiLzEwMDk2NDEvU3Bva2VzbWFuRGVza3RvcF9Ib21lcGFnZV9EYXNoYm9hcmRfMzAweDI1MCIsImVzaWQiOm51bGwsInNpemUiOiIzMDB4MjUwIiwicmVuZGVyZWQiOiIxIn0&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=477e5769-01c8-4dbf-b5d6-1cdca0ff8818&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248542&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 24290d55bbf8c5c8712543cf56ebe357
90d0084e78e359a9dbc746642d836df93a0ca697
d6fbd6d46b0a1be6a3cdc49f712f83d661805a42fc37993340e2cc4493819adc
GET /i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjpudWxsLCJlYnV5IjoiMCIsImVhZHYiOiIwIiwiZWNpZCI6bnVsbCwiZWVudiI6ImoiLCJlcGlkIjoiLzEwMDk2NDEvU3Bva2VzbWFuRGVza3RvcF9Ib21lcGFnZV9EYXNoYm9hcmRfMzAweDI1MCIsImVzaWQiOm51bGwsInNpemUiOiIzMDB4MjUwIiwicmVuZGVyZWQiOiIxIn0&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=477e5769-01c8-4dbf-b5d6-1cdca0ff8818&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248542&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700 HTTP/1.1
Host: www.i.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 06 Sep 2022 06:20:54 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Content-Length: 43
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b3260bc902a71573ab1612ef94b3f6f8
451bdfcc34a1d3c494caa2a78cc698cdc8f184bb
34f24387cafb1b6dbaf391eff8a2d25e19b66ebdd232134046f00b3b07d69621
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 06:20:54 GMT
Last-Modified: Tue, 06 Sep 2022 04:38:30 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QNXbeGyIoz5sYxZHwo1VCQULPsLLPzKmUztflOL1MMOThPFk2neHsw==
Age: 6144
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 450a99775a3610a3b4806c7210320cd6
9a31b824335587c7237241f059df17e5eb94726b
c5ae355b95fffa3d813c9cf76166bd80d5dac2b02e5ae24456d8a485029ec71d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 06:20:54 GMT
Last-Modified: Tue, 06 Sep 2022 04:58:36 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EbcR0tx0i3A5kQHi7V_Vl5EuEQk-DZbWFDWJgTTv67e27JcjAgUJuA==
Age: 4939
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s0.2mdn.net/879366/html_inpage_rendering_lib_200_276.js
200 OK 60 kB URL HTTP/2 s0.2mdn.net/879366/html_inpage_rendering_lib_200_276.js
IP
File type ASCII text, with very long lines (2322)
Hash 36b0ba015b3250f6bda9e89b898f4707
635c67d8b08f40705e87e9c81cb138aef9c2ecdb
c70af3ba570296102947920e68bfe252d08de33b0464a910dd8e5d3ac58410f3
GET /879366/html_inpage_rendering_lib_200_276.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 60311
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 10:30:23 GMT
expires: Tue, 06 Sep 2022 10:30:23 GMT
cache-control: public, max-age=86400
age: 71431
last-modified: Wed, 02 Mar 2022 23:07:25 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
paywall-ad-bucket.s3.amazonaws.com/ad_300_250.jpg
200 OK 631 B URL HTTP/1.1 paywall-ad-bucket.s3.amazonaws.com/ad_300_250.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3\012- data
Hash ef2cc7f55b7ab677b023e36033e26471
a43c932953f0d5b0f8057fcd73f0d807a0709948
0859f5f9bf49348ef81d01f953d520c10a2a857961ef1bfad4a7903609889de5
GET /ad_300_250.jpg HTTP/1.1
Host: paywall-ad-bucket.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: E9MziaDJoOR2pzZxhM2eJmWhQjuRKq7Qaonm4paeqlpgHL9egSSGqKcHH7EgguXh9dFXwcs0uwE=
x-amz-request-id: R277887KG675M319
Date: Tue, 06 Sep 2022 06:20:55 GMT
Last-Modified: Tue, 15 Oct 2019 13:44:16 GMT
ETag: "ef2cc7f55b7ab677b023e36033e26471"
x-amz-meta-s3b-last-modified: 20191015T134358Z
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 631
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 06:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjpudWxsLCJlYnV5IjoiMCIsImVhZHYiOiIwIiwiZWNpZCI6bnVsbCwiZWVudiI6ImoiLCJlcGlkIjoiLzEwMDk2NDEvU3Bva2VzbWFuRGVza3RvcF9ob21lcGFnZV8xXzcyOHg5MCIsImVzaWQiOm51bGwsInNpemUiOiI3Mjh4OTAiLCJyZW5kZXJlZCI6IjEifQ&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=d954d527-5caa-41f7-9eec-c4170c4d271d&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248544&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700
200 OK 43 B URL HTTP/1.1 www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjpudWxsLCJlYnV5IjoiMCIsImVhZHYiOiIwIiwiZWNpZCI6bnVsbCwiZWVudiI6ImoiLCJlcGlkIjoiLzEwMDk2NDEvU3Bva2VzbWFuRGVza3RvcF9ob21lcGFnZV8xXzcyOHg5MCIsImVzaWQiOm51bGwsInNpemUiOiI3Mjh4OTAiLCJyZW5kZXJlZCI6IjEifQ&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=d954d527-5caa-41f7-9eec-c4170c4d271d&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248544&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 24290d55bbf8c5c8712543cf56ebe357
90d0084e78e359a9dbc746642d836df93a0ca697
d6fbd6d46b0a1be6a3cdc49f712f83d661805a42fc37993340e2cc4493819adc
GET /i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjpudWxsLCJlYnV5IjoiMCIsImVhZHYiOiIwIiwiZWNpZCI6bnVsbCwiZWVudiI6ImoiLCJlcGlkIjoiLzEwMDk2NDEvU3Bva2VzbWFuRGVza3RvcF9ob21lcGFnZV8xXzcyOHg5MCIsImVzaWQiOm51bGwsInNpemUiOiI3Mjh4OTAiLCJyZW5kZXJlZCI6IjEifQ&tv=js-3.0.155&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=unknown(255)&res=1280x1024&cd=24&cookie=1&f_jquery=1&f_es6=1&f_gears=2&tvltm=20&tid=d954d527-5caa-41f7-9eec-c4170c4d271d&pid=d6de7972-ac7e-48f6-8fd3-36d01b5c3090&dtm=1662445248544&qnm=_matherq&visible=1&tabid=fb87d69f-342e-4b78-9bdd-94dbb27c7c13&url=https%3A%2F%2Fwww.spokesman.com%2F&vp=1280x939&ds=1280x10997&tofa=1662445247&vid=1&lvidt=1662445247&duid=3dcd3407-73c3-4af2-9b91-84c52f1d9c08&fp=1326250463&cid=ma20153&mrk=575681700 HTTP/1.1
Host: www.i.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 06 Sep 2022 06:20:54 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Content-Length: 43
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 58142794a060ef1611b0afba6dccb7b9
d7ba628d561041ea1e65033e8cfedd6a4722cec8
523f8423fcbe226591df1f0b1d3bd20dd128606ad21a4c691f164786deab4f19
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 06:20:54 GMT
Etag: "63164e84-1d7"
Server: ECS (dcb/7F80)
X-Cache: Miss from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ARrwPGh5V6aevrI_OTNSFFImBp5ZJLe-Ma5cgZFN9WR33N0pwjjcpg==
redirect.prod.experiment.routing.cloudfront.aws.a2z.com/x.png
204 No Content 0 B URL HTTP/2 redirect.prod.experiment.routing.cloudfront.aws.a2z.com/x.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x.png HTTP/1.1
Host: redirect.prod.experiment.routing.cloudfront.aws.a2z.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 06 Sep 2022 06:20:54 GMT
server: Server
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash be41ea8494f1857ff3665f3e9801e67e
14d79fa24804abeec284701fd02f4ecbc3e2fcf0
5646553a6581514c52d3a0a7336311e16940105dd0d2d2576f985443910d7870
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 06:20:54 GMT
Server: ECS (dcb/7F5E)
X-Cache: Miss from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: exY5W-DZxSbRL0dR5TId3iu5NuENsibvWcUan4eykSHUMZICzBTsKA==
static.doubleclick.net/dynamic/5/206675363/10746270133443010303_9186565913604646649.jpeg
200 OK 91 kB URL HTTP/2 static.doubleclick.net/dynamic/5/206675363/10746270133443010303_9186565913604646649.jpeg
IP
File type JPEG image data, progressive, precision 8, 600x600, components 3\012- data
Hash f7c4817d8261deab2fcf1cd546f8fd8a
e0bc1a04ad9baad28b307c1e1f6bee3343c41f7c
68eaf8ac60d0942a6bcee0b4538d7d50ebe41bd26e332550d05d8b9d37fa16e4
GET /dynamic/5/206675363/10746270133443010303_9186565913604646649.jpeg HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-programmable
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-programmable"
report-to: {"group":"ads-programmable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-programmable"}]}
content-length: 91035
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Sep 2022 16:50:11 GMT
expires: Mon, 04 Sep 2023 16:50:11 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 04 Sep 2022 09:35:57 GMT
content-type: image/jpeg
age: 135043
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.doubleclick.net/dynamic/5/206675363/10244921436496772616_9146618617033836075.jpeg
200 OK 73 kB URL HTTP/2 static.doubleclick.net/dynamic/5/206675363/10244921436496772616_9146618617033836075.jpeg
IP
File type JPEG image data, progressive, precision 8, 600x600, components 3\012- data
Hash 4884231ed26d431ec5cc923ac180aa0f
5cdc749c9c0434d2abdb7cbe044f491f73d14882
fd4166a69eaa2d6cf37f33cb021cda0767429283b038db80e64e4fdd7adac908
GET /dynamic/5/206675363/10244921436496772616_9146618617033836075.jpeg HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-programmable
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-programmable"
report-to: {"group":"ads-programmable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-programmable"}]}
content-length: 72725
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Sep 2022 16:15:37 GMT
expires: Mon, 04 Sep 2023 16:15:37 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 04 Sep 2022 09:34:20 GMT
content-type: image/jpeg
age: 137117
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.doubleclick.net/dynamic/5/206675363/17193697609089488635_4918554488364016110.jpeg
200 OK 84 kB URL HTTP/2 static.doubleclick.net/dynamic/5/206675363/17193697609089488635_4918554488364016110.jpeg
IP
File type JPEG image data, progressive, precision 8, 600x600, components 3\012- data
Hash f91f7d9d4801afe2b289fb0de7c02298
8b98fab8620951fecd61dee4149b933387afa755
3a2e21398d24271b851e1c603a471d43d2f7a1dde989c397b059591b04b1d46c
GET /dynamic/5/206675363/17193697609089488635_4918554488364016110.jpeg HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-programmable
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-programmable"
report-to: {"group":"ads-programmable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-programmable"}]}
content-length: 83891
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Sep 2022 16:52:59 GMT
expires: Mon, 04 Sep 2023 16:52:59 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 04 Sep 2022 09:34:34 GMT
content-type: image/jpeg
age: 134875
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvtPnDpC4ANlVqEk2tDsHv05NrWjnL-j5ykCOSgY9-UokTpa4dANW0J6ovdJAm07T9O0nvnk570_uNF9jONIVQqBr3VSvgIgm7wTksFk8VWtkWFUvMOb6vN2egFBZQzKbJrO_Rx0GI94cAM6zvkO4LVW-SfzIg4MB4LjTuSNo1qQs17O95Pe8Ux3DaU-yWZ9cMRVBJhIAXwDGJndPkzpCU8UQmk5kBGYe3lPZKi_Ggai15XpzLfMEQ_M3_V_B39SyBnx-3kJGGtBa6o9B2FV4nJ7cntaYvcIgpWEIYTPY-kxU7frRoB8AAWXXwt7Hk2gKZabCwTuGb5xFnQRpPl91hcFfVK_wi2SPDZHZuqXA4T3g5kAKP82CCM89_lgLv_xagiVjJX_7tMTEj3ozpFIrJKbvE3DWQYBTFJrZobrjz36Vnzxf1e-W1YfyBVj-le67Wbxfn4oDfU7oSJ9zdjHVjZSaW3cOfRMQ2ufkvnHl_REcwnZWIBd2AdIvl_rPYdZIogX205xM-m2V0e9LEGa7oU7t6XomHUYWl2UNgScLrc0Hzrf5jwtZYd6fI5IhE-On_qAr6XkzejmWPKshqIAMCTw4DEn5L5FnU2KgQgpgRwimrpwCy-XH7v3R_CoZGQ7weowlQoGNyAwm1vHHo2S9Pmd6JyODo0sZz41oPq9lASZhjefwHF5L5LIGjMOZ58PjrGIXa7k44sZeBwZMTZzFybAiOCRBNkvEUdWwWXBziAftkgCuEeS44AFow_qYHpQq65R951M4aOx2TJB9ECdFaCUcc9btfKLfwDZW6ddvCwV88uzAi67mI7rUcWIbAEzGFZkdlGi20LPWDYKj8y8H62TLzfhL1M7T1FXdYbfVzd7D2ta1Mn5T3PnwxNG1CqwFeKZOtQ3mS6dYeejNatjbe34kOFzbyN61_e9VAHi53G0O_qhI6VkWahNYnd9ryem_BtWy1RHVauR4j_QsEokHZWIK15DwYJMtqZW6RnphZWlsTQSN4ES4R1-EGcssQyga41J_SW8tohpdJTEF19QS4mHeIFoB_h1vqGbunb8TVxFFQWlTwRn9W8Ga_ARlIGezdINWv1Qr5QNrqK1jIW-3nsmxW1C8AHm0cDb6SNcAL5_QUgf6auBUGiS5XbYyEW9_rES6uVJaDGqXHCje0ZDXM7ZlAmushEL8Fsq3NBs7gw6GB9eif1JdVWXA5xr-9tPXE9V4AO5W0EytX2DAP2Hoibf8mPvBaIi43Zgb9Mo8a_9r8jcpSP1t6mhOtMgOJ-Jw&sai=AMfl-YTa1lmbDexgD0o3uWeHiKtSDymNPUA5iBZsTdcWPzI3-dNMw-yjm4sk_wKJZzSs-X3QGyGMjR2YVqcUMEoVA032mg48ocYa6fpq01mvyifdkPnJtzJaE3R5Er5vsZ7-ZQAZ5lOHk1LFVg_2JgHNUnK-oQB8qfE2RXXaCfDSF1867qcxsNZsrVGBhi70eP8vMZA6qxwmiwTPfKPjf3M3Uf9HxX0QxZDYbA&sig=Cg0ArKJSzPmJtNfc6SETEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=294&cbvp=1&cstd=273&cisv=r20220831.35649&adurl=
200 OK 0 B URL HTTP/2 googleads4.g.doubleclick.net/pcs/view?xai=AKAOjsvtPnDpC4ANlVqEk2tDsHv05NrWjnL-j5ykCOSgY9-UokTpa4dANW0J6ovdJAm07T9O0nvnk570_uNF9jONIVQqBr3VSvgIgm7wTksFk8VWtkWFUvMOb6vN2egFBZQzKbJrO_Rx0GI94cAM6zvkO4LVW-SfzIg4MB4LjTuSNo1qQs17O95Pe8Ux3DaU-yWZ9cMRVBJhIAXwDGJndPkzpCU8UQmk5kBGYe3lPZKi_Ggai15XpzLfMEQ_M3_V_B39SyBnx-3kJGGtBa6o9B2FV4nJ7cntaYvcIgpWEIYTPY-kxU7frRoB8AAWXXwt7Hk2gKZabCwTuGb5xFnQRpPl91hcFfVK_wi2SPDZHZuqXA4T3g5kAKP82CCM89_lgLv_xagiVjJX_7tMTEj3ozpFIrJKbvE3DWQYBTFJrZobrjz36Vnzxf1e-W1YfyBVj-le67Wbxfn4oDfU7oSJ9zdjHVjZSaW3cOfRMQ2ufkvnHl_REcwnZWIBd2AdIvl_rPYdZIogX205xM-m2V0e9LEGa7oU7t6XomHUYWl2UNgScLrc0Hzrf5jwtZYd6fI5IhE-On_qAr6XkzejmWPKshqIAMCTw4DEn5L5FnU2KgQgpgRwimrpwCy-XH7v3R_CoZGQ7weowlQoGNyAwm1vHHo2S9Pmd6JyODo0sZz41oPq9lASZhjefwHF5L5LIGjMOZ58PjrGIXa7k44sZeBwZMTZzFybAiOCRBNkvEUdWwWXBziAftkgCuEeS44AFow_qYHpQq65R951M4aOx2TJB9ECdFaCUcc9btfKLfwDZW6ddvCwV88uzAi67mI7rUcWIbAEzGFZkdlGi20LPWDYKj8y8H62TLzfhL1M7T1FXdYbfVzd7D2ta1Mn5T3PnwxNG1CqwFeKZOtQ3mS6dYeejNatjbe34kOFzbyN61_e9VAHi53G0O_qhI6VkWahNYnd9ryem_BtWy1RHVauR4j_QsEokHZWIK15DwYJMtqZW6RnphZWlsTQSN4ES4R1-EGcssQyga41J_SW8tohpdJTEF19QS4mHeIFoB_h1vqGbunb8TVxFFQWlTwRn9W8Ga_ARlIGezdINWv1Qr5QNrqK1jIW-3nsmxW1C8AHm0cDb6SNcAL5_QUgf6auBUGiS5XbYyEW9_rES6uVJaDGqXHCje0ZDXM7ZlAmushEL8Fsq3NBs7gw6GB9eif1JdVWXA5xr-9tPXE9V4AO5W0EytX2DAP2Hoibf8mPvBaIi43Zgb9Mo8a_9r8jcpSP1t6mhOtMgOJ-Jw&sai=AMfl-YTa1lmbDexgD0o3uWeHiKtSDymNPUA5iBZsTdcWPzI3-dNMw-yjm4sk_wKJZzSs-X3QGyGMjR2YVqcUMEoVA032mg48ocYa6fpq01mvyifdkPnJtzJaE3R5Er5vsZ7-ZQAZ5lOHk1LFVg_2JgHNUnK-oQB8qfE2RXXaCfDSF1867qcxsNZsrVGBhi70eP8vMZA6qxwmiwTPfKPjf3M3Uf9HxX0QxZDYbA&sig=Cg0ArKJSzPmJtNfc6SETEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=294&cbvp=1&cstd=273&cisv=r20220831.35649&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsvtPnDpC4ANlVqEk2tDsHv05NrWjnL-j5ykCOSgY9-UokTpa4dANW0J6ovdJAm07T9O0nvnk570_uNF9jONIVQqBr3VSvgIgm7wTksFk8VWtkWFUvMOb6vN2egFBZQzKbJrO_Rx0GI94cAM6zvkO4LVW-SfzIg4MB4LjTuSNo1qQs17O95Pe8Ux3DaU-yWZ9cMRVBJhIAXwDGJndPkzpCU8UQmk5kBGYe3lPZKi_Ggai15XpzLfMEQ_M3_V_B39SyBnx-3kJGGtBa6o9B2FV4nJ7cntaYvcIgpWEIYTPY-kxU7frRoB8AAWXXwt7Hk2gKZabCwTuGb5xFnQRpPl91hcFfVK_wi2SPDZHZuqXA4T3g5kAKP82CCM89_lgLv_xagiVjJX_7tMTEj3ozpFIrJKbvE3DWQYBTFJrZobrjz36Vnzxf1e-W1YfyBVj-le67Wbxfn4oDfU7oSJ9zdjHVjZSaW3cOfRMQ2ufkvnHl_REcwnZWIBd2AdIvl_rPYdZIogX205xM-m2V0e9LEGa7oU7t6XomHUYWl2UNgScLrc0Hzrf5jwtZYd6fI5IhE-On_qAr6XkzejmWPKshqIAMCTw4DEn5L5FnU2KgQgpgRwimrpwCy-XH7v3R_CoZGQ7weowlQoGNyAwm1vHHo2S9Pmd6JyODo0sZz41oPq9lASZhjefwHF5L5LIGjMOZ58PjrGIXa7k44sZeBwZMTZzFybAiOCRBNkvEUdWwWXBziAftkgCuEeS44AFow_qYHpQq65R951M4aOx2TJB9ECdFaCUcc9btfKLfwDZW6ddvCwV88uzAi67mI7rUcWIbAEzGFZkdlGi20LPWDYKj8y8H62TLzfhL1M7T1FXdYbfVzd7D2ta1Mn5T3PnwxNG1CqwFeKZOtQ3mS6dYeejNatjbe34kOFzbyN61_e9VAHi53G0O_qhI6VkWahNYnd9ryem_BtWy1RHVauR4j_QsEokHZWIK15DwYJMtqZW6RnphZWlsTQSN4ES4R1-EGcssQyga41J_SW8tohpdJTEF19QS4mHeIFoB_h1vqGbunb8TVxFFQWlTwRn9W8Ga_ARlIGezdINWv1Qr5QNrqK1jIW-3nsmxW1C8AHm0cDb6SNcAL5_QUgf6auBUGiS5XbYyEW9_rES6uVJaDGqXHCje0ZDXM7ZlAmushEL8Fsq3NBs7gw6GB9eif1JdVWXA5xr-9tPXE9V4AO5W0EytX2DAP2Hoibf8mPvBaIi43Zgb9Mo8a_9r8jcpSP1t6mhOtMgOJ-Jw&sai=AMfl-YTa1lmbDexgD0o3uWeHiKtSDymNPUA5iBZsTdcWPzI3-dNMw-yjm4sk_wKJZzSs-X3QGyGMjR2YVqcUMEoVA032mg48ocYa6fpq01mvyifdkPnJtzJaE3R5Er5vsZ7-ZQAZ5lOHk1LFVg_2JgHNUnK-oQB8qfE2RXXaCfDSF1867qcxsNZsrVGBhi70eP8vMZA6qxwmiwTPfKPjf3M3Uf9HxX0QxZDYbA&sig=Cg0ArKJSzPmJtNfc6SETEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=294&cbvp=1&cstd=273&cisv=r20220831.35649&adurl= HTTP/1.1
Host: googleads4.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8b304b8a5a59d9e820d7f1f00a5a83f0.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
content-security-policy: script-src 'none'; object-src 'none'
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Tue, 06 Sep 2022 06:20:54 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Sep-2022 06:35:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 06 Sep 2022 06:20:54 GMT
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 0 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,sdk-context
Referer: https://www.spokesman.com/
Origin: https://www.spokesman.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-methods: POST
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Tue, 06 Sep 2022 06:20:54 GMT
content-length: 0
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
206 Partial Content 223 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash e382111a6d1052eb520231b56acc9a5c
a8ef2f26eb67439e046a0c025dcb1e65efc276fc
099dab513d8ed4fe5dd80830bd52cbbc4c66a14eb7c96c620f0f64a6ba771f62
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Sdk-Context: appId
Content-Length: 1471
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
content-type: application/json; charset=utf-8
x-ms-session-id: AC7E92DD-C7CD-4218-B540-13B4809E4ECA
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Tue, 06 Sep 2022 06:20:54 GMT
content-length: 223
X-Firefox-Spdy: h2
certify.alexametrics.com/atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&time=1662445248692&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=&host_url=https%3A%2F%2Fwww.spokesman.com%2F&random_number=18184466826&sess_cookie=d2223993183117560b3fd146605&sess_cookie_flag=1&user_cookie=d2223993183117560b3fd146605&user_cookie_flag=1&dynamic=true&domain=spokesman.com&account=TEMji1aUCm00qs&jsv=20130128&user_lang=en-US
200 OK 43 B URL HTTP/1.1 certify.alexametrics.com/atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&time=1662445248692&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=&host_url=https%3A%2F%2Fwww.spokesman.com%2F&random_number=18184466826&sess_cookie=d2223993183117560b3fd146605&sess_cookie_flag=1&user_cookie=d2223993183117560b3fd146605&user_cookie_flag=1&dynamic=true&domain=spokesman.com&account=TEMji1aUCm00qs&jsv=20130128&user_lang=en-US
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&time=1662445248692&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=&host_url=https%3A%2F%2Fwww.spokesman.com%2F&random_number=18184466826&sess_cookie=d2223993183117560b3fd146605&sess_cookie_flag=1&user_cookie=d2223993183117560b3fd146605&user_cookie_flag=1&dynamic=true&domain=spokesman.com&account=TEMji1aUCm00qs&jsv=20130128&user_lang=en-US HTTP/1.1
Host: certify.alexametrics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 17 Jan 2011 20:41:40 GMT
x-amz-meta-alexa-last-modified: 20110117123941
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 06 Sep 2022 03:28:58 GMT
ETag: "221d8352905f2c38b3cb2bd191d630b0"
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yKZ7FBU3HiL71LJ97lAJqx7rqnMDV9o1ZMvX1r--peINclCOoIKypA==
Age: 10318
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8eb872214737a3a1b07940ab8c4ba2bc
869298c3bcfdbe56309cf43379b640b21e138a08
4e9080a447bf58c3202e5a6f9fe4943895d6629039e06c1c484ed52293d7873d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E9080A447BF58C3202E5A6F9FE4943895D6629039E06C1C484ED52293D7873D"
Last-Modified: Mon, 05 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15959
Expires: Tue, 06 Sep 2022 10:46:54 GMT
Date: Tue, 06 Sep 2022 06:20:55 GMT
Connection: keep-alive
api-35-162-43-16.aamapi.com/api/ad.gif
200 OK 43 B URL HTTP/1.1 api-35-162-43-16.aamapi.com/api/ad.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /api/ad.gif HTTP/1.1
Host: api-35-162-43-16.aamapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 06 Sep 2022 06:20:55 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
aamcf.aamsitecertifier.com/i?stm=1662445248728&e=pv&url=https%3A%2F%2Fwww.spokesman.com%2F&page=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&tv=js-2.9.2-SNAPSHOT&tna=cf&aid=210&p=web&tz=UTC&lang=en-US&cs=UTF-8&f_inpriv=0&f_abd=0&res=1280x1024&cd=24&cookie=1&eid=c8fb6b33-cc4f-4500-ba04-edb666a50cc1&dtm=1662445248727&vp=1280x939&ds=1280x10997&vid=1&sid=bad97584-74a4-480f-83e1-c01608069c3f&duid=7d446be0-d6c1-4f7b-8258-eb14e0a87a77&fp=1667245416&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoiaWdsdTpjb20uZ29vZ2xlLmFuYWx5dGljcy9jb29raWVzL2pzb25zY2hlbWEvMS0wLTAiLCJkYXRhIjp7Il9nYSI6IkdBMS4yLjExNjQ4ODQ1NTIuMTY2MjQ0NTI0NyJ9fV19
200 43 B URL HTTP/1.1 aamcf.aamsitecertifier.com/i?stm=1662445248728&e=pv&url=https%3A%2F%2Fwww.spokesman.com%2F&page=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&tv=js-2.9.2-SNAPSHOT&tna=cf&aid=210&p=web&tz=UTC&lang=en-US&cs=UTF-8&f_inpriv=0&f_abd=0&res=1280x1024&cd=24&cookie=1&eid=c8fb6b33-cc4f-4500-ba04-edb666a50cc1&dtm=1662445248727&vp=1280x939&ds=1280x10997&vid=1&sid=bad97584-74a4-480f-83e1-c01608069c3f&duid=7d446be0-d6c1-4f7b-8258-eb14e0a87a77&fp=1667245416&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoiaWdsdTpjb20uZ29vZ2xlLmFuYWx5dGljcy9jb29raWVzL2pzb25zY2hlbWEvMS0wLTAiLCJkYXRhIjp7Il9nYSI6IkdBMS4yLjExNjQ4ODQ1NTIuMTY2MjQ0NTI0NyJ9fV19
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /i?stm=1662445248728&e=pv&url=https%3A%2F%2Fwww.spokesman.com%2F&page=The%20Spokesman-Review%20%7C%20Local%20News%2C%20Business%2C%20Entertainment%2C%20Sports%20%26%20Weather%20for%20Eastern%20Washington&tv=js-2.9.2-SNAPSHOT&tna=cf&aid=210&p=web&tz=UTC&lang=en-US&cs=UTF-8&f_inpriv=0&f_abd=0&res=1280x1024&cd=24&cookie=1&eid=c8fb6b33-cc4f-4500-ba04-edb666a50cc1&dtm=1662445248727&vp=1280x939&ds=1280x10997&vid=1&sid=bad97584-74a4-480f-83e1-c01608069c3f&duid=7d446be0-d6c1-4f7b-8258-eb14e0a87a77&fp=1667245416&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoiaWdsdTpjb20uZ29vZ2xlLmFuYWx5dGljcy9jb29raWVzL2pzb25zY2hlbWEvMS0wLTAiLCJkYXRhIjp7Il9nYSI6IkdBMS4yLjExNjQ4ODQ1NTIuMTY2MjQ0NTI0NyJ9fV19 HTTP/1.1
Host: aamcf.aamsitecertifier.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Content-Type: image/gif
Date: Tue, 06 Sep 2022 06:20:54 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips
Set-Cookie: sp=17207dc5-d8a5-4aaa-af80-0c204d9cf4c5;Expires=Wed, 06 Sep 2023 06:20:55 +0000;Path=/
Content-Length: 43
Connection: keep-alive
api-35-162-43-16.aamapi.com/api/x?AgHxx4jWFWeHF2R8$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
200 OK 0 B URL HTTP/1.1 api-35-162-43-16.aamapi.com/api/x?AgHxx4jWFWeHF2R8$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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/x?AgHxx4jWFWeHF2R8$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 HTTP/1.1
Host: api-35-162-43-16.aamapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 06 Sep 2022 06:20:55 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.spokesman.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: -1
api-35-162-43-16.aamapi.com/api/x?AgHxx4jWFWeHF2R8$YWRibG9jayQ5NzEkMA
200 OK 0 B URL HTTP/1.1 api-35-162-43-16.aamapi.com/api/x?AgHxx4jWFWeHF2R8$YWRibG9jayQ5NzEkMA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/x?AgHxx4jWFWeHF2R8$YWRibG9jayQ5NzEkMA HTTP/1.1
Host: api-35-162-43-16.aamapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 06 Sep 2022 06:20:56 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://www.spokesman.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: -1
static.spokesman.com/js/jquery.min.12b69d0ae6c6.js
200 OK 0 B URL HTTP/2 static.spokesman.com/js/jquery.min.12b69d0ae6c6.js
IP
GET /js/jquery.min.12b69d0ae6c6.js HTTP/1.1
Host: static.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 09 May 2022 02:56:42 GMT
last-modified: Sun, 08 May 2022 00:37:20 GMT
etag: W/"12b69d0ae6c6f0c42942ae6da2896e84"
cache-control: max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LFwbRauWM3A-QuOmbQIKzHwRmoeWSRLMiArslU-I6xp3lGkIYLgiPg==
age: 10380250
X-Firefox-Spdy: h2
cdn.ayc0zsm69431gfebd.xyz/prod/data/spokesman/SR__SPOKESMAN.json?_=1662445248787
200 OK 0 B URL HTTP/2 cdn.ayc0zsm69431gfebd.xyz/prod/data/spokesman/SR__SPOKESMAN.json?_=1662445248787
IP
GET /prod/data/spokesman/SR__SPOKESMAN.json?_=1662445248787 HTTP/1.1
Host: cdn.ayc0zsm69431gfebd.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spokesman.com/
Origin: https://www.spokesman.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,x-ms-blob-committed-block-count,Content-Length,Date,Transfer-Encoding
cache-control: no-cache
content-type: application/octet-stream
date: Tue, 06 Sep 2022 06:20:54 GMT
etag: 0x8DA8793B09689B4
last-modified: Fri, 26 Aug 2022 18:49:21 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-blob-committed-block-count: 1
x-ms-blob-type: AppendBlob
x-ms-lease-status: unlocked
x-ms-request-id: 89400c35-701e-0066-05b8-c1b89e000000
x-ms-version: 2009-09-19
content-length: 1275735
X-Firefox-Spdy: h2
api-mg2.db-ip.com/v2/p14891b727f063924f0d86d8a8e5063678abd2ac/self?_=1662445248324
200 OK 0 B URL HTTP/2 api-mg2.db-ip.com/v2/p14891b727f063924f0d86d8a8e5063678abd2ac/self?_=1662445248324
IP
GET /v2/p14891b727f063924f0d86d8a8e5063678abd2ac/self?_=1662445248324 HTTP/1.1
Host: api-mg2.db-ip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.spokesman.com
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 06:20:53 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
last-modified: Tue, 06 Sep 2022 06:20:53 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pztHT3zkmdTutAmyAUXCUJIosylZ1hPzOfhUxh0xrbvv4k3maz4mhXZ9LBWgTvZpOcIHPlTltJkPYPRCfREXn5boRMoks%2Bq%2BuCcbggZX%2FsPM5vjXW1Iss4NW%2FPUjgVxwUKvm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 746519f2dac3b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
aamapi.com/api/init-5499fsal6gpaz5tx8ut.js
200 OK 0 B URL HTTP/2 aamapi.com/api/init-5499fsal6gpaz5tx8ut.js
IP
GET /api/init-5499fsal6gpaz5tx8ut.js HTTP/1.1
Host: aamapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 06:20:54 GMT
content-type: text/javascript
server: openresty
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: -1
content-encoding: gzip
X-Firefox-Spdy: h2
href.li/?https://securemyaccount-amazonbillingremanpasarnihbos.4nmn.com/?verify
200 OK 0 B URL HTTP/2 href.li/?https://securemyaccount-amazonbillingremanpasarnihbos.4nmn.com/?verify
IP
GET /?https://securemyaccount-amazonbillingremanpasarnihbos.4nmn.com/?verify HTTP/1.1
Host: href.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 06:20:49 GMT
content-type: text/html; charset=utf-8
strict-transport-security: max-age=31536000
vary: Accept-Encoding
content-encoding: br
x-ac: 3.arn _dca
X-Firefox-Spdy: h2
www.spokesman.com/
200 OK 0 B IP
GET / HTTP/1.1
Host: www.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Tue, 06 Sep 2022 06:19:53 GMT
server: nginx/1.22.0
cache-control: max-age=300
x-frame-options: SAMEORIGIN
x-amzn-trace-id: Root=1-6316e689-57f9f7471958407d35ef1cb2
content-encoding: gzip
vary: Accept-Encoding,Cookie
content-security-policy: upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noarchive
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iIfyCi37cMY8i7jLzZedta_ToNw6MybmVZ5ho8X-nCoqRSC7sAuG2A==
age: 58
X-Firefox-Spdy: h2
static.spokesman.com/sv3/js/critical.min.7f719ef7842f.js
200 OK 0 B URL HTTP/2 static.spokesman.com/sv3/js/critical.min.7f719ef7842f.js
IP
GET /sv3/js/critical.min.7f719ef7842f.js HTTP/1.1
Host: static.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 19 May 2022 00:25:37 GMT
last-modified: Tue, 10 May 2022 02:21:52 GMT
etag: W/"7f719ef7842f474e36e669c95955f7b0"
cache-control: max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wzdtPiI0C7E-c9U_vzYl22nXVWsWs_86dVHMXobo-qg5HNfAGVbPyg==
age: 9525315
X-Firefox-Spdy: h2
static.spokesman.com/ads/spokesman/base_ads.b6d5845dec51.js
200 OK 0 B URL HTTP/2 static.spokesman.com/ads/spokesman/base_ads.b6d5845dec51.js
IP
GET /ads/spokesman/base_ads.b6d5845dec51.js HTTP/1.1
Host: static.spokesman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spokesman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 23 Aug 2022 00:31:06 GMT
last-modified: Tue, 23 Aug 2022 00:24:44 GMT
etag: W/"b6d5845dec51d4391b512b6bb304766d"
cache-control: max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0mgpmTWc-f5wi8fYBdjMEsGn4Z7KGauZM1vkPIT7JPBRGWlcPJ7ziQ==
age: 1230586
X-Firefox-Spdy: h2
221.144.12.67
54.218.91.113
31.13.72.36
51.120.55.215
104.18.32.68
13.69.106.89
93.184.220.29