michigan.yournewsnet.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
301 Moved Permanently 169 B URL HTTP/1.1 michigan.yournewsnet.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9527755784f5014d2c94dcabdf6ae892
941126eba6b0b049b4a09fb846ebd943e894e068
5b111ef9f2dbaf8e8870567dc8e2302efe2b0feb9d4ba62ce74c1039ab663523
Analyzer Verdict Alert fortinet Phishing
GET /story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.yournewsnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 08:08:24 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9037
Expires: Sun, 04 Dec 2022 10:39:02 GMT
Date: Sun, 04 Dec 2022 08:08:25 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 67e9370f1bf3e4946a01f346eeae8966
aaab391d1134302d718de7a0d5edbedf884633e6
27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2787
Cache-Control: max-age=97754
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:25 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 11:17:39 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3356
Expires: Sun, 04 Dec 2022 09:04:21 GMT
Date: Sun, 04 Dec 2022 08:08:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 07:20:05 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2900
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e+A5g09tF88vebrTHbtolLKZjvwo+rHiJmutKqvQwwL23OxvZoO6uEyXCzPYrbjtXKscKjVe5AM=
x-amz-request-id: 6AVW2KRZD23C5MW5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 07:47:28 GMT
age: 1257
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 08:08:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 248931bb68c10fb3f0d2190d66793ae6
63673c911d6f5af7cb5a2b063a8c19d1febb2089
5da874ed1241f2b49a2fa73c641b59f43e54adad5c87f9ddb6565f44f85e2fe5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:25 GMT
Server: ECS (amb/6B81)
Content-Length: 279
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 07:11:19 GMT
cache-control: public,max-age=3600
age: 3426
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2776
Cache-Control: max-age=92682
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:25 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 09:53:07 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 280 B IP
Hash 1a56736cf1f02c2242946ca0170c2c3a
a47ca5cfc4667a1466875542da0de22f64862f86
0fdd7486e01858e490d7c08343c7a861c5fe856fc0debc08df0541ccc89f80b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2636
Cache-Control: max-age=171417
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:25 GMT
Etag: "638c45c6-118"
Expires: Tue, 06 Dec 2022 07:45:22 GMT
Last-Modified: Sun, 04 Dec 2022 07:01:26 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
cdnjs.cloudflare.com/ajax/libs/iframe-resizer/3.5.3/iframeResizer.contentWindow.min.js
200 OK 4.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/iframe-resizer/3.5.3/iframeResizer.contentWindow.min.js
IP
File type ASCII text, with very long lines (13075)
Hash 6d2ce0675b13f62cc7546cf83b136ae1
4d508019afc29ed206191d354d8b3446e175e694
1da6e1f2cd905b4ca5322353669c970042d16a71d85dc6fa1c61ec521efb0f50
GET /ajax/libs/iframe-resizer/3.5.3/iframeResizer.contentWindow.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 4430
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e9f-349a"
last-modified: Mon, 04 May 2020 16:11:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 12062351
expires: Fri, 24 Nov 2023 08:08:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uX4aOaSgb4RFgqYYqfqhYJYKsTjkTpCFzbT75H%2FmMhzAKazlfGISbP14Qj%2BbjU7ldWHcrSRAcGwFThYrmosr3rzNeZdmtp1NtuUEzuAk%2Finh0AEWDhxyXnrAlN3WyjQeZsMruP0L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77430dd98969b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 1a56736cf1f02c2242946ca0170c2c3a
a47ca5cfc4667a1466875542da0de22f64862f86
0fdd7486e01858e490d7c08343c7a861c5fe856fc0debc08df0541ccc89f80b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2636
Cache-Control: max-age=171417
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:25 GMT
Etag: "638c45c6-118"
Expires: Tue, 06 Dec 2022 07:45:22 GMT
Last-Modified: Sun, 04 Dec 2022 07:01:26 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
code.jquery.com/jquery-2.2.0.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-2.2.0.min.js
IP
File type ASCII text, with very long lines (32069)
Hash 9cb6439ead20e5244cab595f90df470e
3793b11351b5a2ee73932a6a4362510dbcbe7aef
24f8f86f98b9a0332d500456409b158320820bac5df7a15fe8e34e655f91c3e4
GET /jquery-2.2.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:25 GMT
content-encoding: gzip
content-length: 29875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-14e55"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670141305.dop021.sk1.t,1670141305.cds252.sk1.hn,1670141305.cds219.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js
200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtag/js
IP
File type ASCII text, with very long lines (1921)
Hash 090828f31c6801973d3b305e52cf0c57
e4e77c69a2ace6d4275a80e5c9cbe62bd73f6d14
61cedecdcf5fb8192d823894dd39a361a31dbd8b154b683b8f05afc0a1bfe1a0
GET /gtag/js HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Dec 2022 08:08:26 GMT
expires: Sun, 04 Dec 2022 08:08:26 GMT
cache-control: private, max-age=900
last-modified: Sun, 04 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37487
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 6bb5ecf5bb20413d6ccfd6807058ccbc
8fe3ba39b0c23033ff66b9a039e9abafd29daaa8
ca19f8c264732c83231732b14723723c545ee2225bed7151db8be6574373c69e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=117622
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:26 GMT
Etag: "638b7df0-117"
Expires: Mon, 05 Dec 2022 16:48:48 GMT
Last-Modified: Sat, 03 Dec 2022 16:48:48 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash 1a56736cf1f02c2242946ca0170c2c3a
a47ca5cfc4667a1466875542da0de22f64862f86
0fdd7486e01858e490d7c08343c7a861c5fe856fc0debc08df0541ccc89f80b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2645
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:26 GMT
Last-Modified: Sun, 04 Dec 2022 07:24:21 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash 9cfd8403f725c45c9a04996ebf64e5ba
dbe9d834e79dc81b7608ce6ace235b8976bfeef0
e667648d0f3ecf0bfa97ca26960f6fa1ed0a2ef9eaed8087bcc9fa5178d25e58
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=117290
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:26 GMT
Etag: "638b7ca4-116"
Expires: Mon, 05 Dec 2022 16:43:16 GMT
Last-Modified: Sat, 03 Dec 2022 16:43:16 GMT
Server: nginx
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 9cfd8403f725c45c9a04996ebf64e5ba
dbe9d834e79dc81b7608ce6ace235b8976bfeef0
e667648d0f3ecf0bfa97ca26960f6fa1ed0a2ef9eaed8087bcc9fa5178d25e58
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=117290
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:26 GMT
Etag: "638b7ca4-116"
Expires: Mon, 05 Dec 2022 16:43:16 GMT
Last-Modified: Sat, 03 Dec 2022 16:43:16 GMT
Server: nginx
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash e0d066d50eda3898e5c76086186b1655
7b9e6ef1a1095de6375cdfe335599388600b2035
7f4cfbf451772a58ad9b2918615a3894b54e752f0b0f64cb02199f9441dea527
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=122647
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:26 GMT
Etag: "638b9191-117"
Expires: Mon, 05 Dec 2022 18:12:33 GMT
Last-Modified: Sat, 03 Dec 2022 18:12:33 GMT
Server: nginx
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pUmDSscBpo5WrkKNLOTZmA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Gd+kwcw+KEeWHX8nOWLscQdt/NU=
ocsp.digicert.com/
200 OK 279 B IP
Hash de2094e098954a22ce23be558fe4d8b0
f291242b0d16f62f452b3b80402167e5dd43de34
61c6c03f3a37c791f8af6fe5e2e487859145c7fc439d54196f771ca0f0fa8277
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=150031
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:26 GMT
Etag: "638bfc89-117"
Expires: Tue, 06 Dec 2022 01:48:57 GMT
Last-Modified: Sun, 04 Dec 2022 01:48:57 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 6bb5ecf5bb20413d6ccfd6807058ccbc
8fe3ba39b0c23033ff66b9a039e9abafd29daaa8
ca19f8c264732c83231732b14723723c545ee2225bed7151db8be6574373c69e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=117622
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:26 GMT
Etag: "638b7df0-117"
Expires: Mon, 05 Dec 2022 16:48:48 GMT
Last-Modified: Sat, 03 Dec 2022 16:48:48 GMT
Server: nginx
Content-Length: 279
ngw-static.franklyinc.com/assets/10772/app-6abc281e159c3798963c.js
200 OK 1.1 MB URL HTTP/2 ngw-static.franklyinc.com/assets/10772/app-6abc281e159c3798963c.js
IP
Size 1.1 MB (1135149 bytes)
Hash ce7211c3205f393f55517be29294cb6b
655de7ae10790c964c0c035e812db710eb9b94e3
1a206e6e0cb2c6768eda2b9a44c6d5cf6cfa322929491b25486e2eebb90b9f6a
GET /assets/10772/app-6abc281e159c3798963c.js HTTP/1.1
Host: ngw-static.franklyinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:26 GMT
content-type: application/javascript
x-amz-id-2: xkWK+AM40PKJxtX1BHVmz4BL7I+gvakcrao6gTf3odZ93EnQKeSgwpUawhCMCffWloiIuD/Wy3Q=
x-amz-request-id: SRFND6965H7S3BZ4
last-modified: Mon, 14 Nov 2022 18:59:52 GMT
etag: W/"78a5d49131a608d026f863a306fb36ee"
cache-control: public, max-age=31536000
cf-cache-status: HIT
age: 2950
expires: Mon, 04 Dec 2023 08:08:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 77430ddb4a37fabc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
clientcontent.franklyinc.com/wicu/frankly/cms-enn-style.css
200 OK 1.5 kB URL HTTP/2 clientcontent.franklyinc.com/wicu/frankly/cms-enn-style.css
IP
Hash e7313a94ec5e01c71d6e121ac1cce46e
06b1cf677282b08524e1be0bed71302fda9d5b81
bdc188a560f42a04e2017411b3ae4fc1084bfa400fbbfd908e4c2bec0afe204a
GET /wicu/frankly/cms-enn-style.css HTTP/1.1
Host: clientcontent.franklyinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:26 GMT
content-type: text/css
x-amz-id-2: kahJRNNWuHfZGcfMq5xq88hZPYvFufVoWS/HUKeb+0OV0Ac6+O9DU0l5cHFvISZP5jUGcEdXNGc=
x-amz-request-id: Q5B0HB72J3CK837F
x-amz-meta-user-agent: AWSTransfer
x-amz-meta-user-agent-id: wicu@s-d08b37440bfd4618b
last-modified: Wed, 30 Nov 2022 19:40:57 GMT
etag: W/"7e19111828e47356e5b4bd21267ba1d6"
cf-cache-status: HIT
expires: Sun, 04 Dec 2022 08:13:26 GMT
cache-control: public, max-age=300
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430ddbbb590b3d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ftpcontent.worldnow.com/professionalservices/clients/newsnet/nn-mastercss.css
200 OK 2.4 kB URL HTTP/2 ftpcontent.worldnow.com/professionalservices/clients/newsnet/nn-mastercss.css
IP
Hash 3c32045ac0c645fb9661cc5e69a0a594
efc8634472de6f3da61a7518583b7aba1ed1fd73
6267d11f4d05640bed6ba8221af80b039803f2aae4cdd6e27c8b4b71cfd363c5
GET /professionalservices/clients/newsnet/nn-mastercss.css HTTP/1.1
Host: ftpcontent.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:26 GMT
content-type: text/css
x-amz-id-2: +JqbuCxfQSqwMOAIR2dm/cQ5cfCUYVyfqeg4QQm5gfgEPQYsoupIXCLnQMroMxWxoFX94MxHOac=
x-amz-request-id: Z0HZMF0537HDW97N
last-modified: Tue, 13 Apr 2021 11:36:53 GMT
etag: W/"31eef5d8fb36cbb721c2be6bcd651031"
cf-cache-status: REVALIDATED
expires: Sun, 04 Dec 2022 08:13:26 GMT
cache-control: public, max-age=300
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430ddb0996b51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ftpcontent.worldnow.com/professionalservices/clients/newsnet/michigan.css
200 OK 28 kB URL HTTP/2 ftpcontent.worldnow.com/professionalservices/clients/newsnet/michigan.css
IP
File type ASCII text, with very long lines (65380), with CRLF, LF line terminators
Hash 17a6149685f749fa7990d3a31b47b6fd
4f165e542e6385f2054ac586bffe1220701a33b6
13b7a2ec2cab9d6c0044e14fd478ffb175f46bc2fcdfb31b1b78afb1361906fc
GET /professionalservices/clients/newsnet/michigan.css HTTP/1.1
Host: ftpcontent.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:26 GMT
content-type: text/css
x-amz-id-2: HnnwLZQwK1RVHTLQQhU802UfMjLCu51zvjRj2uCzMN4fBlqMb3TzpJDmkfuhLWGpCCsX/sB77Ro=
x-amz-request-id: DFS7AM95T8PXC457
last-modified: Tue, 23 Mar 2021 18:01:41 GMT
etag: W/"95a318b15cab8d1aad8ddf2add853079"
cf-cache-status: REVALIDATED
expires: Sun, 04 Dec 2022 08:13:26 GMT
cache-control: public, max-age=300
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430ddaf989b51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2354
Expires: Sun, 04 Dec 2022 08:47:41 GMT
Date: Sun, 04 Dec 2022 08:08:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2354
Expires: Sun, 04 Dec 2022 08:47:41 GMT
Date: Sun, 04 Dec 2022 08:08:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2354
Expires: Sun, 04 Dec 2022 08:47:41 GMT
Date: Sun, 04 Dec 2022 08:08:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85837b29-ffdd-4915-a6ab-8d0721427d1b.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85837b29-ffdd-4915-a6ab-8d0721427d1b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 591104ff3c76193fe3c24fbbbb332f7d
aa134912d4f5ddfb371c45d9975506246af68400
af0cbb5c37c901019c1e684fe9a019bb7a2fb8359909ab831b7ff86cbc3d0fec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85837b29-ffdd-4915-a6ab-8d0721427d1b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9356
x-amzn-requestid: 11f22578-a356-4f74-99bf-6d8462e25fdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ckdKGG8RIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b4240-5c5fa5332d60db084c8d3bb6;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 12:34:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QjicIljz29ZU_XTAeiVG5u_Y6unOHCN1CzOBdtnyDRckYwsPkWToBg==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:29:03 GMT
age: 9564
etag: "aa134912d4f5ddfb371c45d9975506246af68400"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 7987
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1521243a6fc065bb631bfbde22886fa2
527220e4e8cd1065ce05fcd0694d0d703d817e2e
b83ebf768bbfb34f49d5467f3dfb43ceb3ca3d30d3454e6f37db9aef72d7689a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11482
x-amzn-requestid: d1db05ab-bd5d-4ad4-96b4-8f439152e435
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clssNEeAoAMFh_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc181-0221c53842a2f5ef071e8071;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UZ5kblxfN8fkp55YeSpUA55GzDxZgsLpFZrYTsdJBihf53HLCN0hTA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:17:35 GMT
age: 35452
etag: "527220e4e8cd1065ce05fcd0694d0d703d817e2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1a6f4805f59db44f9d3520d88701a58
6a0258e8c97ce09f1723382c8a16d9682b7dc50c
ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7503
x-amzn-requestid: a4120308-c51e-4cff-99c2-90e86018b05d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgZjCGkVIAMFpsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389a2e0-6fdf362a6d32449239476155;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 07:01:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dy619jlSTwCjwDhGuLmwTMcmuYj1Kg2oLA7xORyAYX8IHWimhNo6pw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 07:23:21 GMT
age: 2706
etag: "6a0258e8c97ce09f1723382c8a16d9682b7dc50c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50aece01-03ae-4256-8ffa-fceb43e3dd62.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50aece01-03ae-4256-8ffa-fceb43e3dd62.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b5047e1b428980b054be8c899ec7bd2a
a55e532bd0251ffc78c052a3f8b649e13feafdb7
c7f42eed10d19a983df419556f821a391ca2ece33a72cdef7a367cd7eab0b96a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50aece01-03ae-4256-8ffa-fceb43e3dd62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11170
x-amzn-requestid: 4925defd-cb3f-4818-a609-c4f2badaf0d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltlsGUVoAMFi9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc2f1-46cb22af25d527d016096316;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:43:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KMhlrg9pjepNii5clmKidbqEqTuUI1gYg8UOC7tVZ-7ZB06481p5ug==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:08:25 GMT
age: 36002
etag: "a55e532bd0251ffc78c052a3f8b649e13feafdb7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 37125
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
michigannn.images.worldnow.com/interface/js/WNVideo.js
200 OK 61 kB URL HTTP/2 michigannn.images.worldnow.com/interface/js/WNVideo.js
IP
Hash fa95f371091b8d7abfb77e7da396b4ce
ee4852afc89af1a847efd953d97ac1d70fe111e6
55e989b0744e2802dd6e67b8cf4059f0de186d944e0d4b080c35e66b1805938d
GET /interface/js/WNVideo.js HTTP/1.1
Host: michigannn.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:26 GMT
content-type: application/javascript
cf-ray: 77430ddb6d57b518-OSL
cache-control: public, max-age=14400
etag: W/"ef950d2e1df454b923142102ee524707"
expires: Sun, 04 Dec 2022 12:08:26 GMT
last-modified: Tue, 16 Feb 2021 14:23:03 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
x-amz-id-2: 6H+lhjqGPEpN73wyeN7Ftww1Fz0QwCNVsUjHoRHpXowT4UZSErJXCVqXJgB/IIW26dcBra1BoWs=
x-amz-request-id: 68S7P9YES0RTRR79
access-control-allow-origin: *
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
ngw-static.franklyinc.com/assets/10772/app-5185e3311df14cc1c2da.css
200 OK 50 kB URL HTTP/2 ngw-static.franklyinc.com/assets/10772/app-5185e3311df14cc1c2da.css
IP
Hash 4b19fdc794d855bcfa149b08cef44131
8ac39ed3e8c5d75ca600df96729acfb16555c97d
0119ead1852b56d6e02833ccc63ec1f5a788e0ce54880466785b5eed4a3ab8ae
GET /assets/10772/app-5185e3311df14cc1c2da.css HTTP/1.1
Host: ngw-static.franklyinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:26 GMT
content-type: text/css; charset=utf-8
x-amz-id-2: E/thpXmpXyo+G5xeEEsefZj93XKL9RVRkTOl9yb7nKcG2G/m3RUgED0NKDHEgn6Fg3L2Bk4c/ow=
x-amz-request-id: SRFXNXW8G5NPQW21
last-modified: Mon, 14 Nov 2022 18:59:52 GMT
etag: W/"9afec9f3c19e7c6d8772de6a669d2589"
cache-control: public, max-age=31536000
cf-cache-status: HIT
age: 2950
expires: Mon, 04 Dec 2023 08:08:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 77430ddb2a26fabc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ngw-static.franklyinc.com/assets/10772/4-6abc281e159c3798963c.js
200 OK 21 kB URL HTTP/2 ngw-static.franklyinc.com/assets/10772/4-6abc281e159c3798963c.js
IP
Hash f185451a6936e8fd6e48c17864533b73
2b456f3c602fed86bb086e7135e060bc9c73bc50
29b8c41a81d88f17c86f36b8e03617d5e0903556c463a3cad48b0199ff896afa
GET /assets/10772/4-6abc281e159c3798963c.js HTTP/1.1
Host: ngw-static.franklyinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:27 GMT
content-type: application/javascript
x-amz-id-2: 6ya62sokXjarMLGD8UhAdOVzodomNtd2O1bOn99fH87k2ElIEQw3JTy6ryLDJU2KBz4z7Z42hYw=
x-amz-request-id: XXS5G1KV1WAMJJNQ
last-modified: Mon, 14 Nov 2022 18:59:51 GMT
etag: W/"999f29a5d2cf4c211d55105a19243c1d"
cache-control: public, max-age=31536000
cf-cache-status: HIT
age: 433
expires: Mon, 04 Dec 2023 08:08:27 GMT
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 77430de66adbfabc-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ngw-static.franklyinc.com/assets/10772/2iO5YNY.woff2
200 OK 77 kB URL HTTP/2 ngw-static.franklyinc.com/assets/10772/2iO5YNY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /assets/10772/2iO5YNY.woff2 HTTP/1.1
Host: ngw-static.franklyinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://michigan.newsnetmedia.com
Connection: keep-alive
Referer: https://ngw-static.franklyinc.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: font/woff2
content-length: 77160
x-amz-id-2: rWI8j+Nemyn5b9mpVuKVnsLRsszBB6WWmNuhNJAUjklJ33LrwKYCZVX1oNYDyQnwbF8yBR7728o=
x-amz-request-id: 8A7JK3Y309Y4V9FD
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 14 Nov 2022 18:59:48 GMT
etag: "af7ae505a9eed503f8b8e6982036873e"
cache-control: public, max-age=31536000
cf-cache-status: MISS
expires: Mon, 04 Dec 2023 08:08:28 GMT
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 77430de69af0fabc-OSL
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[0].cols[0].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 615 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[0].cols[0].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with very long lines (1640), with no line terminators
Hash 3209fbe26cab1de19a0f74d6d6abcd98
334816d0ae752f2eca2ec298f3b5189a6cad4501
1cf3298a944b74758253cc41060fd1ecef87cc131ea41a4f42f00bf7115e6908
GET /api/componentInstances/routes[11].body[0].cols[0].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 615
cf-ray: 77430de85b5bb50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"668-eyVEpcYMKzbmq0Dl2xSyy+rCuhM"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 52ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
newsnetnational.images.worldnow.com/images/20491069_G.png
200 OK 221 kB URL HTTP/2 newsnetnational.images.worldnow.com/images/20491069_G.png
IP
File type PNG image data, 1899 x 135, 8-bit/color RGB, non-interlaced\012- data
Size 221 kB (220827 bytes)
Hash 8253ecf7dd775c998eb00d2759413fa2
985acfeb70ea2c4abacd0313bce5f6983e37e227
6e53d82f60ca6034b95323dcbaf96b7fd3a5443ac4de2cc3c1bbb32ed2d6493e
GET /images/20491069_G.png HTTP/1.1
Host: newsnetnational.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ftpcontent.worldnow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: image/png
content-length: 220827
cf-ray: 77430de6f92bb518-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cfoDEEQokJse9pIAnCR-PpiD1f7QEfqoyZ4pjHkwoaDQ:8253ecf7dd775c998eb00d2759413fa2"
last-modified: Mon, 15 Mar 2021 20:23:22 GMT
vary: Accept, Accept-Encoding
cf-cache-status: REVALIDATED
cf-bgj: imgq:0,h2pri
cf-resized: internal=ok/h q=0 n=6 c=8+0 v=2022.12.0 l=220827
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "You must select exact format in your Worker first. 'auto' has no effect here"
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[1].cols[1].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 136 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[1].cols[1].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8a4505add6d779c8130e09bdf53ae59d
8720dd7e8e5becc7e89af41d31805b603a445762
065922a14439ca385b7b27f77526fa2b979ba98ab2b4227463ebeeca0939b6de
GET /api/componentInstances/routes[11].body[1].cols[1].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 136
cf-ray: 77430de85b62b50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"95-pVG0SQYDcv4Yfov/wbwqi8PGlLo"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 92ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[2].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 139 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[2].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 34d5a29186ef3e1ba31f4d7aaba14c10
4119350c1018348d8c5b5157054626de521dabc9
a4c59bfbeb7e36ef5d4563928a455954fa770c2eb94b3e3f818679e67f1b490b
GET /api/componentInstances/routes[11].body[3].cols[2].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 139
cf-ray: 77430de87b78b50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"95-Dooor1usqRhmlk1m6KoE4t+Bxd4"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 91ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[0].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 138 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[0].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e1244ea3d82727fb60a6c4865118e540
6ba52e63013a14f7960eb5fbba0ae2ed70aac1df
632b2998ae49a8bfd267c08e2f3d036ebfb3f343a678a85469992d5ece18c803
GET /api/componentInstances/routes[11].body[3].cols[0].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 138
cf-ray: 77430de87b6fb50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"95-wcl5JEF1j/k7CKxwNuGuCYU2wvA"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 108ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
newsnetnational.images.worldnow.com/images/22525882_G.png?auto=webp&disable=upscale&dpr=2&height=70&fit=bounds
200 OK 9.7 kB URL HTTP/2 newsnetnational.images.worldnow.com/images/22525882_G.png?auto=webp&disable=upscale&dpr=2&height=70&fit=bounds
IP
File type PNG image data, 285 x 140, 8-bit/color RGBA, non-interlaced\012- data
Hash ac476cb328d7d28d9881a11db555e626
033cb7e4525c15b332b47d7699f67f6de1bec65b
410734fa4074b94cb037e50092e6a16e3dffef69a4fcc355a9f8523288f1489e
GET /images/22525882_G.png?auto=webp&disable=upscale&dpr=2&height=70&fit=bounds HTTP/1.1
Host: newsnetnational.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: image/png
content-length: 9679
cf-ray: 77430de95b86b518-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cfNT7RGF3Hao6dwF_hto8_EOzL7tOAz62Z4I335VEMBQ:ac476cb328d7d28d9881a11db555e626"
last-modified: Sun, 17 Apr 2022 20:19:56 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:0,h2pri
cf-resized: internal=ok/h q=0 n=6 c=0+0 v=2022.11.4 l=9679
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "You must select exact format in your Worker first. 'auto' has no effect here"
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[4].cols[0].components[2],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 302 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[4].cols[0].components[2],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- HTML document, ASCII text, with very long lines (471), with no line terminators
Hash 67f2252d047f40f2efe99f79a3aea4ab
b2e8bea3677c9d93aa433d8c0b905f3705bb6440
fb6921540975d5101d40bb25a69ac2cd6492a2dce8fe42ecd39fe31a260947de
GET /api/componentInstances/routes[11].body[4].cols[0].components[2],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 302
cf-ray: 77430de88b88b50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"1d7-hznQ8Af2lfbVCFcZYF66Lb4QN8s"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 115ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[1].cols[1].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 134 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[1].cols[1].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 19e84a35534cf6c671bb810e513a0ae7
343a220f5490370dec70d8305d92f989b1a67611
fe06e60e3b86294e503088d2c68ca150bad3bf48845f5964f58530fd405419cb
GET /api/componentInstances/routes[11].body[1].cols[1].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 134
cf-ray: 77430de85b64b50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"95-d5eLJW9RcUrCnIpl5CP02spfOAM"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 167ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[1].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 138 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[1].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash acb07c853b07ca07ac21ef872c96a801
c87f267ea89ee52d97a404287109fb03790ff0c3
0b334ef490d7a45b894b9e6476ca7947c605761d932c8aeb7e244ddf7b3d21e4
GET /api/componentInstances/routes[11].body[3].cols[1].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 138
cf-ray: 77430de87b73b50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"95-uIhoAq7knZ+31J47fUZgADNBtHM"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 93ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[1].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 167 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[1].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 35a873e9212f79ab56b8bae671dec07a
70b02bfb5558255fc037f07e6f37ef819bff8521
9e8140ce070f9b7599e4a145593d3acb91254150bed01f7e75f8403f711c00d0
GET /api/componentInstances/routes[11].body[3].cols[1].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 167
cf-ray: 77430de87b75b50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"b0-9jVLiDnNAxMK7KUG0uUf6pVygBo"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 157ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[3].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 138 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[3].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c35cb433b7ec69da1c42bcf1d2a893a8
9eaf6bccb8934a8b1d005d90b21afd5c139e01c9
d577b5bad0c12f28e29b0d0337b8bbd35dd4bd3748072995df40ae662324ea37
GET /api/componentInstances/routes[11].body[3].cols[3].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 138
cf-ray: 77430de88b7fb50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"95-C+JgRhqwGqpcjXUVrPebyNY1R/s"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 244ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[1].cols[0].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 2.6 kB URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[1].cols[0].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with very long lines (7186), with no line terminators
Hash fdaee4216131e124a26daad1e6a18e14
ae4e58abaaa54eed3bc2c393f558d34f4e18d32b
7a3d12c4951177d05edcba0274732db5ebc767c9453fd2b1bbe3a5fbe56eda4a
GET /api/componentInstances/routes[11].body[1].cols[0].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 2551
cf-ray: 77430de85b5db50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"1c12-+khLJDIf3/cbWg5WR2E8iyYLXJY"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 308ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/footer[0].cols[0].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 830 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/footer[0].cols[0].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (2178), with no line terminators
Hash 042731d245bfb89c3243746e2d19d35f
14166d10359f6d3663870d5077b65700ce94f118
1e42cadcc676d542d434c84b26d26964b5c546e14a4e97f6ef99f2f584de44e3
GET /api/componentInstances/footer[0].cols[0].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 830
cf-ray: 77430de89b8eb50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"882-EX3yAPBCcMB7wEIY6QFhgfVF/Xw"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 227ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[2].cols[1].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 223 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[2].cols[1].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 30e8ce0954a89edf50668d33f3db96e3
38effd32b738b46f257aab3ae99023eb76aaf8d2
85c74cbe56a547d97116a437489a2d5d98cd68862c526622cc3bc67bbe3a0055
GET /api/componentInstances/routes[11].body[2].cols[1].components[0],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
content-length: 223
cf-ray: 77430de86b69b50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"fe-ADesnEIGvhOZfvMkOqXxiwAb3Bo"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 485ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116325 bytes)
Hash ff4671f71c958029bbf6d9694284da70
7535744f2dbaf99902a54fc529e760b08a73f265
123f781673b2e45e18df36b64984674f489a5f3541c69e295f01f554b8d3c738
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 116325
date: Sun, 04 Dec 2022 08:08:28 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 04 Dec 2022 06:41:08 GMT
expires: Sun, 04 Dec 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 5240
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[2].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 71 kB URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[2].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
Hash e329a4aacba15d9bff3a4e2326cba883
7261f6e4f8f37a19b51eb6139b9ff068214b2cbe
df5aff9fabe9a18f225f276cdbbabf71d16e2a6f84f20c0e89274216cba4ccab
GET /api/componentInstances/routes[11].body[3].cols[2].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
cf-ray: 77430de88b7ab50f-OSL
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"84ada-6J8fw0NDLUSN1JSghBbK/AGFxPA"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 423ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 127 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2791)
Size 127 kB (126620 bytes)
Hash f641dae66d812e803cbfc91d689e2ea8
96372a7ba661528d13bc774536d04ab3e03b82d6
e78b718ac77697fbb92e88ac394141adc4e016830eb04d53279238cbcd65435b
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 126620
date: Sun, 04 Dec 2022 08:08:28 GMT
expires: Sun, 04 Dec 2022 08:08:28 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[3].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 78 kB URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[3].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
Hash dedb4ba5c4c00fb6cd2fa0f49c49b579
13ef429b7b50d36ed05ea86babd0e94ef4125900
9fcaa759757828275143d0e0cd99766c213c321ef888058d1f23438b2a25f82f
GET /api/componentInstances/routes[11].body[3].cols[3].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
cf-ray: 77430de88b83b50f-OSL
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"864ae-WXa23LwTuZrz/mZLKbkHt5YNPc4"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 96ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-5Z93RTS520>m=2oebu0&_p=2048614320&cid=1016973191.1670141306&ul=en-us&sr=1280x1024&_s=1&sid=1670141306&sct=1&seg=0&dl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&dt=NewsNet%20Michigan%20-%20More%20News.%20More%20Often&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-5Z93RTS520>m=2oebu0&_p=2048614320&cid=1016973191.1670141306&ul=en-us&sr=1280x1024&_s=1&sid=1670141306&sct=1&seg=0&dl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&dt=NewsNet%20Michigan%20-%20More%20News.%20More%20Often&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-5Z93RTS520>m=2oebu0&_p=2048614320&cid=1016973191.1670141306&ul=en-us&sr=1280x1024&_s=1&sid=1670141306&sct=1&seg=0&dl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&dt=NewsNet%20Michigan%20-%20More%20News.%20More%20Often&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://michigan.newsnetmedia.com
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://michigan.newsnetmedia.com
date: Sun, 04 Dec 2022 08:08:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-6HZGWNX0ER>m=2oebu0&_p=2048614320&cid=1016973191.1670141306&ul=en-us&sr=1280x1024&_s=1&dt=Orisha%20Sound%20and%20Turbulence%27s%20latest%20track%2C%20%27Birthday%27%20becomes%20a%20certified%20Summer%20anthem&sid=1670141306&sct=1&seg=0&dl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&en=page_view&_fv=1&_ss=1&ep.page_path=%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&ep.group_owner=NewsNet&ep.container_id=GTM-WV2QLD&ep.container_version=60&ep.referrer=&epn.user_timezone_timestamp=1670141306101&epn.timezone_offset=0&ep.user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&epn.station_id=1475&ep.station_name=michigannn&ep.dma_ranking=&ep.framework_name=ResponsiveWeb&ep.content_classification=&ep.gtm_tag_name=GA4%20-%20Pageview&up.client_id_dimension=not%20set&up.session_id_dimension=1670141306102.imtbx8vh
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-6HZGWNX0ER>m=2oebu0&_p=2048614320&cid=1016973191.1670141306&ul=en-us&sr=1280x1024&_s=1&dt=Orisha%20Sound%20and%20Turbulence%27s%20latest%20track%2C%20%27Birthday%27%20becomes%20a%20certified%20Summer%20anthem&sid=1670141306&sct=1&seg=0&dl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&en=page_view&_fv=1&_ss=1&ep.page_path=%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&ep.group_owner=NewsNet&ep.container_id=GTM-WV2QLD&ep.container_version=60&ep.referrer=&epn.user_timezone_timestamp=1670141306101&epn.timezone_offset=0&ep.user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&epn.station_id=1475&ep.station_name=michigannn&ep.dma_ranking=&ep.framework_name=ResponsiveWeb&ep.content_classification=&ep.gtm_tag_name=GA4%20-%20Pageview&up.client_id_dimension=not%20set&up.session_id_dimension=1670141306102.imtbx8vh
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-6HZGWNX0ER>m=2oebu0&_p=2048614320&cid=1016973191.1670141306&ul=en-us&sr=1280x1024&_s=1&dt=Orisha%20Sound%20and%20Turbulence%27s%20latest%20track%2C%20%27Birthday%27%20becomes%20a%20certified%20Summer%20anthem&sid=1670141306&sct=1&seg=0&dl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&en=page_view&_fv=1&_ss=1&ep.page_path=%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&ep.group_owner=NewsNet&ep.container_id=GTM-WV2QLD&ep.container_version=60&ep.referrer=&epn.user_timezone_timestamp=1670141306101&epn.timezone_offset=0&ep.user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&epn.station_id=1475&ep.station_name=michigannn&ep.dma_ranking=&ep.framework_name=ResponsiveWeb&ep.content_classification=&ep.gtm_tag_name=GA4%20-%20Pageview&up.client_id_dimension=not%20set&up.session_id_dimension=1670141306102.imtbx8vh HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://michigan.newsnetmedia.com
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://michigan.newsnetmedia.com
date: Sun, 04 Dec 2022 08:08:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ftpcontent.worldnow.com/platform-files/plugins/videojs.ima.1.5.1-3.js
200 OK 18 kB URL HTTP/2 ftpcontent.worldnow.com/platform-files/plugins/videojs.ima.1.5.1-3.js
IP
File type ASCII text, with very long lines (896)
Hash 921aea9201bf08a087683b4b7402e1a7
6f9eb445daddc4d0a04121ac3b503b26b020781f
a7edd54eef5d28d35e35492b2b73ee775411387e04f119a61c005b6d8b6428a0
GET /platform-files/plugins/videojs.ima.1.5.1-3.js HTTP/1.1
Host: ftpcontent.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: application/x-javascript
x-amz-id-2: yURPP3yVglnQA+aS1JkzPnf+TMgzFonMqG7JNB88BJtfcaMfjTQ5iZOQZfuYePSksdLk/EIv5b4=
x-amz-request-id: B8APE2P4J3GN3W6V
x-amz-meta-user-agent: AWSTransfer
x-amz-meta-user-agent-id: professionalservices@s-d08b37440bfd4618b
last-modified: Mon, 28 Oct 2019 19:35:47 GMT
etag: W/"8adaa86214cf79d9c87e21aed1384592"
cf-cache-status: HIT
age: 28
expires: Sun, 04 Dec 2022 08:13:29 GMT
cache-control: public, max-age=300
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430dee592bb51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=53054
date: Sun, 04 Dec 2022 08:08:29 GMT
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pagead/ppub_config?ippd=michigan.newsnetmedia.com
200 OK 64 B URL HTTP/2 securepubads.g.doubleclick.net/pagead/ppub_config?ippd=michigan.newsnetmedia.com
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b1261a82495f703a07b3f52b0bef77f0
a013765f5529020291f8b24c37bd96ec0fdd59fc
053c12209a26a7fb8ab44422d98f6c5267bb57fda370ecede842b2e5aeb9d35e
GET /pagead/ppub_config?ippd=michigan.newsnetmedia.com HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://michigan.newsnetmedia.com
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
date: Sun, 04 Dec 2022 08:08:29 GMT
expires: Sun, 04 Dec 2022 08:08:29 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 64
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 04-Dec-2022 08:23:29 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/gpt/pubads_impl_2022112901.js
200 OK 133 kB URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022112901.js
IP
File type ASCII text, with very long lines (65395)
Size 133 kB (133261 bytes)
Hash 28036597aca2cffc3078c528f5e12edf
0087fe2ab1d7580a251f579f55bb5cb9348239c9
d130cb132fa7ebc97308c096baa66db137c8e3c45eb4105f7bf47c8760f726b3
GET /gpt/pubads_impl_2022112901.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 133261
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 11:32:04 GMT
expires: Wed, 29 Nov 2023 11:32:04 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 29 Nov 2022 09:37:49 GMT
content-type: text/javascript
age: 419785
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/header[0].cols[0].components[1].props.weatherWidget,/resources
200 OK 475 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/header[0].cols[0].components[1].props.weatherWidget,/resources
IP
File type JSON data\012- , ASCII text, with very long lines (859), with no line terminators
Hash 2bdd6f6c0afbec4f443bcf729a0fbfb0
ce3cc96aad8d0a36bca25c9c1974632584094f07
a05ba8502c088959280981335b4991e01a3f9f7f168b9af3bcb019470a6ef502
GET /api/componentInstances/header[0].cols[0].components[1].props.weatherWidget,/resources HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: application/json; charset=utf-8
content-length: 475
cf-ray: 77430de89b90b50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"35b-6wB5winDM+WgZKMiPUSzzX3sFV0"
expires: Sun, 04 Dec 2022 08:11:29 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 1086ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-82494642-229&cid=1016973191.1670141306&jid=1703841455&gjid=730202007&_gid=681425255.1670141307&_u=aChAgUAjAAAAAEACM~&z=520442745
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-82494642-229&cid=1016973191.1670141306&jid=1703841455&gjid=730202007&_gid=681425255.1670141307&_u=aChAgUAjAAAAAEACM~&z=520442745
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-82494642-229&cid=1016973191.1670141306&jid=1703841455&gjid=730202007&_gid=681425255.1670141307&_u=aChAgUAjAAAAAEACM~&z=520442745 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://michigan.newsnetmedia.com
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://michigan.newsnetmedia.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 04 Dec 2022 08:08:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Sun, 04 Dec 2022 08:08:29 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/ra-60194ccbc8c82b35/_ate.track.config_resp
200 OK 683 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-60194ccbc8c82b35/_ate.track.config_resp
IP
File type ASCII text, with very long lines (2430), with no line terminators
Hash 002b0e9da8d29718fb5972d2b21e6b34
10d6a6bf384df3120cbad115ce31e49e33ad3a62
e9a9458b0a170d13c75e6eacb3c26d07b2bddcd7407b738b3cf18e18a2c180dc
GET /live/boost/ra-60194ccbc8c82b35/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 683
etag: -561350989--gzip
content-disposition: attachment; filename=1.txt
content-encoding: gzip
cache-control: public, max-age=59, s-maxage=86400
date: Sun, 04 Dec 2022 08:08:29 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
frankly.images.worldnow.com/images/branding/powered-by-frankly-media.svg?auto=webp&disable=upscale&width=150
200 OK 7.6 kB URL HTTP/2 frankly.images.worldnow.com/images/branding/powered-by-frankly-media.svg?auto=webp&disable=upscale&width=150
IP
Hash 22020a65fa714b23e912fe291b761cf4
20522c1bb1a6567afc087e5dcea47ed44389d88e
ca49dbb93f7361a0ec1177c7ada3d77f0874b9053a96cfb6d5b09672ed6ac1e5
GET /images/branding/powered-by-frankly-media.svg?auto=webp&disable=upscale&width=150 HTTP/1.1
Host: frankly.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: image/svg+xml
cf-ray: 77430def8ac9b518-OSL
age: 6343
cache-control: public, max-age=14400
etag: W/"783751444c16be41ad1f968521ffd58a"
expires: Sun, 04 Dec 2022 12:08:29 GMT
last-modified: Fri, 12 Apr 2019 20:20:41 GMT
vary: Accept-Encoding
cf-cache-status: HIT
x-amz-id-2: T+JZPEkzarAAo0YCgG/axUKHI5F/AcRKSdlv62wbOnF0U7boAa4KuhczBAcaEFtZrcx+jofZ3bc=
x-amz-request-id: KT34WXT62Q8K98R4
access-control-allow-origin: *
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
newsnetnational.images.worldnow.com/images/22426142_G.png
200 OK 5.7 kB URL HTTP/2 newsnetnational.images.worldnow.com/images/22426142_G.png
IP
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash 3f6f362aaca9ec1f9bf8e64d6a618ebc
c3dc4ada03f6472d48541a3a07eb562d725faa7e
e3f96157e3975e4c6e9786a0c8b161fbdbd4d5a8478a8534d8098e739f119642
GET /images/22426142_G.png HTTP/1.1
Host: newsnetnational.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: image/png
content-length: 5686
cf-ray: 77430df1ed6bb518-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cfPZxRFIUS1zmoPF9DDtA2UhnP7QEfqoyZ4pjHkwoaBQ:3f6f362aaca9ec1f9bf8e64d6a618ebc"
last-modified: Tue, 29 Mar 2022 13:49:39 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:0,h2pri
cf-resized: internal=ok/h q=0 n=6 c=0+1 v=2022.11.1 l=5686
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "You must select exact format in your Worker first. 'auto' has no effect here"
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
newsnetnational.images.worldnow.com/images/22426263_G.png
200 OK 3.9 kB URL HTTP/2 newsnetnational.images.worldnow.com/images/22426263_G.png
IP
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash 8c923cea1ff9b92ddd3b4869cbcb4d56
6daf95b3141c71e1265f5f0aa0d49a684b768c36
ac5cd7c73315746c3535b2db2dccf9272a5078e639a207ca53f9166ff54d64fd
GET /images/22426263_G.png HTTP/1.1
Host: newsnetnational.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: image/png
content-length: 3867
cf-ray: 77430df1ed6cb518-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cf2pmTJqSPrfzYzko3WwqENpzY7QEfqoyZ4pjHkwoaBQ:8c923cea1ff9b92ddd3b4869cbcb4d56"
last-modified: Tue, 29 Mar 2022 14:02:26 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:0,h2pri
cf-resized: internal=ok/h q=0 n=6 c=0+1 v=2022.11.1 l=3867
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "You must select exact format in your Worker first. 'auto' has no effect here"
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
newsnetnational.images.worldnow.com/images/22426267_G.png
200 OK 5.3 kB URL HTTP/2 newsnetnational.images.worldnow.com/images/22426267_G.png
IP
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash b1428897ba95a282b0476fe103cac6dd
4fe2589cdfa42cb98032b3c4a290a505c58b1670
370afe161abc0524413c1a34b896979f4a359e2fd1a02019a11144f4a82df42f
GET /images/22426267_G.png HTTP/1.1
Host: newsnetnational.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: image/png
content-length: 5257
cf-ray: 77430df1ed72b518-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cf8qGGlEntxJQu-_1Gx-RDUtD57QEfqoyZ4pjHkwoaDQ:b1428897ba95a282b0476fe103cac6dd"
last-modified: Tue, 29 Mar 2022 14:02:55 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:0,h2pri
cf-resized: internal=ok/h q=0 n=10 c=0+0 v=2022.12.0 l=5257
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "You must select exact format in your Worker first. 'auto' has no effect here"
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
newsnetnational.images.worldnow.com/images/22426265_G.png
200 OK 4.7 kB URL HTTP/2 newsnetnational.images.worldnow.com/images/22426265_G.png
IP
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash dce9e5c2848be5774aee41a4154e8514
d51810a0ed3e55fac4ad067c7de29e5b922326ba
c8ecefcb344de179e9cd405540adf5a081e890c22b03da62769996ac955fc162
GET /images/22426265_G.png HTTP/1.1
Host: newsnetnational.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: image/png
content-length: 4668
cf-ray: 77430df1ed70b518-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cfxNS3SoffhdQpqPW92QZWKN0H7QEfqoyZ4pjHkwoaBQ:dce9e5c2848be5774aee41a4154e8514"
last-modified: Tue, 29 Mar 2022 14:02:40 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:0,h2pri
cf-resized: internal=ok/h q=0 n=37 c=0+0 v=2022.11.6 l=4668
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "You must select exact format in your Worker first. 'auto' has no effect here"
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
newsnetnational.images.worldnow.com/images/22426258_G.png
200 OK 6.8 kB URL HTTP/2 newsnetnational.images.worldnow.com/images/22426258_G.png
IP
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash de71b1ab1016073bff4d03f4d0b71a05
e45e6b4d363431e2c8d03c802606452065d3560b
58fd433e13fb18cc173033e0513b2894c7aa8e2cec21b66d2f2ff3300faf616c
GET /images/22426258_G.png HTTP/1.1
Host: newsnetnational.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: image/png
content-length: 6817
cf-ray: 77430df1ed71b518-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cf4sHgKUCgQBqYh4dDCK2M40ZW7QEfqoyZ4pjHkwoaBQ:de71b1ab1016073bff4d03f4d0b71a05"
last-modified: Tue, 29 Mar 2022 14:02:11 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:0,h2pri
cf-resized: internal=ok/h q=0 n=4 c=0+1 v=2022.11.6 l=6817
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "You must select exact format in your Worker first. 'auto' has no effect here"
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 663979bbd831a40bec8611cfac8d77af
aa43c96676a33100f244e6772e37adc2b6f89b76
60c21027da288e857f546b531dd226d81206bfa85a35985b0e1587a68dec4d5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
newsnetnational.images.worldnow.com/images/22504912_G.png?auto=webp&disable=upscale&width=120
200 OK 2.6 kB URL HTTP/2 newsnetnational.images.worldnow.com/images/22504912_G.png?auto=webp&disable=upscale&width=120
IP
File type PNG image data, 120 x 43, 8-bit colormap, non-interlaced\012- data
Hash c66f54fac045f23ae06c0adb1eadf416
5332cae34a4c3051bedfd3d9e3c144246edd66c0
7161de919cf7890381419be204f49369d91f65c4f682e7de4a55f66c6d19b49e
GET /images/22504912_G.png?auto=webp&disable=upscale&width=120 HTTP/1.1
Host: newsnetnational.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: image/png
content-length: 2574
cf-ray: 77430df27de7b518-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cfEFY7Q3aBgFcevs_yqlNnp3y0tuuBhRVHD_n9F1P-BQ:e02c40d3be26001e947f920e7ce21f03"
last-modified: Sun, 17 Apr 2022 19:41:19 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-resized: internal=ok/h q=0 n=8 c=4+21 v=2022.11.1 l=2574
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "You must select exact format in your Worker first. 'auto' has no effect here"
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=michigan.newsnetmedia.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=michigan.newsnetmedia.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=michigan.newsnetmedia.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 04 Dec 2022 08:08:29 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=michigan.newsnetmedia.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=michigan.newsnetmedia.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=michigan.newsnetmedia.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 04 Dec 2022 08:08:29 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 663979bbd831a40bec8611cfac8d77af
aa43c96676a33100f244e6772e37adc2b6f89b76
60c21027da288e857f546b531dd226d81206bfa85a35985b0e1587a68dec4d5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
newsnetnational.images.worldnow.com/images/22525850_G.png
200 OK 300 kB URL HTTP/2 newsnetnational.images.worldnow.com/images/22525850_G.png
IP
File type PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced\012- data
Size 300 kB (299957 bytes)
Hash 0c0022d59c15e1f9c7b0a4f8a2c85e6c
4004e464dcb2848564b9ae36f2f4e0f8f4d8721a
49bcc28e414861a6328735eb4a68d1e1c3d91dd9fd17e1099e3e9925a142c2df
GET /images/22525850_G.png HTTP/1.1
Host: newsnetnational.images.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: image/png
content-length: 299957
cf-ray: 77430df30e97b518-OSL
accept-ranges: bytes
cache-control: max-age=14400
etag: "cfxI0B54ncVr1wiTEYRdtwaeCe7QEfqoyZ4pjHkwoaBQ:0c0022d59c15e1f9c7b0a4f8a2c85e6c"
last-modified: Sun, 17 Apr 2022 19:40:23 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:0,h2pri
cf-resized: internal=ok/h q=0 n=13 c=65+2 v=2022.11.1 l=299957
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "You must select exact format in your Worker first. 'auto' has no effect here"
x-content-type-options: nosniff
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/header[0].cols[0].components[1].props.weatherWidget.props.zipcodeData,/resources?zipcode=49601
200 OK 475 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/header[0].cols[0].components[1].props.weatherWidget.props.zipcodeData,/resources?zipcode=49601
IP
File type JSON data\012- , ASCII text, with very long lines (859), with no line terminators
Hash 2bdd6f6c0afbec4f443bcf729a0fbfb0
ce3cc96aad8d0a36bca25c9c1974632584094f07
a05ba8502c088959280981335b4991e01a3f9f7f168b9af3bcb019470a6ef502
GET /api/componentInstances/header[0].cols[0].components[1].props.weatherWidget.props.zipcodeData,/resources?zipcode=49601 HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en; _ga_5Z93RTS520=GS1.1.1670141306.1.0.1670141306.0.0.0; _ga=GA1.1.1016973191.1670141306; _ga_6HZGWNX0ER=GS1.1.1670141306.1.0.1670141306.0.0.0; _ga_frankly=GA1.2.1016973191.1670141306; _ga_frankly_gid=GA1.2.681425255.1670141307; _dc_gtm_UA-82494642-229=1; __atuvc=1%7C49; __atuvs=638c557aa0ca9d8c000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:30 GMT
content-type: application/json; charset=utf-8
content-length: 475
cf-ray: 77430df26c8ab50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"35b-6wB5winDM+WgZKMiPUSzzX3sFV0"
expires: Sun, 04 Dec 2022 08:11:30 GMT
vary: Accept-Encoding
cf-cache-status: EXPIRED
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 90ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
6578312a986ad760cd434015511f5150.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
200 OK 2.7 kB URL HTTP/2 6578312a986ad760cd434015511f5150.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash e8ee9c011ff8e1f464e74c37113119ee
64ad72134ea05877de0f2b6503f5c0d8c3f78197
09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
GET /safeframe/1-0-40/html/container.html HTTP/1.1
Host: 6578312a986ad760cd434015511f5150.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Sun, 04 Dec 2022 08:08:30 GMT
expires: Mon, 04 Dec 2023 08:08:30 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ngw-static.franklyinc.com/assets/static/29_partlycloudy_night.png
200 OK 2.0 kB URL HTTP/2 ngw-static.franklyinc.com/assets/static/29_partlycloudy_night.png
IP
File type PNG image data, 93 x 93, 8-bit colormap, non-interlaced\012- data
Hash 60f42bc1d3ce24349624b79db059a7e3
e3cd7d1d7e8105173074b143e901560eaa3a94eb
f6b83e17e6448f888d6fa1c118494b0d85b60e7072f64a340c46a2bb4d9ca8e6
GET /assets/static/29_partlycloudy_night.png HTTP/1.1
Host: ngw-static.franklyinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:30 GMT
content-type: image/png
content-length: 1965
x-amz-id-2: SLg9hOZA7SUcwb11AU7IUwj5LO2IQLvawYNeobE8zr3fmKdejWlq+v1fGUlL0PC5sLF+puSIkqI=
x-amz-request-id: B945APMQE56SJMMS
last-modified: Tue, 03 Mar 2020 16:10:24 GMT
etag: "60f42bc1d3ce24349624b79db059a7e3"
cf-cache-status: HIT
age: 163
expires: Sun, 04 Dec 2022 12:08:30 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 77430df40a8efabc-OSL
X-Firefox-Spdy: h2
resources.infolinks.com/js/infolinks_main.js
200 OK 2.2 kB URL HTTP/2 resources.infolinks.com/js/infolinks_main.js
IP
File type ASCII text, with very long lines (3543)
Hash 2e8c9eae4c54b9499edcf3afdfeea420
e0d13af62d5fd3783c63106da8e0c28abcf645e7
3154d09d6faed9fc1434db63f45c4438227fc7607d3802dc623bfd92364fa63a
GET /js/infolinks_main.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: application/javascript
last-modified: Mon, 28 Nov 2022 09:28:01 GMT
etag: W/"dd8-5ee847ce16d0d"
cache-control: max-age=3600
expires: Sun, 04 Dec 2022 06:29:35 GMT
via: 1.1 google
cf-cache-status: HIT
age: 9534
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430df17955b4ee-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
michigannn.akamaized.net/hls/live/2031672/michigannn_OUT/master.m3u8
200 OK 113 B URL HTTP/1.1 michigannn.akamaized.net/hls/live/2031672/michigannn_OUT/master.m3u8
IP
ASN #20940 Akamai International B.V.
Hash 849f833c68ba2848d37fbffa8db9e640
9d81aa05fef840b06b369cc5a11c9939248bb345
ea6f7225c13b886d75116eb697e3fc905f24c2c62aa3ac9b833ebc6214021f0d
GET /hls/live/2031672/michigannn_OUT/master.m3u8 HTTP/1.1
Host: michigannn.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://michigan.newsnetmedia.com
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 05 Oct 2022 18:36:24 GMT
X-Akamai-Server: Akamai-SMT
Content-Encoding: gzip
Akamai-Mon-Iucid-Ing: 2031672
Content-Length: 113
Expires: Sun, 04 Dec 2022 08:08:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 04 Dec 2022 08:08:30 GMT
Connection: keep-alive
Vary: Accept-Encoding
Akamai-Mon-Iucid-Del: 1166890
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: application/x-mpegURL
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC
Access-Control-Allow-Headers: origin,range,hdntl,hdnts
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash ac1b5db6377f89a6d7f517c571b8ddba
87205f72f7338d717dd2966119ecb6aae22d5835
9164225c4ffa9eded3fd96fd8403249cf67e2047354fc245fb349216565d00a2
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77691
date: Sun, 04 Dec 2022 08:08:30 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash a6274672c555604d72b1292b4648c3e0
d8c4fa29092153ecf3408e05e051c56ab8fd63c2
007d72b18139f05a87fd896bdfbce956ad5ea3571724eb7d1fcfa5d88a62bc05
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2827
Cache-Control: max-age=113604
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Etag: "638b6338-1d7"
Expires: Mon, 05 Dec 2022 15:41:55 GMT
Last-Modified: Sat, 03 Dec 2022 14:54:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
michigan.newsnetmedia.com/api/componentInstances/header[0].cols[0].components[1].props.weatherWidget.props.zipcodeData,/resources?zipcode=49684
200 OK 469 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/header[0].cols[0].components[1].props.weatherWidget.props.zipcodeData,/resources?zipcode=49684
IP
File type JSON data\012- , ASCII text, with very long lines (861), with no line terminators
Hash d5c1a92f4d729ae705519ca1f4cfddd9
7493ba5d125f471c67114a0b76e77f6971ac7f77
5143a45987f7502f0bfc96477a2a832d3a4683a89629115562f148fe68a5e33f
GET /api/componentInstances/header[0].cols[0].components[1].props.weatherWidget.props.zipcodeData,/resources?zipcode=49684 HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en; _ga_5Z93RTS520=GS1.1.1670141306.1.0.1670141306.0.0.0; _ga=GA1.1.1016973191.1670141306; _ga_6HZGWNX0ER=GS1.1.1670141306.1.0.1670141306.0.0.0; _ga_frankly=GA1.2.1016973191.1670141306; _ga_frankly_gid=GA1.2.681425255.1670141307; _dc_gtm_UA-82494642-229=1; __atuvc=1%7C49; __atuvs=638c557aa0ca9d8c000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: application/json; charset=utf-8
content-length: 469
cf-ray: 77430df26c8bb50f-OSL
accept-ranges: bytes
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"35d-TnwRKbe1JryQuUoxDuMfNSyMl0Y"
expires: Sun, 04 Dec 2022 08:11:31 GMT
vary: Accept-Encoding
cf-cache-status: REVALIDATED
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 1002ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 04 Dec 2022 08:08:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
AN-X-Request-Uuid: f9812336-79b6-4dcd-a6c2-a946131f1f72
Set-Cookie: uuid2=1257926503491856043; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 04-Mar-2023 08:08:31 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D
200 OK 56 B URL HTTP/2 u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 15669dda86db3cbff7835fa202dc0b16
ce788cab9c1aa7e458a3971a59702c410b37e64d
5cc3f958039a8885c4e9526e22d454da47d579b9a02861e7a60b41fa0ba910df
GET /w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D HTTP/1.1
Host: u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/html
content-length: 56
content-encoding: gzip
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https://s.cpx.to/ca.png?ref=https%253A%252F%252Fmichigan.newsnetmedia.com%252Fstory%252F47651922%252Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&pid=12306&adnxs_uid=$UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://s.cpx.to/ca.png?ref=https%253A%252F%252Fmichigan.newsnetmedia.com%252Fstory%252F47651922%252Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&pid=12306&adnxs_uid=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://s.cpx.to/ca.png?ref=https%253A%252F%252Fmichigan.newsnetmedia.com%252Fstory%252F47651922%252Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&pid=12306&adnxs_uid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 04 Dec 2022 08:08:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fs.cpx.to%2Fca.png%3Fref%3Dhttps%25253A%25252F%25252Fmichigan.newsnetmedia.com%25252Fstory%25252F47651922%25252Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem%26pid%3D12306%26adnxs_uid%3D%24UID
AN-X-Request-Uuid: 1c73a779-2ecc-4d2b-881b-d3f776811d2f
Set-Cookie: uuid2=2616818773004162626; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 04-Mar-2023 08:08:31 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
router.infolinks.com/dyn/iq-usync
200 OK 0 B URL HTTP/2 router.infolinks.com/dyn/iq-usync
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dyn/iq-usync HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/usync/manage?pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-length: 0
cache-control: no-store
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfa8bf1b4ee-OSL
X-Firefox-Spdy: h2
cs.media.net/cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E
302 Moved Temporarily 154 B URL HTTP/1.1 cs.media.net/cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 52558d05355ee6e9d14ff3cf8a5a3ef0
52cfd7dd3859dc0578849a7b1c91bb8f91ad84c2
bac5546ea0f819f461c9023592ec2398a45a6c3aab78e55fed8b7c908dce6060
GET /cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E HTTP/1.1
Host: cs.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: Apache
Content-Length: 154
Content-Type: text/html
Location: https://router.infolinks.com/dyn/mnet-usync?uid=0000EEA
Set-Cookie: data-inf=setstatuscode~~41;Expires=Sat, 04 Mar 2023 08:08:31 GMT;path=/;domain=.media.net;
P3P: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
X-MNET-HL2: E
Expires: Sun, 04 Dec 2022 08:08:31 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 04 Dec 2022 08:08:31 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash 86762145f497aa20e9c9f9c75e18cd0f
995d0cee2b8cfe2fe295979fadeb156cb19f1df5
c54f5cc9ac020c848cbec29bebb39eb7b7adb1703e393569cc6d2ba3c91764d2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:08:31 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 13:55:57 GMT
Expires: Sat, 10 Dec 2022 13:55:56 GMT
Etag: "995d0cee2b8cfe2fe295979fadeb156cb19f1df5"
Cache-Control: max-age=538644,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77430dfb18441c0a-OSL
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sun, 04 Dec 2022 08:08:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://router.infolinks.com/dyn/apn-usync?user_id=0
AN-X-Request-Uuid: 7ab53f6c-1ab7-4803-9632-5f883699b94a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
www.abnewswire.com/uploads/da6ec3b9bb8cd22874347fffb798824e.png
200 OK 248 kB URL HTTP/1.1 www.abnewswire.com/uploads/da6ec3b9bb8cd22874347fffb798824e.png
IP
File type PNG image data, 310 x 480, 8-bit/color RGBA, non-interlaced\012- data
Size 248 kB (247875 bytes)
Hash 4be4be9d7f46a9b72384eb44e1389a8d
c7231c840528dc286f9c4b109ae27d57d028afc2
27eed3fa81965939a4cc342edcfe92ca72c1c938bd7166fb255e3a2232fb2c10
GET /uploads/da6ec3b9bb8cd22874347fffb798824e.png HTTP/1.1
Host: www.abnewswire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:08:30 GMT
Server: Apache
Last-Modified: Mon, 07 Nov 2022 20:35:31 GMT
Accept-Ranges: bytes
Content-Length: 247875
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
Set-Cookie: visid_incap_155419=K66k3gLeQd+PaRIer/Nrg31VjGMAAAAAQUIPAAAAAAC/0shfZdyLkpTPkeJkrN0M; expires=Sun, 03 Dec 2023 22:15:23 GMT; HttpOnly; path=/; Domain=.abnewswire.com
incap_ses_7235_155419=Gua1JKiwqli1THOUr+JnZH5VjGMAAAAAkBe7ynLGSN9S3hLCVgEC0Q==; path=/; Domain=.abnewswire.com
___utmvmFZVupzSF=SxPUIgqdkYM; path=/; Max-Age=900
___utmvaFZVupzSF=RUzkNkd; path=/; Max-Age=900
___utmvbFZVupzSF=IZA XGCOfalY: Atf; path=/; Max-Age=900
X-CDN: Imperva
X-Iinfo: 14-147595199-147562773 2NNN RT(1670141309445 50) q(0 0 0 0) r(6 6) U18
ocsp.digicert.com/
200 OK 278 B IP
Hash 328993c6e16ef557374dbcdfb8abc9e8
1cdacb9577b0e2c9c378a35cd9f9019f79c91af5
728e2e553efab37b13f072e71a876b9eda4f9a4e7a3fe8d516c4323d692ad6e7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2414
Cache-Control: max-age=159989
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Etag: "638c1a06-116"
Expires: Tue, 06 Dec 2022 04:35:00 GMT
Last-Modified: Sun, 04 Dec 2022 03:54:46 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 471 B IP
Hash 89757b50a8055fe5630793960963e992
4686842e9b109dd056936e47c364dd10995c1293
995c2617619bb86561a6620440002d85f54e42a0c46ee19d9c002c273e29264e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2506
Cache-Control: max-age=114340
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Etag: "638b6759-1d7"
Expires: Mon, 05 Dec 2022 15:54:11 GMT
Last-Modified: Sat, 03 Dec 2022 15:12:25 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0a0bec46778e4ea5fe7c731704106c6b
d7e26cea7ebebf23caf0bc3bf1f72625de082a54
00fa3a7a44fa56fb7025e159a01e7ec7bc45c5c159adcd0ce48c86eb710d1d21
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Dec 2022 08:08:31 GMT
Last-Modified: Sun, 04 Dec 2022 07:25:23 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Il9tIgAbypEViPQtrSZ_2jsm_gIZve1UaVat0x1QAVN0OqQ9F_lOUQ==
Age: 2588
ocsp.digicert.com/
200 OK 312 B IP
Hash 8e5daa96d6f189a5c2b0cadab02873ac
f7c7ac3b69a3c0ea4f89772025f1ead10c586811
4d71eb715a0284071eb2f0b21a1dc396e0a1d5b52cce15e08e74e1d39211c32f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2240
Cache-Control: max-age=147242
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Etag: "638be8e9-138"
Expires: Tue, 06 Dec 2022 01:02:33 GMT
Last-Modified: Sun, 04 Dec 2022 00:25:13 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 312
ssum-sec.casalemedia.com/usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-length: 0
location: /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
cf-ray: 77430dfbd95eb4ed-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y4xVf-4ywdNM9BM0vbDtCwAA; Path=/; Domain=casalemedia.com; Expires=Mon, 04 Dec 2023 08:08:31 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=684; Path=/; Domain=casalemedia.com; Expires=Sat, 04 Mar 2023 08:08:31 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=684; Path=/; Domain=casalemedia.com; Expires=Sat, 04 Mar 2023 08:08:31 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F%2ByFUlEoXXigeZ0ArfTNptRusRPFFmu1eiBLLN9JF2fFI1belSQKKW%2FW4RwgadS%2F%2B%2Fq5qA13r%2Fmjedu%2F4Mr5Cfret1AEtRs7u9KEgcfGeRS1TxNh9MzjDMEKWnLF%2F618YlOmXSGLxWwFdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
router.infolinks.com/dyn/mnet-usync?uid=0000EEA
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/mnet-usync?uid=0000EEA
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/mnet-usync?uid=0000EEA HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: MNETUSERCOOKIE=0000EEA; Domain=infolinks.com; Expires=Sat, 04-Mar-2023 08:08:31 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 04 Dec 2021 08:08:31 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfb6ca5b4ee-OSL
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fs.cpx.to%2Fca.png%3Fref%3Dhttps%25253A%25252F%25252Fmichigan.newsnetmedia.com%25252Fstory%25252F47651922%25252Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem%26pid%3D12306%26adnxs_uid%3D%24UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fs.cpx.to%2Fca.png%3Fref%3Dhttps%25253A%25252F%25252Fmichigan.newsnetmedia.com%25252Fstory%25252F47651922%25252Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem%26pid%3D12306%26adnxs_uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fs.cpx.to%2Fca.png%3Fref%3Dhttps%25253A%25252F%25252Fmichigan.newsnetmedia.com%25252Fstory%25252F47651922%25252Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem%26pid%3D12306%26adnxs_uid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sun, 04 Dec 2022 08:08:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://s.cpx.to/ca.png?ref=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&pid=12306&adnxs_uid=0
AN-X-Request-Uuid: ce5955e0-9a61-4429-b57b-cda51717aa00
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
pixel.advertising.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
301 Moved Permanently 360 B URL HTTP/2 pixel.advertising.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ef184c6b065a63adf6c94f609c0a0c72
12e8af72d7af8f029d4300991e1eda7ec9f2545b
b01d8ed4f119579d92815a648e454327ae4af8a4592e98462fb72f414ddba9af
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 04 Dec 2022 08:08:31 GMT
server: ATS/9.1.10.25
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
content-type: text/html
content-language: en
set-cookie: A3=d=AQABBH9VjGMCEB0Ll21hguU6QY3wu-hQ5BAFEgEBAQGmjWOWYwAAAAAA_eMAAA&S=AQAAAvwTNDmEWcP5Yf-oDKX7aZU; Expires=Mon, 4 Dec 2023 14:08:31 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 360
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 89757b50a8055fe5630793960963e992
4686842e9b109dd056936e47c364dd10995c1293
995c2617619bb86561a6620440002d85f54e42a0c46ee19d9c002c273e29264e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2506
Cache-Control: max-age=114340
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Etag: "638b6759-1d7"
Expires: Mon, 05 Dec 2022 15:54:11 GMT
Last-Modified: Sat, 03 Dec 2022 15:12:25 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
onetag-sys.com/usync/?pubId=598ce3ddaee8c90
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?pubId=598ce3ddaee8c90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=598ce3ddaee8c90 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
router.infolinks.com/dyn/apn-usync?user_id=0
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/apn-usync?user_id=0
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/apn-usync?user_id=0 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfb8cc2b4ee-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ead2dd52fe3394a534557ee6c96f483f
ab9692bf511d8b1437aa2b6df427c06d01f0d9f8
ea2f134084767825154def0db1f7e95d3eabb0220d387ab59f065589211f63e0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2498
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Last-Modified: Sun, 04 Dec 2022 07:26:53 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash a6274672c555604d72b1292b4648c3e0
d8c4fa29092153ecf3408e05e051c56ab8fd63c2
007d72b18139f05a87fd896bdfbce956ad5ea3571724eb7d1fcfa5d88a62bc05
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2307
Cache-Control: max-age=113084
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Etag: "638b6338-1d7"
Expires: Mon, 05 Dec 2022 15:33:15 GMT
Last-Modified: Sat, 03 Dec 2022 14:54:48 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBH9VjGMCEHQNVUJCwicSUhKMWXoAuUQFEgEBAQGmjWOWYwAAAAAA_eMAAA&S=AQAAAvj3XjBhrJcpZjYl778j99Q; Expires=Mon, 4 Dec 2023 14:08:31 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58422/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58422/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58422/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58422/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBH9VjGMCEJR4G5NBiHoQw_CbR0sCfwsFEgEBAQGmjWOWYwAAAAAA_eMAAA&S=AQAAAk4KkJgemnwA3AqIlsIgh84; Expires=Mon, 4 Dec 2023 14:08:31 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ead2dd52fe3394a534557ee6c96f483f
ab9692bf511d8b1437aa2b6df427c06d01f0d9f8
ea2f134084767825154def0db1f7e95d3eabb0220d387ab59f065589211f63e0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2498
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Last-Modified: Sun, 04 Dec 2022 07:26:53 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
router.infolinks.com/dyn/r1-usync?uid=OPTOUT
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/r1-usync?uid=OPTOUT
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/r1-usync?uid=OPTOUT HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: R1USERCOOKIE=OPTOUT; Domain=infolinks.com; Expires=Sat, 04-Mar-2023 08:08:31 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 04 Dec 2021 08:08:31 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfbcd0ab4ee-OSL
X-Firefox-Spdy: h2
router.infolinks.com/usync/manage?pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 2.4 kB URL HTTP/2 router.infolinks.com/usync/manage?pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
Hash dd3ebf45a1a8b4b4e1192403fff572fd
715d8a732ed4804056d7b371ed8e1b6d597c913e
655d782e3308e026463bc81d88b889c720ddfe0d18ef2aff2e01fb540369ce83
GET /usync/manage?pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430df92a5bb4ee-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 25b6359c83340f619ebf9a7bf75be58e
1afc9e9ed1c1c57c8fd6b934489244a25612778a
3e95976d851c18179fa4bff928c3809735d71c27d131359ff839013421aa266c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106762
Date: Sun, 04 Dec 2022 08:08:31 GMT
Etag: "638b488c-1d7"
Expires: Mon, 05 Dec 2022 13:47:53 GMT
Last-Modified: Sat, 03 Dec 2022 13:01:00 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DzxhHuRmqhxKXG85Cbrsmr6gmJs9im12wEho3CmGe-tmVJUO8H_AgQ==
Age: 2813
ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Dec 2022 08:08:31 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBH9VjGMCEEdE-j2tdcyu-DZSoDORqTkFEgEBAQGmjWOWYwAAAAAA_eMAAA&S=AQAAAt7N04pjCA1ia1XYw4UTHNE; Expires=Mon, 4 Dec 2023 14:08:31 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fe86c95c6bba827b34425eecc4aa8979
2cad20def9beb272912964572bea97ec58df868e
b1163bc7a712f0a44559b6cbcb03fa4d81df094b90ca773fb80262aa7e33318a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2139
Cache-Control: max-age=153987
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Etag: "638c03a7-1d7"
Expires: Tue, 06 Dec 2022 02:54:58 GMT
Last-Modified: Sun, 04 Dec 2022 02:19:19 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
sync.1rx.io/usersync2/rmpssp?sub=infolinks&zcc=1&cb=1670141311390
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=infolinks&zcc=1&cb=1670141311390
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usersync2/rmpssp?sub=infolinks&zcc=1&cb=1670141311390 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://router.infolinks.com/dyn/ur-usync?uid=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b64b3cd4701733e5be64209249083515
b81692038002b5c878b7606b5396d6099f0009b4
cd50d1f1f4a09e47355664207ce1c8651a4d17ec33b64d5ec208a179226ac355
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2428
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Last-Modified: Sun, 04 Dec 2022 07:28:03 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
michigannn.akamaized.net/hls/live/2031672/michigannn_OUT/1/streamPlaylist.m3u8
200 OK 332 B URL HTTP/1.1 michigannn.akamaized.net/hls/live/2031672/michigannn_OUT/1/streamPlaylist.m3u8
IP
ASN #20940 Akamai International B.V.
Hash 0129a51a22d246e607ee9682ed32313a
b89c374c341debe268c485667a69a3be10abe6d3
761afaf026dd44417046e0e8097ceadf9862ed5c7fe2a0192b32f3996c307a64
GET /hls/live/2031672/michigannn_OUT/1/streamPlaylist.m3u8 HTTP/1.1
Host: michigannn.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://michigan.newsnetmedia.com
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sun, 04 Dec 2022 08:08:30 GMT
X-Akamai-Live-Origin-QoS: d=6000;t=1670141310.772
X-Akamai-Server: Akamai-SMT
Content-Encoding: gzip
Content-Length: 332
Akamai-Mon-Iucid-Ing: 2031672
Expires: Sun, 04 Dec 2022 08:08:31 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 04 Dec 2022 08:08:31 GMT
Connection: keep-alive
Vary: Accept-Encoding
Akamai-Mon-Iucid-Del: 1166890
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: application/x-mpegURL
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC
Access-Control-Allow-Headers: origin,range,hdntl,hdnts
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
eb2.3lift.com/getuid?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Ftplift%3Fuid%3D%24UID
200 OK 37 B URL HTTP/2 eb2.3lift.com/getuid?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Ftplift%3Fuid%3D%24UID
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /getuid?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Ftplift%3Fuid%3D%24UID HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-length: 0
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID
302 Found 272 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash ebb92a4e4bfa9f49081d6d5490b87169
e986871fb2a1067935b9f45ff4ba155383056b29
fd3de728a94f948ba814f33b0020466ae949a4c493784a6b7a5f23687385747d
GET /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Sun, 04 Dec 2022 08:08:31 GMT
content-length: 272
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 328993c6e16ef557374dbcdfb8abc9e8
1cdacb9577b0e2c9c378a35cd9f9019f79c91af5
728e2e553efab37b13f072e71a876b9eda4f9a4e7a3fe8d516c4323d692ad6e7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2414
Cache-Control: max-age=159989
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Etag: "638c1a06-116"
Expires: Tue, 06 Dec 2022 04:35:00 GMT
Last-Modified: Sun, 04 Dec 2022 03:54:46 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 9880f7ae3ef4a61637cba95d4141ea37
32f3bb936d201e68ffc6dda505828068869fe512
271109727a502a013abae4f6bd2fb871a2ccbfd83b0980bc2a1a99255959bdd8
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Dec 2022 08:08:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Dec 2022 21:01:56 GMT
Expires: Sun, 04 Dec 2022 21:01:56 GMT
ETag: "32f3bb936d201e68ffc6dda505828068869fe512"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cms.quantserve.com/pixel/p-u1vdacBMXAcfT.gif?idmatch=0
302 Found 0 B URL HTTP/2 cms.quantserve.com/pixel/p-u1vdacBMXAcfT.gif?idmatch=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/p-u1vdacBMXAcfT.gif?idmatch=0 HTTP/1.1
Host: cms.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-length: 0
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
location: https://router.infolinks.com/dyn/qc-usync?&uid=za9QU86pX1bWqwkInqtFVs76X1XWqFtWy6zHqPcq
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: d=EAMBDQHdJ82aswA; expires=Sat, 04-Mar-2023 08:08:31 GMT; path=/; domain=.quantserve.com
mc=638c557f-7a8e7-f5f7e-43f00; expires=Thu, 04-Jan-2024 08:08:31 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
ad.360yield.com/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
302 Found 0 B URL HTTP/2 ad.360yield.com/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531 HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
set-cookie: tuuid=2822289e-2451-46ff-928b-0b8af443cced; Expires=Sat, 04 Mar 2023 08:08:31 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1670141311; Expires=Sat, 04 Mar 2023 08:08:31 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-length: 0
X-Firefox-Spdy: h2
ap.lijit.com/pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Sun, 04 Dec 2022 08:08:31 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
X-Sovrn-Pod: ad_ap4ams1
router.infolinks.com/dyn/ur-usync?uid=OPTOUT
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/ur-usync?uid=OPTOUT
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/ur-usync?uid=OPTOUT HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: URUSERCOOKIE=OPTOUT; Domain=infolinks.com; Expires=Sat, 04-Mar-2023 08:08:31 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 04 Dec 2021 08:08:31 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfc8db0b4ee-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c01a2fb79ad40e7a918fd96fe5196db3
7c0212b7abe22d5b37602a22e1a3824804869f49
1cccd87d796b1ebbb33049df4782024b115b37c156c6f39fdcf56c83d2fb9c05
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:08:31 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 06:01:47 GMT
Expires: Sun, 11 Dec 2022 06:01:46 GMT
Etag: "7c0212b7abe22d5b37602a22e1a3824804869f49"
Cache-Control: max-age=596594,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77430dfd0e7e1bfe-OSL
b1sync.zemanta.com/usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__
302 Found 70 B URL HTTP/1.1 b1sync.zemanta.com/usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__
IP
File type HTML document, ASCII text
Hash 16ccc9da763aca428789e4f469fc7ff1
4a873c523b8d9bdbc30b8c48189817413a19ee7a
5be7e833013b4b10333a904010b01217263df39c501a29b146d072110ceea4a1
GET /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__ HTTP/1.1
Host: b1sync.zemanta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Content-Length: 70
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: https://router.infolinks.com/dyn/zmn-usync?uid=
Pragma: no-cache
Date: Sun, 04 Dec 2022 08:08:31 GMT
ocsp.sectigo.com/
200 OK 471 B IP
Hash d9c3d3e8a0ee0f630ec32c2b40c31183
35d6fe235fa173d759a6691d5ffc25b6863eadba
b3391090c0acc0b439c2a4ff66e9867d6030c7fc0cb3720f7ea2f40218a4e8d5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:08:31 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 23:33:39 GMT
Expires: Wed, 07 Dec 2022 23:33:38 GMT
Etag: "35d6fe235fa173d759a6691d5ffc25b6863eadba"
Cache-Control: max-age=314106,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77430dfd19cdb51b-OSL
router.infolinks.com/dyn/ix-usync?uid=0
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/ix-usync?uid=0
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/ix-usync?uid=0 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum-sec.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfc6d9cb4ee-OSL
X-Firefox-Spdy: h2
s.cpx.to/ca.png?ref=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&pid=12306&adnxs_uid=0
200 OK 95 B URL HTTP/1.1 s.cpx.to/ca.png?ref=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&pid=12306&adnxs_uid=0
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9606fa62df0ffe87253f3baf418f0e42
fe8520ab0bf1622350513d685ece5faf70b4e8c1
bf27786b4381176350787d768bf5f7c5310ba640aa48ee98a3d2c310ddd971ab
GET /ca.png?ref=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&pid=12306&adnxs_uid=0 HTTP/1.1
Host: s.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-store, must-revalidate, private, max-age=0, no-store, must-revalidate, private, max-age=0
Content-Security-Policy: default-src 'self'
Content-Type: image/png
Date: Sun, 04 Dec 2022 08:08:31 GMT
Expires: Sun, 04 Dec 2022 08:08:31 UTC
P3P: CP="NOI DEV ADM"
Pragma: no-cache, no-cache
Set-Cookie: cpSess=74a6d2a4921dce87; Expires=Mon, 04 Dec 2023 08:08:31 GMT; Domain=.cpx.to; Path=/; Secure; HttpOnly; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-Permitted-Cross-Domain-Policies: none
Content-Length: 95
Connection: keep-alive
sync.1rx.io/usersync2/infolinks
302 Found 471 B URL HTTP/2 sync.1rx.io/usersync2/infolinks
IP
Hash 83c99dadb9acfa1b185840748d645f24
3fa4f068023e2a83addeea27e5219a1fc29db9b0
4742755fc21f7b8d127aa5d3401aba01517c11b1e848ee1fc3345628aec1484d
GET /usersync2/infolinks HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-d75a2163-06c6-4bc7-9e20-c974c64ebf76-003%22%2C%22zdxidn%22%3A%222109%22%7D; path=/; expires=Mon, 04 Dec 2023 08:08:31 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync2/infolinks?zcc=1&cb=1670141311278
etag: RXd75a216306c64bc79e20c974c64ebf76003
X-Firefox-Spdy: h2
router.infolinks.com/dyn/qc-usync?&uid=za9QU86pX1bWqwkInqtFVs76X1XWqFtWy6zHqPcq
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/qc-usync?&uid=za9QU86pX1bWqwkInqtFVs76X1XWqFtWy6zHqPcq
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/qc-usync?&uid=za9QU86pX1bWqwkInqtFVs76X1XWqFtWy6zHqPcq HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: QCUSERCOOKIE=za9QU86pX1bWqwkInqtFVs76X1XWqFtWy6zHqPcq; Domain=infolinks.com; Expires=Sat, 04-Mar-2023 08:08:31 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 04 Dec 2021 08:08:31 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfd0e3cb4ee-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2e090985d814521fb76bb676808bd765
02176de42b58142d9d3914b95bf2237057ecd0e5
542ec484870d20f026886e7ff7c44e2bc5331b485944d05da673da7dd1d7f63f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Dec 2022 08:08:31 GMT
Last-Modified: Sun, 04 Dec 2022 07:23:35 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qoqz5vYHHs9bLiq7Zom2NoxGpvcTXe_-7enJBz29-n1R77dIizBibg==
Age: 2696
ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
200 OK 43 B URL HTTP/2 ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531 HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV
200 OK 75 B URL HTTP/2 de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 1ca09ed98f39d2adb7fab3878d13c0cb
da2a6f2431a34dfcc99b6f4500833f783f149d19
e170d20dbbd5a22f50118e25fa2eefb1e85d2ad780e5477ed3a9643186090442
GET /deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
expires: Mon, 05 Dec 2022 08:08:31 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
referrer-policy: unsafe-url
content-type: text/html
content-length: 75
date: Sun, 04 Dec 2022 08:08:31 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
router.infolinks.com/dyn/zmn-usync?uid=
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/zmn-usync?uid=
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/zmn-usync?uid= HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfd5e8db4ee-OSL
X-Firefox-Spdy: h2
router.infolinks.com/usync/lcmanage?pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 0 B URL HTTP/2 router.infolinks.com/usync/lcmanage?pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/lcmanage?pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-length: 0
cache-control: no-store
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfd6e91b4ee-OSL
X-Firefox-Spdy: h2
ssc-cms.33across.com/ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X
204 No Content 0 B URL HTTP/2 ssc-cms.33across.com/ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X HTTP/1.1
Host: ssc-cms.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
x-33x-status: 2000208
server: 33XP016
date: Sun, 04 Dec 2022 08:08:31 GMT
X-Firefox-Spdy: h2
www.abnewswire.com/uploads/a03cff89a508753ec735b8124fdd2dff.png
200 OK 498 kB URL HTTP/1.1 www.abnewswire.com/uploads/a03cff89a508753ec735b8124fdd2dff.png
IP
File type PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced\012- data
Size 498 kB (498446 bytes)
Hash cb2367ad516b468f1354f6c70ea71480
aa9d01f985d27d2328c3e27839d9c68475aac812
f460f7d9f72785c227f6fccc58df94df8b827a4f60d06281d0f091bf8258bc2c
GET /uploads/a03cff89a508753ec735b8124fdd2dff.png HTTP/1.1
Host: www.abnewswire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:08:30 GMT
Server: Apache
Last-Modified: Mon, 07 Nov 2022 20:35:00 GMT
Accept-Ranges: bytes
Content-Length: 498446
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
Set-Cookie: visid_incap_155419=K66k3gLeQd+PaRIer/Nrg31VjGMAAAAAQUIPAAAAAAC/0shfZdyLkpTPkeJkrN0M; expires=Sun, 03 Dec 2023 22:15:23 GMT; HttpOnly; path=/; Domain=.abnewswire.com
incap_ses_7235_155419=NhcgfqkQsUS1THOUr+JnZH5VjGMAAAAARXpgq5oTCPzUGkDmo7rdgA==; path=/; Domain=.abnewswire.com
___utmvmFZVupzSF=mXIwRXFmWXK; path=/; Max-Age=900
___utmvaFZVupzSF=wrakQCX; path=/; Max-Age=900
___utmvbFZVupzSF=sZP XuVOGalZ: WtY; path=/; Max-Age=900
X-CDN: Imperva
X-Iinfo: 14-147595198-147587770 2NNN RT(1670141309445 56) q(0 0 0 0) r(5 5) U18
api-public.addthis.com/url/shares.json?url=http%3A%2F%2Fmichigan.yournewsnet.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&callback=_ate.cbs.rcb_f8dg0
200 OK 53 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=http%3A%2F%2Fmichigan.yournewsnet.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&callback=_ate.cbs.rcb_f8dg0
IP
File type ASCII text, with no line terminators
Hash cdef82fba35d271af9fa63055d08f865
ba7bcb2d6ae786e7bf5b1e63ea943b9f73231716
447d8e5216d0899a5f60c6d311570383bddfc7cf75a0c86413dbda54447eb57f
GET /url/shares.json?url=http%3A%2F%2Fmichigan.yournewsnet.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&callback=_ate.cbs.rcb_f8dg0 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: michigan.yournewsnet.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
last-modified: Sun, 04 Dec 2022 08:08:31 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Sun, 04 Dec 2022 08:08:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 13dc85b9faf49e6a9bf32608b0fcf56d
2ded5a6b67364d3f7875ce1598683ac2c97937d0
7924016b948a369b3a0bcb336f32dd8f10b14893ba1d9437c4fc171190eb5899
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fmichigan.yournewsnet.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 2 B URL HTTP/2 api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fmichigan.yournewsnet.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fmichigan.yournewsnet.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://michigan.newsnetmedia.com
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
content-length: 2
cache-control: no-transform, max-age=0, s-maxage=14400
surrogate-key: sFbt=https://michigan.yournewsnet.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
last-modified: Sun, 04 Dec 2022 08:00:00 GMT
access-control-allow-origin: https://michigan.newsnetmedia.com
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
date: Sun, 04 Dec 2022 08:08:31 GMT
X-Firefox-Spdy: h2
api-public.addthis.com/url/shares.json?url=https%3A%2F%2Fmichigan.yournewsnet.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&callback=_ate.cbs.rcb_gkny0
200 OK 53 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=https%3A%2F%2Fmichigan.yournewsnet.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&callback=_ate.cbs.rcb_gkny0
IP
File type ASCII text, with no line terminators
Hash 25c0332e5d53cb6dc0fda8e1d369fb28
7a78cbb4be6306005b1acb0583c606400bbb4e70
7a641b1104f5afde47ed71b68ce6b0e93b8aa486c9cbd39873ef2c7012cfcecf
GET /url/shares.json?url=https%3A%2F%2Fmichigan.yournewsnet.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&callback=_ate.cbs.rcb_gkny0 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: michigan.yournewsnet.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
last-modified: Sun, 04 Dec 2022 08:08:31 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Sun, 04 Dec 2022 08:08:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Sun, 04 Dec 2022 08:08:31 GMT
expires: Sun, 04 Dec 2022 08:08:31 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 15:08:26 GMT
expires: Fri, 01 Dec 2023 15:08:26 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 234005
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c9e0bb25e8c28e8b10038806b0a7190
9fa6097aeb8eacde8ba7c9ab80a7a7d2405ae2bc
f4864000960be2f888ed7d2467f74130231fed6f56ad48ff15861f5769e95a58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 513 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 751e0e98a5d8277d0c1ff56e3f97b1e3
e717c23f093f9e4900b7e349e56c6dd00fbc1ecf
884bd6e6fa31beab1ef163383e78b473506553d75a0d23e85b7c0725978d521f
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sun, 04 Dec 2022 08:08:31 GMT
date: Sun, 04 Dec 2022 08:08:31 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-v4LxIeZ9O7nJvSe2dWa3-w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 513
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssp.disqus.com/redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks
302 Found 0 B URL HTTP/2 ssp.disqus.com/redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks HTTP/1.1
Host: ssp.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-length: 0
location: https://cs.iqzone.com/a6da5bf591376177b08e1eb90117169d.gif?puid=[UID]&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICGgY4AQ==
vary: origin
cache-control: no-store
pragma: no-cache
expires: 0
set-cookie: zeta-ssp-user-id=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a; Max-Age=31536000; Expires=Mon, 04 Dec 2023 08:08:31 GMT; Path=/; Domain=disqus.com; Secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 584e39ae6e2cdfc7a6dae3f2addea535
9bffa161cf289a8f53f0dbd22e4ff798da8bc157
180227680533bf1a95fc3e02466f7566bbc867a0295eb9d047ad5eac632837cd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:08:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 14:15:48 GMT
Expires: Sat, 10 Dec 2022 14:15:47 GMT
Etag: "9bffa161cf289a8f53f0dbd22e4ff798da8bc157"
Cache-Control: max-age=539835,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77430dfcf9a31c0a-OSL
p.rfihub.com/cm?pub=43153&in=1
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=43153&in=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=43153&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 04 Dec 2022 08:08:32 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MTCwMLE0MjK3NLSwNDExMBPiM9R1D8tzL8nLtXRNzisHAHef754lAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 29 Dec 2023 08:08:32 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTCwMLE0MjK3NLSwNDExMBPiM9R1D8tzL8nLtXRNzisHAHef754lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_1slzmtoZm5gaGJobGhkYGwCAO176vAQAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 29 Dec 2023 08:08:32 GMT; Secure; SameSite=None
Location: https://router.infolinks.com/dyn/zeta-usync?uid=5140084922791894406
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
rt3063.infolinks.com/action/doq.htm?pcode=utf-8&r=16701413094681
200 OK 604 B URL HTTP/2 rt3063.infolinks.com/action/doq.htm?pcode=utf-8&r=16701413094681
IP
File type JSON data\012- , ASCII text, with very long lines (1029)
Hash c14b34c0c2c10b997f09f639e6433f36
5d415664e4643a8310a085ddea79fd6130633498
050d5068499870d7c5ce8d73064b1211a63adc830afe9beeaec95a8c49b18647
POST /action/doq.htm?pcode=utf-8&r=16701413094681 HTTP/1.1
Host: rt3063.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4779
Origin: https://michigan.newsnetmedia.com
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/html;charset=UTF-8
x-application-context: application:prod
access-control-allow-origin: https://michigan.newsnetmedia.com
vary: Origin
access-control-allow-credentials: true
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: cuid=a6394e27-2ed8-4839-bde7-9bfecf6273e4; Domain=infolinks.com; Expires=Tue, 03-Dec-2024 08:08:31 GMT; Path=/; SameSite=None
p3p: CP="NON DSP NID OUR COR"
content-language: en-US
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfedbc6b51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
resources.infolinks.com/js/vidice/2.1/vidice.js
200 OK 72 kB URL HTTP/2 resources.infolinks.com/js/vidice/2.1/vidice.js
IP
File type Unicode text, UTF-8 text, with very long lines (46971)
Hash 8bb8e65ffe9d1125e7122d817ad5af93
cfd46554b53a1f382ad28aca175508472684c903
7fb26f09b665b2e9a11034ce93a7c04f2dd93b0801a769bc09df33a51e6ef6a3
GET /js/vidice/2.1/vidice.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:32 GMT
content-type: application/javascript
last-modified: Tue, 25 Jan 2022 09:20:02 GMT
etag: W/"4674f-5d664970ad6e6"
cache-control: max-age=2592000
expires: Tue, 03 Jan 2023 04:53:18 GMT
via: 1.1 google
cf-cache-status: HIT
age: 11713
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430e00ba00b4ee-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
router.infolinks.com/dyn/zeta-usync?uid=5140084922791894406
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/zeta-usync?uid=5140084922791894406
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/zeta-usync?uid=5140084922791894406 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:32 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: ZTUSERCOOKIE=5140084922791894406; Domain=infolinks.com; Expires=Sat, 04-Mar-2023 08:08:32 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 04 Dec 2021 08:08:32 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430e00ca15b4ee-OSL
X-Firefox-Spdy: h2
thumbnails.infolinks.com/thumbnail.jpg?domain=www.watchpostblog.com
200 OK 2.4 kB URL HTTP/2 thumbnails.infolinks.com/thumbnail.jpg?domain=www.watchpostblog.com
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 93fc94bde1fe6f97b85b4dcfea8abf3a
d08546cb64b8e8ffb1d87499cb0d064d3680e0e7
a9ce675741b1d1ae9f0a583c33e24cdefc129848176b1717f2bfa1862eb72448
GET /thumbnail.jpg?domain=www.watchpostblog.com HTTP/1.1
Host: thumbnails.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:32 GMT
content-type: image/webp
content-length: 2368
cache-control: max-age=86400
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=2927
content-disposition: inline; filename="thumbnail.webp"
vary: Accept
expires: Sun, 04 Dec 2022 09:00:37 GMT
srvr: tbn2v
via: 1.1 google
x-powered-by: PHP/5.4.16
cf-cache-status: HIT
age: 475
last-modified: Sun, 04 Dec 2022 08:00:37 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 77430e032c72b4ee-OSL
X-Firefox-Spdy: h2
cdn.doubleverify.com/dvtp_src.js?t2te=0&seltag=1&adsrv=104&sadv=4780307474&ord=3065070954&litm=6084843041&scrt=138400628316&splc=/43459271/nat-desktop/michigannn/web&adu=22253574773&unit=728x90&btreg=6084843041138400628316&btadsrv=6084843041138400628316&ctx=19955922&cmp=DV451308
200 OK 3.3 kB URL HTTP/1.1 cdn.doubleverify.com/dvtp_src.js?t2te=0&seltag=1&adsrv=104&sadv=4780307474&ord=3065070954&litm=6084843041&scrt=138400628316&splc=/43459271/nat-desktop/michigannn/web&adu=22253574773&unit=728x90&btreg=6084843041138400628316&btadsrv=6084843041138400628316&ctx=19955922&cmp=DV451308
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (7951)
Hash 1f1ed3424a717c947df74dc8d3806e05
131cc89b0cab34ee7f6c9c22be75bd57d00b01e4
b205062c55a70089fab2fd0a0f07946600b0ec5e1a0ed1bb0a21ca0b323fdde1
GET /dvtp_src.js?t2te=0&seltag=1&adsrv=104&sadv=4780307474&ord=3065070954&litm=6084843041&scrt=138400628316&splc=/43459271/nat-desktop/michigannn/web&adu=22253574773&unit=728x90&btreg=6084843041138400628316&btadsrv=6084843041138400628316&ctx=19955922&cmp=DV451308 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 01 Dec 2022 14:42:25 GMT
Accept-Ranges: bytes
ETag: "809ea220935d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 3314
Date: Sun, 04 Dec 2022 08:08:32 GMT
Connection: keep-alive
resources.infolinks.com/js/1833.007-3.025/in_search.js
200 OK 91 kB URL HTTP/2 resources.infolinks.com/js/1833.007-3.025/in_search.js
IP
File type ASCII text, with very long lines (43468)
Hash 13d3884bc0a24e4e03d758871f34670f
f1b7b79d1a9f9a322a33e3470474390a2d558a58
e4bd5f3840ef1813bf38fb2ef702134a89aa52440d13c1e139d16892603e8e75
GET /js/1833.007-3.025/in_search.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:32 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 09:34:52 GMT
etag: W/"37e06-5ee2000246193"
cache-control: max-age=2592000
expires: Tue, 03 Jan 2023 07:35:08 GMT
via: 1.1 google
cf-cache-status: HIT
age: 2004
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430dfff907b4ee-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.doubleverify.com/dv-measurements3296.js
200 OK 108 kB URL HTTP/1.1 cdn.doubleverify.com/dv-measurements3296.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 108 kB (107946 bytes)
Hash b04336e17c75a24e6ec9f820249da368
fe1c6ddabe640dcecb5dad45c29790dad5cc2d72
d096c5424554b7b55917594b037f32b7d2fa5c147365e78dcb51c135676b419f
GET /dv-measurements3296.js HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=946080900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 01 Dec 2022 12:05:05 GMT
Accept-Ranges: bytes
ETag: "80eef4257d5d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 107946
Date: Sun, 04 Dec 2022 08:08:32 GMT
Connection: keep-alive
securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsszc5et_ADlkPbYDU_fGrWD05nmFCO-ad5Td21huersQRe16glHTfP0AbVwazxTTJJCIg_lOHMzQ_UKntnBtv6P58uyKtrg8taGyiARLznJZ90irPWrcQC8zRCOHftYX80i69d9RjQpnPFSKzxNaT3SSIjjLowrdzaDGk-cJ9iAXDqbm5-OsxhpgYpv3sNjRfPYEp8djXzwGi31jh5CZA_zfGdXWGQyWM81WooclwM5OY2-fvb0cs-O2fG8urjwDjOggjN85C11WsN0Jp3FAQ14WTC_txNl770f2PCVUlJtoxhnwPrKaLShlqpqlsizJa77AtrS_DfV7a6SBjQY2Q6objEHpWZ_0dJLBYU&sai=AMfl-YR5YgoxzREFEe9xpajhiUCJozTs-ePfPDXNg40QZHrSUC5XXiuZa43Ai5er_97dZj94AEZ6kKwr9glXBcHJVHB31aHGdV4VbyhB0mpzSktXLWHTvCWUiRCFEHmTtqPOCykYOnykAlt5q8RRbAQYrxM&sig=Cg0ArKJSzHHO4zok7YVvEAE&uach_m=[UACH]&adurl=
200 OK 0 B URL HTTP/2 securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsszc5et_ADlkPbYDU_fGrWD05nmFCO-ad5Td21huersQRe16glHTfP0AbVwazxTTJJCIg_lOHMzQ_UKntnBtv6P58uyKtrg8taGyiARLznJZ90irPWrcQC8zRCOHftYX80i69d9RjQpnPFSKzxNaT3SSIjjLowrdzaDGk-cJ9iAXDqbm5-OsxhpgYpv3sNjRfPYEp8djXzwGi31jh5CZA_zfGdXWGQyWM81WooclwM5OY2-fvb0cs-O2fG8urjwDjOggjN85C11WsN0Jp3FAQ14WTC_txNl770f2PCVUlJtoxhnwPrKaLShlqpqlsizJa77AtrS_DfV7a6SBjQY2Q6objEHpWZ_0dJLBYU&sai=AMfl-YR5YgoxzREFEe9xpajhiUCJozTs-ePfPDXNg40QZHrSUC5XXiuZa43Ai5er_97dZj94AEZ6kKwr9glXBcHJVHB31aHGdV4VbyhB0mpzSktXLWHTvCWUiRCFEHmTtqPOCykYOnykAlt5q8RRbAQYrxM&sig=Cg0ArKJSzHHO4zok7YVvEAE&uach_m=[UACH]&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsszc5et_ADlkPbYDU_fGrWD05nmFCO-ad5Td21huersQRe16glHTfP0AbVwazxTTJJCIg_lOHMzQ_UKntnBtv6P58uyKtrg8taGyiARLznJZ90irPWrcQC8zRCOHftYX80i69d9RjQpnPFSKzxNaT3SSIjjLowrdzaDGk-cJ9iAXDqbm5-OsxhpgYpv3sNjRfPYEp8djXzwGi31jh5CZA_zfGdXWGQyWM81WooclwM5OY2-fvb0cs-O2fG8urjwDjOggjN85C11WsN0Jp3FAQ14WTC_txNl770f2PCVUlJtoxhnwPrKaLShlqpqlsizJa77AtrS_DfV7a6SBjQY2Q6objEHpWZ_0dJLBYU&sai=AMfl-YR5YgoxzREFEe9xpajhiUCJozTs-ePfPDXNg40QZHrSUC5XXiuZa43Ai5er_97dZj94AEZ6kKwr9glXBcHJVHB31aHGdV4VbyhB0mpzSktXLWHTvCWUiRCFEHmTtqPOCykYOnykAlt5q8RRbAQYrxM&sig=Cg0ArKJSzHHO4zok7YVvEAE&uach_m=[UACH]&adurl= HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://michigan.newsnetmedia.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 08:08:32 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 04-Dec-2022 08:23:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sun, 04 Dec 2022 08:08:32 GMT
X-Firefox-Spdy: h2
cdn.doubleverify.com/dvtp_src.js?t2te=0&seltag=1&adsrv=104&sadv=4876834796&ord=2700321774&litm=5616014345&scrt=138339141194&splc=/43459271/loc-desktop/michigannn/web/promotion14&adu=22307822204&unit=1x1&btreg=5616014345138339141194&btadsrv=5616014345138339141194&ctx=19955922&cmp=DV451308
200 OK 3.3 kB URL HTTP/1.1 cdn.doubleverify.com/dvtp_src.js?t2te=0&seltag=1&adsrv=104&sadv=4876834796&ord=2700321774&litm=5616014345&scrt=138339141194&splc=/43459271/loc-desktop/michigannn/web/promotion14&adu=22307822204&unit=1x1&btreg=5616014345138339141194&btadsrv=5616014345138339141194&ctx=19955922&cmp=DV451308
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (7951)
Hash 1f1ed3424a717c947df74dc8d3806e05
131cc89b0cab34ee7f6c9c22be75bd57d00b01e4
b205062c55a70089fab2fd0a0f07946600b0ec5e1a0ed1bb0a21ca0b323fdde1
GET /dvtp_src.js?t2te=0&seltag=1&adsrv=104&sadv=4876834796&ord=2700321774&litm=5616014345&scrt=138339141194&splc=/43459271/loc-desktop/michigannn/web/promotion14&adu=22307822204&unit=1x1&btreg=5616014345138339141194&btadsrv=5616014345138339141194&ctx=19955922&cmp=DV451308 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 01 Dec 2022 14:42:25 GMT
Accept-Ranges: bytes
ETag: "809ea220935d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 3314
Date: Sun, 04 Dec 2022 08:08:32 GMT
Connection: keep-alive
sync.1rx.io/usersync2/rmpssp?sub=infolinks
302 Found 331 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=infolinks
IP
Hash 45c51bbd5311a3ebcee9364e6ef17283
a39b1064fd63282c2df3fc2fce1420cf4aea116e
89057a7c91dbacc00cd9c8fbc2e6e29be10ba74ea1ae114bffbc7da1c1c41e89
GET /usersync2/rmpssp?sub=infolinks HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-1f050d50-6f71-4ff7-a750-f25cfd23e80f-003%22%2C%22zdxidn%22%3A%222069.56%22%7D; path=/; expires=Mon, 04 Dec 2023 08:08:31 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync2/rmpssp?sub=infolinks&zcc=1&cb=1670141311390
etag: RX1f050d506f714ff7a750f25cfd23e80f003
X-Firefox-Spdy: h2
resources.infolinks.com/js/1833.007-3.025/ice.js
200 OK 66 kB URL HTTP/2 resources.infolinks.com/js/1833.007-3.025/ice.js
IP
File type ASCII text, with very long lines (32032)
Hash 73739aec9cd28addb83ce33ecab86e3c
81f5b20aef0c912763d5ff89226b29a2b82520f9
4b18259c09afb8e250c1fa97f2b3dfd9197b7897aab4d321f9fa42875e29ac9d
GET /js/1833.007-3.025/ice.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:30 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 09:34:52 GMT
etag: W/"2dae0-5ee200024657b"
cache-control: max-age=2592000
expires: Tue, 03 Jan 2023 06:21:39 GMT
via: 1.1 google
cf-cache-status: HIT
age: 6411
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430df879b4b4ee-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 61126ded7c6de543af0fbec37238399b
ea99b488bc638ed9d948cc660f6b1990e1536bbb
6baac1ac05eb3bf835c46350fd549348cf90f3bcd2ead9acd60ce82ed0990d0a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Dec 2022 08:08:33 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Dec 2022 21:04:06 GMT
Expires: Sun, 04 Dec 2022 21:04:06 GMT
ETag: "ea99b488bc638ed9d948cc660f6b1990e1536bbb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 61126ded7c6de543af0fbec37238399b
ea99b488bc638ed9d948cc660f6b1990e1536bbb
6baac1ac05eb3bf835c46350fd549348cf90f3bcd2ead9acd60ce82ed0990d0a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Dec 2022 08:08:33 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Dec 2022 21:04:06 GMT
Expires: Sun, 04 Dec 2022 21:04:06 GMT
ETag: "ea99b488bc638ed9d948cc660f6b1990e1536bbb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=161&ttfrms=24&bridua=2&tstype=2&eparams=DC4FC%3Dl9EEADTbpTauTau%3E%3A49%3A82%3F%5D%3F6HD%3F6E%3E65%3A2%5D4%40%3ETauDE%40CJTaucfed%60haaTau%40C%3AD92%5CD%40F%3F5%5C2%3F5%5CEFC3F%3D6%3F46D%5C%3D2E6DE%5CEC24%3C%5C3%3ACE952J%5C364%40%3E6D%5C2%5C46CE%3A7%3A65%5CDF%3E%3E6C%5C2%3FE96%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=38&ddur=140&uid=1670141310494361&jsCallback=dvCallback_1670141310494613&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=939&winw=1280&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3296&tgjsver=3296&lvvn=28&m1=13&refD=1&fwc=0&fcl=560&flt=116&fec=1068&fcifrms=6&brh=1&sdf=2&dvp_epl=240&noc=16&nav_pltfrm=Linux%20x86_64&ctx=19955922&cmp=DV451308&btreg=6084843041138400628316&btadsrv=6084843041138400628316&adsrv=104&unit=728x90&seltag=1&sadv=4780307474&ord=3065070954&litm=6084843041&scrt=138400628316&splc=/43459271/nat-desktop/michigannn/web&adu=22253574773&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&t2te=0&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=115670609390.18542&dvp_tukv=65364626.26319323&dvp_uuid=928135403315.9315&dvp_tuid=1599616773331
200 OK 673 B URL HTTP/1.1 tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=161&ttfrms=24&bridua=2&tstype=2&eparams=DC4FC%3Dl9EEADTbpTauTau%3E%3A49%3A82%3F%5D%3F6HD%3F6E%3E65%3A2%5D4%40%3ETauDE%40CJTaucfed%60haaTau%40C%3AD92%5CD%40F%3F5%5C2%3F5%5CEFC3F%3D6%3F46D%5C%3D2E6DE%5CEC24%3C%5C3%3ACE952J%5C364%40%3E6D%5C2%5C46CE%3A7%3A65%5CDF%3E%3E6C%5C2%3FE96%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=38&ddur=140&uid=1670141310494361&jsCallback=dvCallback_1670141310494613&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=939&winw=1280&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3296&tgjsver=3296&lvvn=28&m1=13&refD=1&fwc=0&fcl=560&flt=116&fec=1068&fcifrms=6&brh=1&sdf=2&dvp_epl=240&noc=16&nav_pltfrm=Linux%20x86_64&ctx=19955922&cmp=DV451308&btreg=6084843041138400628316&btadsrv=6084843041138400628316&adsrv=104&unit=728x90&seltag=1&sadv=4780307474&ord=3065070954&litm=6084843041&scrt=138400628316&splc=/43459271/nat-desktop/michigannn/web&adu=22253574773&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&t2te=0&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=115670609390.18542&dvp_tukv=65364626.26319323&dvp_uuid=928135403315.9315&dvp_tuid=1599616773331
IP
File type ASCII text, with very long lines (1169), with no line terminators
Hash 03de4975fb93df78f71e520100362f15
d4fd45c08d1e8bceacabafab6bc561ba612c6da2
b375cc64c1ec85c6793d6c96688aff7b83f23a942540d76c94050a1ea3d73738
GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=161&ttfrms=24&bridua=2&tstype=2&eparams=DC4FC%3Dl9EEADTbpTauTau%3E%3A49%3A82%3F%5D%3F6HD%3F6E%3E65%3A2%5D4%40%3ETauDE%40CJTaucfed%60haaTau%40C%3AD92%5CD%40F%3F5%5C2%3F5%5CEFC3F%3D6%3F46D%5C%3D2E6DE%5CEC24%3C%5C3%3ACE952J%5C364%40%3E6D%5C2%5C46CE%3A7%3A65%5CDF%3E%3E6C%5C2%3FE96%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=38&ddur=140&uid=1670141310494361&jsCallback=dvCallback_1670141310494613&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=939&winw=1280&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3296&tgjsver=3296&lvvn=28&m1=13&refD=1&fwc=0&fcl=560&flt=116&fec=1068&fcifrms=6&brh=1&sdf=2&dvp_epl=240&noc=16&nav_pltfrm=Linux%20x86_64&ctx=19955922&cmp=DV451308&btreg=6084843041138400628316&btadsrv=6084843041138400628316&adsrv=104&unit=728x90&seltag=1&sadv=4780307474&ord=3065070954&litm=6084843041&scrt=138400628316&splc=/43459271/nat-desktop/michigannn/web&adu=22253574773&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&t2te=0&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=115670609390.18542&dvp_tukv=65364626.26319323&dvp_uuid=928135403315.9315&dvp_tuid=1599616773331 HTTP/1.1
Host: tps.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:08:33 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0
Content-Encoding: br
Expires: 12/03/2022 08:08:33
Pragma: no-cache
Vary: Accept-Encoding
cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=9bb4193b96654fd1bfff5e945d95e5ef&dup=&cbust=1670141310956931
302 Moved Temporarily 0 B URL HTTP/1.1 cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=9bb4193b96654fd1bfff5e945d95e5ef&dup=&cbust=1670141310956931
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/?host=tpsc-eu3¶m=akipv6&impid=9bb4193b96654fd1bfff5e945d95e5ef&dup=&cbust=1670141310956931 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://tpsc-eu3.doubleverify.com/event.png?impid=9bb4193b96654fd1bfff5e945d95e5ef&akipv6=&dup=
Date: Sun, 04 Dec 2022 08:08:33 GMT
Connection: keep-alive
tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=117&ttfrms=20&bridua=2&tstype=2&eparams=DC4FC%3Dl9EEADTbpTauTau%3E%3A49%3A82%3F%5D%3F6HD%3F6E%3E65%3A2%5D4%40%3ETauDE%40CJTaucfed%60haaTau%40C%3AD92%5CD%40F%3F5%5C2%3F5%5CEFC3F%3D6%3F46D%5C%3D2E6DE%5CEC24%3C%5C3%3ACE952J%5C364%40%3E6D%5C2%5C46CE%3A7%3A65%5CDF%3E%3E6C%5C2%3FE96%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=14&ddur=16&uid=1670141310822669&jsCallback=dvCallback_1670141310822296&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=939&winw=1280&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3296&tgjsver=3296&lvvn=28&m1=13&refD=1&fwc=0&fcl=577&flt=116&fec=1068&fcifrms=6&brh=1&sdf=2&dvp_epl=240&noc=16&nav_pltfrm=Linux%20x86_64&ctx=19955922&cmp=DV451308&btreg=5616014345138339141194&btadsrv=5616014345138339141194&adsrv=104&unit=1x1&seltag=1&sadv=4876834796&ord=2700321774&litm=5616014345&scrt=138339141194&splc=/43459271/loc-desktop/michigannn/web/promotion14&adu=22307822204&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&t2te=0&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=652201635.2841953&dvp_tukv=40311291355.82047&dvp_uuid=82172996.0500912&dvp_tuid=241008055917
200 OK 672 B URL HTTP/1.1 tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=117&ttfrms=20&bridua=2&tstype=2&eparams=DC4FC%3Dl9EEADTbpTauTau%3E%3A49%3A82%3F%5D%3F6HD%3F6E%3E65%3A2%5D4%40%3ETauDE%40CJTaucfed%60haaTau%40C%3AD92%5CD%40F%3F5%5C2%3F5%5CEFC3F%3D6%3F46D%5C%3D2E6DE%5CEC24%3C%5C3%3ACE952J%5C364%40%3E6D%5C2%5C46CE%3A7%3A65%5CDF%3E%3E6C%5C2%3FE96%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=14&ddur=16&uid=1670141310822669&jsCallback=dvCallback_1670141310822296&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=939&winw=1280&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3296&tgjsver=3296&lvvn=28&m1=13&refD=1&fwc=0&fcl=577&flt=116&fec=1068&fcifrms=6&brh=1&sdf=2&dvp_epl=240&noc=16&nav_pltfrm=Linux%20x86_64&ctx=19955922&cmp=DV451308&btreg=5616014345138339141194&btadsrv=5616014345138339141194&adsrv=104&unit=1x1&seltag=1&sadv=4876834796&ord=2700321774&litm=5616014345&scrt=138339141194&splc=/43459271/loc-desktop/michigannn/web/promotion14&adu=22307822204&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&t2te=0&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=652201635.2841953&dvp_tukv=40311291355.82047&dvp_uuid=82172996.0500912&dvp_tuid=241008055917
IP
File type ASCII text, with very long lines (1169), with no line terminators
Hash d62f2aa9f0686cb08df4d5ba300313f4
bb388d41e6b0a883a3fa14c1e5de13ed6dbb1eee
1f053dfc7ca5596c31039ca390e5baafe59f09b746269b83e7a434f1967c25ba
GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=117&ttfrms=20&bridua=2&tstype=2&eparams=DC4FC%3Dl9EEADTbpTauTau%3E%3A49%3A82%3F%5D%3F6HD%3F6E%3E65%3A2%5D4%40%3ETauDE%40CJTaucfed%60haaTau%40C%3AD92%5CD%40F%3F5%5C2%3F5%5CEFC3F%3D6%3F46D%5C%3D2E6DE%5CEC24%3C%5C3%3ACE952J%5C364%40%3E6D%5C2%5C46CE%3A7%3A65%5CDF%3E%3E6C%5C2%3FE96%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=14&ddur=16&uid=1670141310822669&jsCallback=dvCallback_1670141310822296&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=939&winw=1280&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3296&tgjsver=3296&lvvn=28&m1=13&refD=1&fwc=0&fcl=577&flt=116&fec=1068&fcifrms=6&brh=1&sdf=2&dvp_epl=240&noc=16&nav_pltfrm=Linux%20x86_64&ctx=19955922&cmp=DV451308&btreg=5616014345138339141194&btadsrv=5616014345138339141194&adsrv=104&unit=1x1&seltag=1&sadv=4876834796&ord=2700321774&litm=5616014345&scrt=138339141194&splc=/43459271/loc-desktop/michigannn/web/promotion14&adu=22307822204&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&t2te=0&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=652201635.2841953&dvp_tukv=40311291355.82047&dvp_uuid=82172996.0500912&dvp_tuid=241008055917 HTTP/1.1
Host: tps.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 08:08:33 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=0
Content-Encoding: br
Expires: 12/03/2022 08:08:33
Pragma: no-cache
Vary: Accept-Encoding
cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=dbb9772920ba40c2ab1b4879c42e7a59&dup=&cbust=1670141311030541
302 Moved Temporarily 0 B URL HTTP/1.1 cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=dbb9772920ba40c2ab1b4879c42e7a59&dup=&cbust=1670141311030541
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/?host=tpsc-eu3¶m=akipv6&impid=dbb9772920ba40c2ab1b4879c42e7a59&dup=&cbust=1670141311030541 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://tpsc-eu3.doubleverify.com/event.png?impid=dbb9772920ba40c2ab1b4879c42e7a59&akipv6=&dup=
Date: Sun, 04 Dec 2022 08:08:33 GMT
Connection: keep-alive
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 311774978a084d87ea6dc63e4b4dbf71
8cd35225f1cab875824f5bd2cb8d1f022c7bccb7
5d08960b0b5d331d74a4ece995ec62451f1fdd00a1c699804d6dfe4469081408
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Dec 2022 08:08:33 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Dec 2022 22:36:23 GMT
Expires: Sun, 04 Dec 2022 22:36:23 GMT
ETag: "8cd35225f1cab875824f5bd2cb8d1f022c7bccb7"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cf8fa41ef602ae70ffca585b472e5a48
ee82688bae8ec454aefccccd51259d5efb26915c
f4b30ab9f60cbb23f30a89cd2161530019d664541ee595021b3031d91ff7289d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cf8fa41ef602ae70ffca585b472e5a48
ee82688bae8ec454aefccccd51259d5efb26915c
f4b30ab9f60cbb23f30a89cd2161530019d664541ee595021b3031d91ff7289d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cf8fa41ef602ae70ffca585b472e5a48
ee82688bae8ec454aefccccd51259d5efb26915c
f4b30ab9f60cbb23f30a89cd2161530019d664541ee595021b3031d91ff7289d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cf8fa41ef602ae70ffca585b472e5a48
ee82688bae8ec454aefccccd51259d5efb26915c
f4b30ab9f60cbb23f30a89cd2161530019d664541ee595021b3031d91ff7289d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.ampproject.org/rtv/012211060024000/amp4ads-v0.mjs
200 OK 62 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/amp4ads-v0.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (65008)
Hash 190bcb4c44fd9e0e93baa80c9b2535b8
97bda56ddc8d6a00d19e1747d63325051f3fd144
b7677f820f06329e357561f570729fe4110af4ac5fb741b97567e20a0f533301
GET /rtv/012211060024000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61592
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:08:55 GMT
expires: Tue, 28 Nov 2023 18:08:55 GMT
cache-control: public, max-age=31536000
age: 482378
etag: "a2fca7132416d151"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012211060024000/v0/amp-form-0.1.mjs
200 OK 13 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-form-0.1.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (41057)
Hash 2f873064835eed23708bde2a16830216
7559437b82b9b761e02549d8d51f9e3571e5ed2c
0f5d00ac674cc34652997f2e0dd7fb6eb1a5b22010989c35a81cd7a388c84fdd
GET /rtv/012211060024000/v0/amp-form-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://michigan.newsnetmedia.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 12946
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:08:55 GMT
expires: Tue, 28 Nov 2023 18:08:55 GMT
cache-control: public, max-age=31536000
age: 482378
etag: "0bacd3f1ce38a7db"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012211060024000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14697)
Hash ae1a9f090984c448deb0629cc2304ee3
e601825ccec746695f370ed68fa33325152e0d9f
6a947bfcdeea64faa6c795caea11ee09dbe00f5d4003b7b9d47e4945c05ac1e4
GET /rtv/012211060024000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://michigan.newsnetmedia.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5218
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 10:51:50 GMT
expires: Wed, 29 Nov 2023 10:51:50 GMT
cache-control: public, max-age=31536000
age: 422203
etag: "abd4378f71571d78"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012211060024000/v0/amp-analytics-0.1.mjs
200 OK 29 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-analytics-0.1.mjs
IP
File type ASCII text, with very long lines (65534)
Hash c88b4e73b12307e42222d337bdd646a2
621233bf4e777b2d44b1bc143187111aca2fe718
ef6935537cd5a603b79bc98d4274b70ee5608955792523fc58e818c8ddbb7b48
GET /rtv/012211060024000/v0/amp-analytics-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://michigan.newsnetmedia.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 28809
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:08:55 GMT
expires: Tue, 28 Nov 2023 18:08:55 GMT
cache-control: public, max-age=31536000
age: 482378
etag: "dd6615029de85e23"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012211060024000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5046)
Hash 669c8592ef8f63e7404e45dd6ca56b71
3f6753966361bb86594193009c9097612c361064
d174ae2c0722ab8d4bf736f0200dc5b15d288f9500a706bb161b64f5a3b74f01
GET /rtv/012211060024000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://michigan.newsnetmedia.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1913
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:08:55 GMT
expires: Tue, 28 Nov 2023 18:08:55 GMT
cache-control: public, max-age=31536000
age: 482378
etag: "403438c4d550ee88"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
router.infolinks.com/gsd?evt=afterGSD&pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&jsv=1833.007-3.025&_cb=16701413086030
200 OK 2.1 kB URL HTTP/2 router.infolinks.com/gsd?evt=afterGSD&pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&jsv=1833.007-3.025&_cb=16701413086030
IP
Hash 6f29a7b282c76ea0a0eb90f3443ba58d
986a5820e3ec6a6ddded0bb83feaad14c69fa0e0
f635fe4747f92c01bf60277f862f243c2f729d195c49af77b172d44d68cf91a7
GET /gsd?evt=afterGSD&pid=3330955&wsid=0&pdom=michigan.newsnetmedia.com&purl=https%3A%2F%2Fmichigan.newsnetmedia.com%2Fstory%2F47651922%2Forisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem&jsv=1833.007-3.025&_cb=16701413086030 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/javascript;charset=UTF-8
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: max-age=0
p3p: CP="NON DSP NID OUR COR"
set-cookie: cuid=a6394e27-2ed8-4839-bde7-9bfecf6273e4; Domain=infolinks.com; Expires=Tue, 03-Dec-2024 08:08:31 GMT; Path=/; SameSite=None; Secure
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77430dfd6e97b4ee-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cf8fa41ef602ae70ffca585b472e5a48
ee82688bae8ec454aefccccd51259d5efb26915c
f4b30ab9f60cbb23f30a89cd2161530019d664541ee595021b3031d91ff7289d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 08:08:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpsc-eu3.doubleverify.com/event.png?impid=dbb9772920ba40c2ab1b4879c42e7a59&akipv6=&dup=
204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=dbb9772920ba40c2ab1b4879c42e7a59&akipv6=&dup=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event.png?impid=dbb9772920ba40c2ab1b4879c42e7a59&akipv6=&dup= HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://michigan.newsnetmedia.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Sun, 04 Dec 2022 08:08:33 GMT
Connection: close
Cache-Control: max-age=0
Expires: 12/03/2022 08:08:33
Pragma: no-cache
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash bc956d5a731c3719979c671445d7afc9
3af604307f19fe6b47bd3884845a6511a43ef419
b06dff90bfe44aff6ccc8ec8b879f36433a3c0504f6eb5b12939d16dec06fda9
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Dec 2022 08:08:33 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Dec 2022 21:11:14 GMT
Expires: Sun, 04 Dec 2022 21:11:14 GMT
ETag: "3af604307f19fe6b47bd3884845a6511a43ef419"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsschtcqGNoDXUw-L-iHUVwGT8CpxWsmY96GXr74cLsYz_N5x01tSArGPLCBsJzSfdUjlt6bUHFdMdpB_q2MKjF95XbMaLqH0uDWkwXp3eRGHxTO-QCgCY46jm1JnX70-FliSAnRo06b7DGXALQTu5RZTAprUyvUYqEj7kc5KN0Gq_KeRVNXJkcj8nND7c4Hvb9aKhSjTEv5P981rXpU9LrMuMQnJ5jBhNbU8im2Fy1Or7qAbSECLbIJ4N3W384L5KE4nGxXDgRwOAfevP0izGHMkiYr5ahnuJGHk_A0FLglpV8ojyn_9PXsWQta2rVOo9nRGGWxJm4HvS64b4cD61elmUOY_PJD-7t0KSdWbnu2UDrpgwfRVU5qUg&sai=AMfl-YSQQTZkaknF8UYugWGr4uHj9LVg0ewvziOAI9UGjDYWuZx-dTtQiObch4wRke4uEAIIRRFQXyWwWTGcRheMXsgeUjIAd1L6QpQsf93B3Wa-CEV_c6esGXjRyKk2Yh_sNFLP9GwvRwNZ6UrlYTzQRTQ&sig=Cg0ArKJSzJhAXabcAa0CEAE&uach_m=[UACH]&urlfix=1&adurl=
200 OK 0 B URL HTTP/2 securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsschtcqGNoDXUw-L-iHUVwGT8CpxWsmY96GXr74cLsYz_N5x01tSArGPLCBsJzSfdUjlt6bUHFdMdpB_q2MKjF95XbMaLqH0uDWkwXp3eRGHxTO-QCgCY46jm1JnX70-FliSAnRo06b7DGXALQTu5RZTAprUyvUYqEj7kc5KN0Gq_KeRVNXJkcj8nND7c4Hvb9aKhSjTEv5P981rXpU9LrMuMQnJ5jBhNbU8im2Fy1Or7qAbSECLbIJ4N3W384L5KE4nGxXDgRwOAfevP0izGHMkiYr5ahnuJGHk_A0FLglpV8ojyn_9PXsWQta2rVOo9nRGGWxJm4HvS64b4cD61elmUOY_PJD-7t0KSdWbnu2UDrpgwfRVU5qUg&sai=AMfl-YSQQTZkaknF8UYugWGr4uHj9LVg0ewvziOAI9UGjDYWuZx-dTtQiObch4wRke4uEAIIRRFQXyWwWTGcRheMXsgeUjIAd1L6QpQsf93B3Wa-CEV_c6esGXjRyKk2Yh_sNFLP9GwvRwNZ6UrlYTzQRTQ&sig=Cg0ArKJSzJhAXabcAa0CEAE&uach_m=[UACH]&urlfix=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsschtcqGNoDXUw-L-iHUVwGT8CpxWsmY96GXr74cLsYz_N5x01tSArGPLCBsJzSfdUjlt6bUHFdMdpB_q2MKjF95XbMaLqH0uDWkwXp3eRGHxTO-QCgCY46jm1JnX70-FliSAnRo06b7DGXALQTu5RZTAprUyvUYqEj7kc5KN0Gq_KeRVNXJkcj8nND7c4Hvb9aKhSjTEv5P981rXpU9LrMuMQnJ5jBhNbU8im2Fy1Or7qAbSECLbIJ4N3W384L5KE4nGxXDgRwOAfevP0izGHMkiYr5ahnuJGHk_A0FLglpV8ojyn_9PXsWQta2rVOo9nRGGWxJm4HvS64b4cD61elmUOY_PJD-7t0KSdWbnu2UDrpgwfRVU5qUg&sai=AMfl-YSQQTZkaknF8UYugWGr4uHj9LVg0ewvziOAI9UGjDYWuZx-dTtQiObch4wRke4uEAIIRRFQXyWwWTGcRheMXsgeUjIAd1L6QpQsf93B3Wa-CEV_c6esGXjRyKk2Yh_sNFLP9GwvRwNZ6UrlYTzQRTQ&sig=Cg0ArKJSzJhAXabcAa0CEAE&uach_m=[UACH]&urlfix=1&adurl= HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://michigan.newsnetmedia.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 08:08:33 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 04-Dec-2022 08:23:33 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sun, 04 Dec 2022 08:08:33 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash f98527bc7b21f9ae852db2170b740124
757adfd1831628295cd842ce15975dddf5db22cf
b6c3c4083be6edccce39d4727413202113757273fd5f9275afd5a17dc39a73dd
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Dec 2022 08:08:33 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Dec 2022 19:29:06 GMT
Expires: Sun, 04 Dec 2022 19:29:06 GMT
ETag: "757adfd1831628295cd842ce15975dddf5db22cf"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/si?st=NO_DATA HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 08:08:33 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: DSID=NO_DATA; expires=Sun, 04-Dec-2022 09:08:33 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sun, 04 Dec 2022 08:08:33 GMT
cache-control: private
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js
IP
GET /bootstrap/3.3.6/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:25 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 11/05/2021 16:36:29
cdn-edgestorageid: 722
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.0
cdn-requestid: bfa40aed2fbee600eecd4f43bc8c0656
cdn-cache: HIT
cf-cache-status: HIT
age: 15585449
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77430dda5ffb0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Barlow
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Barlow
IP
GET /css?family=Barlow HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 08:08:26 GMT
date: Sun, 04 Dec 2022 08:08:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
200 OK 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
IP
GET /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/html
cf-ray: 77430dfc299ab4ed-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rZlkm3Ni9B0UzvSss6zo3g7NHG105xk9Lja37QByitiMfGIphR%2BaBGhyI3C9yyQYiaxfnBXpTWWOd0UoILE12fH2V9rnx5YOLPeHKHSvTZRPYvNScvVVtNXV7MfhgDgbPqOGdt%2BxedWuuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 0 B URL HTTP/2 michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
Analyzer Verdict Alert fortinet Phishing
GET /story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:25 GMT
content-type: text/html; charset=utf-8
cf-ray: 77430dd6ff41b50f-OSL
cache-control: public, max-age=120
expires: Sun, 04 Dec 2022 08:10:25 GMT
vary: Accept-Encoding
cf-cache-status: HIT
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 583ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[1].cols[1].components[2],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 0 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[1].cols[1].components[2],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
GET /api/componentInstances/routes[11].body[1].cols[1].components[2],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
cf-ray: 77430de86b68b50f-OSL
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"49fb2-Is9vr/ASY2Nrm5KHpdL3zn90Iu8"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 170ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[0].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
200 OK 0 B URL HTTP/2 michigan.newsnetmedia.com/api/componentInstances/routes[11].body[3].cols[0].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
IP
GET /api/componentInstances/routes[11].body[3].cols[0].components[1],/resources?id=47651922&slug=orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem HTTP/1.1
Host: michigan.newsnetmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/story/47651922/orisha-sound-and-turbulences-latest-track-birthday-becomes-a-certified-summer-anthem
Cookie: _lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:28 GMT
content-type: application/json; charset=utf-8
cf-ray: 77430de87b72b50f-OSL
cache-control: public, max-age=180
content-encoding: gzip
etag: W/"49fb2-Is9vr/ASY2Nrm5KHpdL3zn90Iu8"
expires: Sun, 04 Dec 2022 08:11:28 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-response-time: 114ms
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: cloudflare
X-Firefox-Spdy: h2
ftpcontent.worldnow.com/platform-files/plugins/can-autoplay.3.0.0-1.js
200 OK 0 B URL HTTP/2 ftpcontent.worldnow.com/platform-files/plugins/can-autoplay.3.0.0-1.js
IP
GET /platform-files/plugins/can-autoplay.3.0.0-1.js HTTP/1.1
Host: ftpcontent.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:29 GMT
content-type: application/x-javascript
x-amz-id-2: R3PEplJ9klxePZ71+4vOt37CpBgZmwmPnY8qQpOQSJm10Jbp2XevK6jxbiCDjhqkW+YGL7jKHHU=
x-amz-request-id: 0YSC97Y6BETYP9VE
x-amz-meta-user-agent: AWSTransfer
x-amz-meta-user-agent-id: professionalservices@s-d08b37440bfd4618b
last-modified: Mon, 28 Oct 2019 19:35:47 GMT
etag: W/"cee92fb89ab4f849569bd1354aeb4618"
cf-cache-status: HIT
age: 25
expires: Sun, 04 Dec 2022 08:13:29 GMT
cache-control: public, max-age=300
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430dee7988b51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ftpcontent.worldnow.com/professionalservices/smartbanner/smartbanner.css
200 OK 0 B URL HTTP/2 ftpcontent.worldnow.com/professionalservices/smartbanner/smartbanner.css
IP
GET /professionalservices/smartbanner/smartbanner.css HTTP/1.1
Host: ftpcontent.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:26 GMT
content-type: text/css
x-amz-id-2: 93U4p71qrM90mHw5uyZKE+M+OufNhf4JzStnKU7fqwoP2TwmQAiUDDVADH+K0uAkSppCkoFSaOk=
x-amz-request-id: Z0HP9X7EJWD9BVG7
last-modified: Thu, 02 Apr 2020 19:54:48 GMT
etag: W/"c6e7084cc4c663171b50149e860cf36f"
cf-cache-status: REVALIDATED
expires: Sun, 04 Dec 2022 08:13:26 GMT
cache-control: public, max-age=300
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430ddc2afcb51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D
408 Request Time-out 0 B URL HTTP/1.0 sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D
IP
GET /us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D HTTP/1.1
Host: sync.go.sonobi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
Connection: close
Content-Type: text/html
ftpcontent.worldnow.com/professionalservices/smartbanner/smartbanner.js
200 OK 0 B URL HTTP/2 ftpcontent.worldnow.com/professionalservices/smartbanner/smartbanner.js
IP
GET /professionalservices/smartbanner/smartbanner.js HTTP/1.1
Host: ftpcontent.worldnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:26 GMT
content-type: application/javascript
x-amz-id-2: 3EF/hXu8Hxt4fDk3vmhZb4+w5ZDV7QsIm9cgOP/VkA+bbb7Q8M8BQ+xBFxxlmrAYQ0KBMg45qt4=
x-amz-request-id: Z0HRGK2MXDQ5QEE5
last-modified: Thu, 02 Apr 2020 19:54:48 GMT
etag: W/"ffab7b7bf646b78a6ebb75a7932c7dad"
cf-cache-status: HIT
expires: Sun, 04 Dec 2022 08:13:26 GMT
cache-control: public, max-age=300
vary: Accept-Encoding
server: cloudflare
cf-ray: 77430ddaf97fb51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/infolinks?zcc=1&cb=1670141311278
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/infolinks?zcc=1&cb=1670141311278
IP
GET /usersync2/infolinks?zcc=1&cb=1670141311278 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 04 Dec 2022 08:08:31 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://router.infolinks.com/dyn/r1-usync?uid=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
IP
GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://michigan.newsnetmedia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 08:08:25 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"2f624089c65f12185e79925bc5a7fc42"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 02/17/2022 20:27:53
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 860
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 441a5c346e6138207e493340368ec0b9
cdn-cache: HIT
cf-cache-status: HIT
age: 15587666
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77430dd9afa40b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
54.145.205.131
104.18.23.171
95.101.11.115
34.247.76.184
213.19.147.45
35.157.8.11
185.83.142.19