r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14260
Expires: Wed, 22 Mar 2023 23:12:15 GMT
Date: Wed, 22 Mar 2023 19:14:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65fc860bc043f3fb83bdc3debdcd322d
418010755deae099ef1284e402813c5837a10f42
d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2247
Expires: Wed, 22 Mar 2023 19:52:02 GMT
Date: Wed, 22 Mar 2023 19:14:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Mar 2023 18:27:30 GMT
content-type: application/json
age: 2825
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a5d4696a6090c295850554508b51ce
c44e143c2223546e64b19f543b8101aaf3b11e97
8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8559
Expires: Wed, 22 Mar 2023 21:37:14 GMT
Date: Wed, 22 Mar 2023 19:14:35 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: voSGvQ9mIzP26wkcyBxuyfOrxzvXLJfbkCr9GIMwFYVqMWKNDJC8GjPrXXXuAaTHkxn2maSTt5o=
x-amz-request-id: 5B3DZJ6V9X9K7C5J
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Mar 2023 18:59:38 GMT
age: 897
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 19:14:35 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
track.ecampaignstats.com/lprd/trk.php
302 Found 0 B URL HTTP/1.1 track.ecampaignstats.com/lprd/trk.php
IP
ASN #394844 ROOT-LEVEL-TECHNOLOGY
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lprd/trk.php HTTP/1.1
Host: track.ecampaignstats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 22 Mar 2023 19:14:35 GMT
Server: Apache/2.4.52 (Debian)
Location: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content=&utm_term=
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content=&utm_term=
301 Moved Permanently 20 B URL HTTP/1.1 www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content=&utm_term=
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content=&utm_term= HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Location: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
Last-Modified: Wed, 22 Mar 2023 19:14:31 GMT
Expires: Wed, 22 Mar 2023 20:14:31 GMT
Pragma: public
Cache-Control: max-age=3595, public
ETag: "7029066c27ac6f5ef18d660d5741979a"
Content-Encoding: gzip
Vary: Accept-Encoding,User-Agent
Content-Length: 20
Content-Type: text/html; charset=UTF-8
Via: 1.1 google
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Mar 2023 19:14:33 GMT
age: 3
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 050ca4dc2182e0a27573b0d9f32b7834
bec14dc5af0d0b32210470673511acd8db404308
b6129b9d1848f75265dca4446c5399927bdaf15c7b49c083765847b0fe276eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7591
Expires: Wed, 22 Mar 2023 21:21:07 GMT
Date: Wed, 22 Mar 2023 19:14:36 GMT
Connection: keep-alive
www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
200 OK 15 kB URL HTTP/1.1 www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash c09048420c3b48941167ce0547c8a6e2
bb2b1f81c96d1887a856ce492606ba7cc54eeb0d
38486794c4b0c4f926a68a14629cd5adf2eaa3726270de7f8ee4eca7254960fc
GET /?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Wed, 22 Mar 2023 18:44:58 GMT
Pragma: public
ETag: "c09048420c3b48941167ce0547c8a6e2"
Content-Encoding: gzip
Vary: Accept-Encoding,User-Agent
Content-Type: text/html; charset=UTF-8
Via: 1.1 google
Cache-Control: max-age=1822,public
Transfer-Encoding: chunked
www.newsandpromotions.com/wp-content/themes/magazine-pro/style.css?ver=3.1
200 OK 7.8 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/themes/magazine-pro/style.css?ver=3.1
IP
File type ASCII text, with very long lines (1783)
Hash 62788bc8b4ac3467cf8c92d16d3486ca
b4445f07319e971698c8c599e28a386cbcf536e1
3b83991a52832d324831f4b49cf3c3a784a2da599063cb474e5312b71b11f846
GET /wp-content/themes/magazine-pro/style.css?ver=3.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 7771
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:40:03 GMT
Age: 2073
Last-Modified: Mon, 29 Aug 2022 12:36:58 GMT
ETag: "aa26-5e76085030e80-gzip"
Content-Type: text/css
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.2
200 OK 972 B URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.2
IP
Hash 8bf268dfcca7cb20719b7ea14373ef4a
58bd839bbf0e8cc082f0a488b538b4ec71bebd2e
eece4a14939273c7af07bce8bab3a6cfc2c9de44c0eea82cc886abac13cb3870
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.2 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 972
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:38:04 GMT
Age: 2192
Last-Modified: Mon, 29 Aug 2022 13:14:18 GMT
ETag: "aab-5e7610a86be80-gzip"
Content-Type: text/css
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/m-wp-popup/css/popup-styles.css?ver=1.0
200 OK 1.9 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/m-wp-popup/css/popup-styles.css?ver=1.0
IP
Hash e8959c24dbe5a45744af288f9ff0f7e0
91fa49535c770697985e06a2ade004977b578c2c
7444568ab19d9d35b8876eff1fb3818b8d21634e764738204bee2ca0bb81eea9
GET /wp-content/plugins/m-wp-popup/css/popup-styles.css?ver=1.0 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 1875
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:40:14 GMT
Last-Modified: Mon, 29 Aug 2022 12:36:58 GMT
ETag: "1bdc-5e76085030e80-gzip"
Content-Type: text/css
Vary: Accept-Encoding
Age: 2062
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.1
200 OK 12 kB URL HTTP/1.1 www.newsandpromotions.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.1
IP
File type ASCII text, with very long lines (43771)
Hash e5548800176e913a9084f47a3e1e04f6
eff4604acc5c26ae82a19188de2f98bf5b79d80c
a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 11681
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:33:38 GMT
Age: 2458
Last-Modified: Wed, 17 Aug 2022 12:20:12 GMT
ETag: "15b64-5e66ee2f43700-gzip"
Content-Type: text/css
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/genesis-responsive-slider/assets/style.css?ver=1.0.1
200 OK 1.5 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/genesis-responsive-slider/assets/style.css?ver=1.0.1
IP
Hash baa280ba652ff315f49d25fde759ce8c
60bdf95b25ba644119f8c8c0bd507e83d18fe313
db6c7ba05ae612626911da903629b251115127d8c413ab9f7b7f9b8e49c254da
GET /wp-content/plugins/genesis-responsive-slider/assets/style.css?ver=1.0.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 1470
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:40:17 GMT
Last-Modified: Mon, 29 Aug 2022 13:18:47 GMT
ETag: "1066-5e7611a8f5bc0-gzip"
Content-Type: text/css
Vary: Accept-Encoding
Age: 2059
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/css/sfsi-style.css?ver=3.5.1
200 OK 15 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/css/sfsi-style.css?ver=3.5.1
IP
File type ASCII text, with CRLF line terminators
Hash a8f50bce699e88944d946862d94fd5cf
156fca342a4be8e956bb1d0ada646146c4631a0d
65a5423ebde85b72a97a1bacff94b6f375a96dd95039b98e7a534dae20a67271
GET /wp-content/plugins/ultimate-social-media-plus/css/sfsi-style.css?ver=3.5.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 14652
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:35:16 GMT
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "19115-5e760ff6159c0-gzip"
Content-Type: text/css
Vary: Accept-Encoding
Age: 2360
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-includes/css/dashicons.min.css?ver=6.0.1
200 OK 36 kB URL HTTP/1.1 www.newsandpromotions.com/wp-includes/css/dashicons.min.css?ver=6.0.1
IP
File type ASCII text, with very long lines (58981)
Hash 00492d322e5572c7abc3e8701b6c52c1
0802ac2c8280ce7c98af881b1d49ec682acbf314
8bc01632cbc3ab834e04141d444ff82b05a4691444d70a9860477710e330b824
GET /wp-includes/css/dashicons.min.css?ver=6.0.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 35730
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:55:18 GMT
Last-Modified: Wed, 17 Aug 2022 12:20:12 GMT
ETag: "e688-5e66ee2f43700-gzip"
Content-Type: text/css
Vary: Accept-Encoding
Age: 1158
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/css/disable_sfsi.css?ver=6.0.1
200 OK 93 B URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/css/disable_sfsi.css?ver=6.0.1
IP
File type ASCII text, with CRLF line terminators
Hash 8544c5733382fa68cb14455d8ad0a3ff
22220e847e614e2405975a7f65732ea8ec478633
9284dea1753fc3f5c5a46cfdacbad17087df6e179cf2a40d96df454d5cd5f74d
GET /wp-content/plugins/ultimate-social-media-plus/css/disable_sfsi.css?ver=6.0.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 93
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:40:17 GMT
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "4e-5e760ff6159c0-gzip"
Content-Type: text/css
Vary: Accept-Encoding
Age: 2059
Cache-Control: public,max-age=3600
fonts.googleapis.com/css?family=Roboto%3A300%2C400%7CRaleway%3A400%2C500%2C900&ver=3.1
200 OK 729 B URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto%3A300%2C400%7CRaleway%3A400%2C500%2C900&ver=3.1
IP
Hash b79489dd57e93c021e1d65fde195f080
6a8f970d42b5932c5001ab9b155317cabb6b30ef
dbba7e3c612104f334b16d8e1ca1a904bd7c797c8157945187f719f3e0abc1bb
GET /css?family=Roboto%3A300%2C400%7CRaleway%3A400%2C500%2C900&ver=3.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 22 Mar 2023 19:14:36 GMT
Date: Wed, 22 Mar 2023 19:14:36 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
tags.clickagy.com/data.js?rnd=5a7223b9ea03d
301 Moved Permanently 0 B URL HTTP/1.1 tags.clickagy.com/data.js?rnd=5a7223b9ea03d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /data.js?rnd=5a7223b9ea03d HTTP/1.1
Host: tags.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 22 Mar 2023 19:14:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 22 Mar 2023 20:14:36 GMT
Location: https://tags.clickagy.com/data.js?rnd=5a7223b9ea03d
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac0c23409c0b524-OSL
alt-svc: h2=":443"; ma=60
www.newsandpromotions.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 www.newsandpromotions.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Wed, 17 Aug 2022 12:20:12 GMT
ETag: "2bd8-5e66ee2f43700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 4169
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 31 kB URL HTTP/1.1 www.newsandpromotions.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 9640915738503451aa21181699feab5b
c053eaf36ef0da96619706b3abda326305063bd6
f8834e669ad1f4039442c26aaa373ec39c35a233b9786d374fc3f670f16b0adc
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Wed, 17 Aug 2022 12:20:12 GMT
ETag: "15db1-5e66ee2f43700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 30908
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-content/plugins/advanced-ads/public/assets/js/advanced.min.js?ver=1.35.1
200 OK 2.5 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/advanced-ads/public/assets/js/advanced.min.js?ver=1.35.1
IP
File type ASCII text, with very long lines (7187), with no line terminators
Hash 2f3ef429b9c2572bbbcaebc51c08f773
8fc6e050cf13b0f60fe950843b3abdedc35f62c8
d6617f504d115075b9944e9d939fa2df521f40036f77d825567b43740fa8fd0c
GET /wp-content/plugins/advanced-ads/public/assets/js/advanced.min.js?ver=1.35.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 13:13:19 GMT
ETag: "1c13-5e761070279c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 2547
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-content/themes/magazine-pro/js/entry-date.js?ver=1.0.0
200 OK 238 B URL HTTP/1.1 www.newsandpromotions.com/wp-content/themes/magazine-pro/js/entry-date.js?ver=1.0.0
IP
File type ASCII text, with CRLF, CR line terminators
Hash 9189d2cd8683d69ebfcc54ded48b0290
814efa08db55b511c39343d87a645144ba918725
35e0e8422be99faaa330f6906a9af741de840c3b9da85203906f0f251d4391eb
GET /wp-content/themes/magazine-pro/js/entry-date.js?ver=1.0.0 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 12:36:58 GMT
ETag: "17c-5e76085030e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 238
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-content/themes/magazine-pro/js/responsive-menu.js?ver=1.0.0
200 OK 339 B URL HTTP/1.1 www.newsandpromotions.com/wp-content/themes/magazine-pro/js/responsive-menu.js?ver=1.0.0
IP
Hash 5e6c107b2464d43a3477b1ed9c5c5708
e637405a68c69ee5ba2fc959532f3c8478567b56
678eb59f05f37b3098442f3e6723bf8a8bb884583d35d113c62a1c0dc801653c
GET /wp-content/themes/magazine-pro/js/responsive-menu.js?ver=1.0.0 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 12:36:58 GMT
ETag: "363-5e76085030e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 339
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.1
200 OK 5.0 kB URL HTTP/1.1 www.newsandpromotions.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.1
IP
File type ASCII text, with very long lines (15660)
Hash e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Wed, 17 Aug 2022 12:20:12 GMT
ETag: "48b9-5e66ee2f43700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 5009
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.5 kB URL HTTP/1.1 www.newsandpromotions.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
File type ASCII text, with very long lines (6475), with no line terminators
Hash 27cbbd0a9d7c5ad9402118c4afc36035
7659d08a005f5ecfa6c779e3cda45c30007fd059
ebc771d0af626966e38535357861fab0090e0bd7ff346cbe3c7ffdde1683809f
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Wed, 17 Aug 2022 12:20:12 GMT
ETag: "194b-5e66ee2f43700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 2457
Content-Type: application/x-javascript
Via: 1.1 google
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rjKKkEYu1wrgR7yLY3kLkA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: if88wFl5o8sil6MIbQJ2vlPLmy8=
www.newsandpromotions.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.2
200 OK 6.6 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.2
IP
File type ASCII text, with very long lines (21905), with no line terminators
Hash 38b247e8125da1a0dd504e02d8b6d2b7
2fbec20b65e15f0fa6355281036f00374dc9a1c2
52b2b12cee3c2999c8f2af3664c060144e0f8dba790602846584a1bd42442c82
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.2 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 13:14:18 GMT
ETag: "5591-5e7610a86be80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 6564
Content-Type: application/x-javascript
Via: 1.1 google
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 22 Mar 2023 18:05:14 GMT
Expires: Thu, 21 Mar 2024 18:05:14 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 11 May 2022 19:24:48 GMT
Content-Type: font/woff2
Age: 4163
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15740
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 22 Mar 2023 18:05:31 GMT
Expires: Thu, 21 Mar 2024 18:05:31 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 11 May 2022 19:24:56 GMT
Content-Type: font/woff2
Age: 4146
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/1.1 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 46524
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 22 Mar 2023 17:34:44 GMT
Expires: Thu, 21 Mar 2024 17:34:44 GMT
Cache-Control: public, max-age=31536000
Age: 5993
Last-Modified: Mon, 18 Jul 2022 19:58:01 GMT
Content-Type: font/woff2
www.newsandpromotions.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 7.1 kB URL HTTP/1.1 www.newsandpromotions.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash 2f4fcc5a628b379672d76b7e91cbdf07
9d72f2c9cbc1e9b036360acfce8c8ccc8b832b8c
a360f715a418026d2e1acd81c02c83233d0c0b60fdf4ce0b4d33562925d6a0b5
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Wed, 17 Aug 2022 12:20:12 GMT
ETag: "4ac6-5e66ee2f43700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 7095
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/icons_theme/default/default_fb.png
200 OK 1.0 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/icons_theme/default/default_fb.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 4111c678af8ac22f429dc8c866ed32cc
cf88ac5bd04e17e56a28040e27b5a57656e3c970
9ddd8b79f5c9e1dc6cc2223cbe200e8ac027401a099f2ea68c6777a59f794c78
GET /wp-content/plugins/ultimate-social-media-plus/images/icons_theme/default/default_fb.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 1000
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:11:12 GMT
Age: 7405
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "3e8-5e760ff6159c0"
Content-Type: image/png
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 6.9 kB URL HTTP/1.1 www.newsandpromotions.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 7e2b78a6e8a9b90385330755ee1cf3e5
684c325f39d45e42ae44a9e42f5e9fe4fb0b909c
43f124dabb4bc663cc1cc8d3161c1e6365cf8445d873ed5d69bbfdb507cf24a9
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Wed, 17 Aug 2022 12:20:12 GMT
ETag: "50eb-5e66ee2f43700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 6914
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/js/shuffle/modernizr.custom.min.js?ver=6.0.1
200 OK 1.5 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/js/shuffle/modernizr.custom.min.js?ver=6.0.1
IP
File type HTML document, ASCII text, with very long lines (2861), with CRLF line terminators
Hash 89b09e7949c84785295ba10ec9a7b221
07d9364fab4325c9aa57dcb34a13e1fc257fda70
7e28285d9ee6c93786cb59bf8a7e21f6af82fa04ec4d45dd220807b374ffce7f
GET /wp-content/plugins/ultimate-social-media-plus/js/shuffle/modernizr.custom.min.js?ver=6.0.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "c07-5e760ff6159c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 1493
Content-Type: application/x-javascript
Via: 1.1 google
c.fqtag.com/tag/implement-r.js?org=9Xf4JS6qIDnMDOaZ0z86&fmt=banner&rt=click&sl=1&fq=1&p=&a=&cmp=nap
200 OK 2.6 kB URL HTTP/1.1 c.fqtag.com/tag/implement-r.js?org=9Xf4JS6qIDnMDOaZ0z86&fmt=banner&rt=click&sl=1&fq=1&p=&a=&cmp=nap
IP
File type ASCII text, with very long lines (2644), with no line terminators
Hash d3cf9de08e041a4e68216d88e0f027c8
1ad670fa5524765ce3027fd794f2a7b59a14b59d
f4e2c1522db545a7ed0c9a5fffd09b0e8b8166b48f77af2ae5436034a1338e7f
GET /tag/implement-r.js?org=9Xf4JS6qIDnMDOaZ0z86&fmt=banner&rt=click&sl=1&fq=1&p=&a=&cmp=nap HTTP/1.1
Host: c.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
X-XSS-Protection: 0
Pragma: no-cache
Date: Wed, 22 Mar 2023 19:14:36 GMT
Access-Control-Allow-Origin: *
Content-Type: application/javascript
Content-Length: 2644
Via: 1.1 google
www.newsandpromotions.com/wp-content/uploads/2016/12/newspromotions-1.png
200 OK 4.5 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2016/12/newspromotions-1.png
IP
File type PNG image data, 380 x 90, 8-bit colormap, non-interlaced\012- data
Hash f5ead7ade67fa940b01008f1f2df4ce2
479e6ebdf0ce7e3345f70ca3e78c0c9398f76e64
5c61ddd4f7ab45d1ca4f263ae05f6814284e8e13d39f7acd4df221a2c1202d90
GET /wp-content/uploads/2016/12/newspromotions-1.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 4511
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:55:19 GMT
Age: 1158
Last-Modified: Fri, 02 Dec 2016 16:33:23 GMT
ETag: "119f-542af7f1efac0"
Content-Type: image/png
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
static.newsmaxfeednetwork.com/web-clients/bootloaders/pFg9zW6WBjmNhMya4E8VGa/bootloader.js
200 OK 9 B URL HTTP/1.1 static.newsmaxfeednetwork.com/web-clients/bootloaders/pFg9zW6WBjmNhMya4E8VGa/bootloader.js
IP
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /web-clients/bootloaders/pFg9zW6WBjmNhMya4E8VGa/bootloader.js HTTP/1.1
Host: static.newsmaxfeednetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 22 Mar 2023 19:14:36 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 9
Connection: keep-alive
X-RC-Region: us-east-1a
x-powered-by: Express
cache-control: public, max-age=300
etag: W/"9-CUt2O0z8wLBeXQQFgc1RPDyggGc"
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/icons_theme/default/default_twitter.png
200 OK 1.2 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/icons_theme/default/default_twitter.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 5ef581a76d066d21387f83a6cb6818e2
7914b3902b034780b575d6319e5db633448a80eb
c938c59100b0c9f1873d47453c9f2924ad60fabe79cb44aacc601198af379f62
GET /wp-content/plugins/ultimate-social-media-plus/images/icons_theme/default/default_twitter.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 1224
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 13:07:00 GMT
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "4c8-5e760ff6159c0"
Content-Type: image/png
Vary: Accept-Encoding
Age: 22057
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/icons_theme/default/default_rss.png
200 OK 1.3 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/icons_theme/default/default_rss.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash e4fa24aadaaa171cad395fd042ecbcec
c4af0a89c6dd159cf2e433bf536ae5cbe1722a3b
e6d287afb76e0ff4e669831b39916e90d92f10e521f8c6c7674b4d5ee1abfd6f
GET /wp-content/plugins/ultimate-social-media-plus/images/icons_theme/default/default_rss.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 1335
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:11:12 GMT
Age: 7405
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "537-5e760ff6159c0"
Content-Type: image/png
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
static.newsmaxfeednetwork.com/web-clients/bootloaders/vJyNbXJRTl4o6awBVc5eaO/bootloader.js
200 OK 9 B URL HTTP/1.1 static.newsmaxfeednetwork.com/web-clients/bootloaders/vJyNbXJRTl4o6awBVc5eaO/bootloader.js
IP
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /web-clients/bootloaders/vJyNbXJRTl4o6awBVc5eaO/bootloader.js HTTP/1.1
Host: static.newsmaxfeednetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 22 Mar 2023 19:14:37 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 9
Connection: keep-alive
X-RC-Region: us-east-1a
x-powered-by: Express
cache-control: public, max-age=300
etag: W/"9-CUt2O0z8wLBeXQQFgc1RPDyggGc"
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/visit_icons/Visit_us_fb/icon_Visit_us_en_US.png
200 OK 4.3 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/visit_icons/Visit_us_fb/icon_Visit_us_en_US.png
IP
File type PNG image data, 93 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash 87fb171d702988f006f20d4f95ce6808
0edc8d01c4ea8ebf94ab3cc0d3c6e121c9408f88
24d3c56c2375033c7fb2483daf26d0026c05a278eea0fe98c940b497c4e75491
GET /wp-content/plugins/ultimate-social-media-plus/images/visit_icons/Visit_us_fb/icon_Visit_us_en_US.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 4261
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:11:12 GMT
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "10a5-5e760ff6159c0"
Content-Type: image/png
Vary: Accept-Encoding
Age: 7405
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/share_icons/fb_icons/en_US.svg
200 OK 1.9 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/share_icons/fb_icons/en_US.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1245), with CRLF line terminators
Hash b315cfc2ff8cb617ccc659feb683d49e
a4d0d74663641dae7785c130e9cf8354745db1c7
71af28b4b237c5f22a75d4a14fc3c9376d97d70852dffc34a68a905b073fc0af
GET /wp-content/plugins/ultimate-social-media-plus/images/share_icons/fb_icons/en_US.svg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 1861
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:09:09 GMT
Age: 7528
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "12cf-5e760ff6159c0-gzip"
Content-Type: image/svg+xml
Vary: Accept-Encoding
Cache-Control: public,public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/share_icons/Twitter_Tweet/en_US_Tweet.svg
200 OK 1.6 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/share_icons/Twitter_Tweet/en_US_Tweet.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1559), with CRLF line terminators
Hash 4ebe89adff6647c7fedfb8ce40506886
40f95b612fea9b2183a1100a1114301c02d2337e
2803f7b3adc401682c136724eb48803f8dbf6cccb61787580c355a0183a52bd9
GET /wp-content/plugins/ultimate-social-media-plus/images/share_icons/Twitter_Tweet/en_US_Tweet.svg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 1573
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:11:12 GMT
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "f08-5e760ff6159c0-gzip"
Content-Type: image/svg+xml
Vary: Accept-Encoding
Age: 7405
Cache-Control: public,public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/share_icons/Twitter_Follow/en_US_Follow.svg
200 OK 1.5 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/share_icons/Twitter_Follow/en_US_Follow.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1560), with CRLF line terminators
Hash f91a055e0e9d08db9372cb3a30e8120d
94892b45b828b6649e178c2aa98eaf2345d4bd7b
166685ac10a5ab977ce3be056295f837dcd8237ff9e2c4e1d770f3d49fc2ccb0
GET /wp-content/plugins/ultimate-social-media-plus/images/share_icons/Twitter_Follow/en_US_Follow.svg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 1486
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:11:11 GMT
Age: 7406
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "df2-5e760ff6159c0-gzip"
Content-Type: image/svg+xml
Vary: Accept-Encoding
Cache-Control: public,public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/visit_icons/Visit_us_twitter/icon_Visit_us_en_US.png
200 OK 3.9 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/images/visit_icons/Visit_us_twitter/icon_Visit_us_en_US.png
IP
File type PNG image data, 93 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash d8f2d254eec166adde349712feece919
d8f91466e126a1b6d926efb7d8811619b72ea7f5
f648b1f3b68f323856f2d786726d72dcc26ca2d57c5cca680404e385ef07e009
GET /wp-content/plugins/ultimate-social-media-plus/images/visit_icons/Visit_us_twitter/icon_Visit_us_en_US.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 3943
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:11:12 GMT
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "f67-5e760ff6159c0"
Content-Type: image/png
Vary: Accept-Encoding
Age: 7405
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/js/custom.js?ver=3.5.1
200 OK 7.1 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/ultimate-social-media-plus/js/custom.js?ver=3.5.1
IP
File type Unicode text, UTF-8 text, with very long lines (993), with CRLF line terminators
Hash c9cfd412b9c84cf23747249ea9109dce
ddaf50581f707a2ebcd62e572575ba5fe85f55db
9da8dbeda92938db9def60a11b037c10b99ed20bcf7bc90136767e7bfd3c2632
GET /wp-content/plugins/ultimate-social-media-plus/js/custom.js?ver=3.5.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:37 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 13:11:11 GMT
ETag: "90a8-5e760ff6159c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 7101
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-content/plugins/genesis-responsive-slider/assets/js/jquery.flexslider.js?ver=1.0.1
200 OK 5.7 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/genesis-responsive-slider/assets/js/jquery.flexslider.js?ver=1.0.1
IP
Hash 866f7386c0588b123ee6800c3e37f3a4
3dab827923bdb93cc34313dc23644e6716dbc371
81d6ef03dbd667964728549b04cc93daa8c59e3f7546c2e1696c08a13d8a5ad8
GET /wp-content/plugins/genesis-responsive-slider/assets/js/jquery.flexslider.js?ver=1.0.1 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:37 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 13:18:47 GMT
ETag: "6a6d-5e7611a8f5bc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 5652
Content-Type: application/x-javascript
Via: 1.1 google
www.newsandpromotions.com/wp-content/uploads/2021/05/IMG_1901-scaled-150x150.jpg
200 OK 2.0 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/IMG_1901-scaled-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 936c5832ccf8929cad7d4ec7c36e1aac
b04f080e3c35e8b6c1aabba8be2138c221d29a13
29e7fe3943e6da49b742f8ec3a44d03d24867b26c62aa0472f291d74c5db6876
GET /wp-content/uploads/2021/05/IMG_1901-scaled-150x150.jpg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 2027
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:35:16 GMT
Age: 2361
Last-Modified: Thu, 13 May 2021 13:34:38 GMT
ETag: "7eb-5c236304e1780"
Content-Type: image/jpeg
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/uploads/2021/05/woman-reading-book-150x150.jpg
200 OK 6.6 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/woman-reading-book-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash b1ca924f0862663eecf6e3bd3292d3de
e1eb57e4d2089f05a5f1768326ac6c756a53e938
b37572bdbefa74570205f55ef822191896e4a427808f523d37779b2a7cc588db
GET /wp-content/uploads/2021/05/woman-reading-book-150x150.jpg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 6564
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:35:16 GMT
Age: 2361
Last-Modified: Thu, 13 May 2021 13:19:58 GMT
ETag: "19a4-5c235fbda5b80"
Content-Type: image/jpeg
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/uploads/2021/05/RipeFigs_HalloumiSaganaki-scaled-150x150.jpg
200 OK 10 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/RipeFigs_HalloumiSaganaki-scaled-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 82a9ae903a6a311e32722137286cdf16
15bdbf501b02b2bdd6e78b6fb91863a4670bf9b1
6743d9e9284060da973b7a61a6ce0b6137b24b470de65cc3048156ba7582cdd0
GET /wp-content/uploads/2021/05/RipeFigs_HalloumiSaganaki-scaled-150x150.jpg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 10228
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:40:18 GMT
Age: 2059
Last-Modified: Thu, 13 May 2021 13:19:48 GMT
ETag: "27f4-5c235fb41c500"
Content-Type: image/jpeg
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/uploads/2021/05/lead-img-colonial-pipeline-paid-bitcoin-ransomware-750x420.jpg
200 OK 68 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/lead-img-colonial-pipeline-paid-bitcoin-ransomware-750x420.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 750x420, components 3\012- data
Hash 741963d389a3b6dfca73f12cb63b5f8b
f30c7bc74e6290977d4093b6a1f445b2d5ddf298
53ed543e4a5eddc5daad6e257bf3fe87dce9df199188673bfacdbbe078af59c3
GET /wp-content/uploads/2021/05/lead-img-colonial-pipeline-paid-bitcoin-ransomware-750x420.jpg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 67506
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:11:11 GMT
Last-Modified: Thu, 13 May 2021 20:32:39 GMT
ETag: "107b2-5c23c073fc7c0"
Content-Type: image/jpeg
Vary: Accept-Encoding
Age: 7406
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/uploads/2021/05/girl-cooking-150x150.jpg
200 OK 7.8 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/girl-cooking-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 4f7d08aa65b73028f88d0131d6c69ce4
0ee48eebad79af683c0ef1922cfae528f385a1c5
c358fc9ca233c490324caf6bad9952b1ce5e6e4b5e8ba334c5ca015196d72f17
GET /wp-content/uploads/2021/05/girl-cooking-150x150.jpg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 7776
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:35:16 GMT
Age: 2361
Last-Modified: Thu, 13 May 2021 13:35:03 GMT
ETag: "1e60-5c23631cb8fc0"
Content-Type: image/jpeg
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/uploads/2021/05/lead-img-colonial-pipeline-paid-bitcoin-ransomware-150x150.jpg
200 OK 7.4 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/lead-img-colonial-pipeline-paid-bitcoin-ransomware-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 06414e2c01a026af4c01ecfe2a452f4f
fd87ad283df65c69bc9a8228c01bdb6485b161c9
05cbe0eb63271667225aa3f633752f33320920a81377672462140256ff8f9c8a
GET /wp-content/uploads/2021/05/lead-img-colonial-pipeline-paid-bitcoin-ransomware-150x150.jpg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 7382
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:55:19 GMT
Age: 1158
Last-Modified: Thu, 13 May 2021 20:32:39 GMT
ETag: "1cd6-5c23c073fc7c0"
Content-Type: image/jpeg
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/uploads/2021/05/image1-2-150x150.png
200 OK 16 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/image1-2-150x150.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash fd7d2f80645a97b79561ace685e068cb
8c25f1757eabff5f3f2bc58f2479fd35903687d6
4f7166cc360d114d3279967bae732d3eab578ad1f4ea9cedd9c349e9a5eaed37
GET /wp-content/uploads/2021/05/image1-2-150x150.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 15807
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:40:17 GMT
Age: 2060
Last-Modified: Thu, 13 May 2021 20:32:29 GMT
ETag: "3dbf-5c23c06a73140"
Content-Type: image/png
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/uploads/2021/05/5f457a9389aff80028ab7e63-150x150.jpeg
200 OK 7.0 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/5f457a9389aff80028ab7e63-150x150.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 2163bbe8ee8cf486e780d0b9f56ab3c1
9afd37dcd58ffc0b1d1f0af5d1aede8d0df772c8
98978ca510c9861cfdd523c3f518a6d4f0706c75394f006bc6fe0d58c3334fbe
GET /wp-content/uploads/2021/05/5f457a9389aff80028ab7e63-150x150.jpeg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 7011
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 18:40:17 GMT
Age: 2060
Last-Modified: Thu, 13 May 2021 20:09:23 GMT
ETag: "1b63-5c23bb40a82c0"
Content-Type: image/jpeg
Vary: Accept-Encoding
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/uploads/2021/05/5f457a9389aff80028ab7e63-750x420.jpeg
200 OK 40 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/5f457a9389aff80028ab7e63-750x420.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 750x420, components 3\012- data
Hash b158cc91a80963b77ed45d8436194f5b
f5e16a68d7af708274f9c89846e3da7569ed3a82
9da6d6a0cf746c73c44df7036f810b8302e80aae7df0deaca345ed1fb41056ec
GET /wp-content/uploads/2021/05/5f457a9389aff80028ab7e63-750x420.jpeg HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 40452
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:11:11 GMT
Last-Modified: Thu, 13 May 2021 20:09:23 GMT
ETag: "9e04-5c23bb40a82c0"
Content-Type: image/jpeg
Vary: Accept-Encoding
Age: 7406
Cache-Control: public,max-age=3600
cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
200 OK 90 kB URL HTTP/1.1 cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
IP
File type ASCII text, with very long lines (31986)
Hash e0eff30579598f76147c9ea12f490d21
f0bf2ef576db440b275bdae3d6abac35e59a33b2
e70a34c5f232fa80328a361630a994cf847c54deb926f13d40be4807291b657b
GET /1.27.339-ccfb11a/pixel.js HTTP/1.1
Host: cdn.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
X-GUploader-UploadID: ADPycdvV5Mkfg_hInv_rvG7c5lVj_Mxtf1tUucChTi7vnRveCTKp4SbxXWu_kfxRMwCsH1jSfPXqTzPw3UoD7jcZlZiUK8BPcXFi
x-goog-generation: 1611776924905378
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89647
Content-Language: en
x-goog-hash: crc32c=YwE4YA==, md5=4O/zBXlZj3YUfJ6hL0kNIQ==
x-goog-expiration: Sun, 11 Nov 2294 19:48:44 GMT
x-goog-storage-class: MULTI_REGIONAL
Accept-Ranges: bytes
Content-Length: 89647
Server: UploadServer
Date: Wed, 22 Mar 2023 18:20:10 GMT
Expires: Wed, 22 Mar 2023 19:20:10 GMT
Cache-Control: public, max-age=3600
Age: 3267
Last-Modified: Wed, 27 Jan 2021 19:48:44 GMT
ETag: "e0eff30579598f76147c9ea12f490d21"
Content-Type: application/javascript
Vary: X-Goog-Allowed-Resources
www.newsandpromotions.com/wp-content/uploads/2021/05/blueprint-api-production.s3.amazonaws-360x200.com
200 OK 16 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/blueprint-api-production.s3.amazonaws-360x200.com
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 360x200, components 3\012- data
Hash f44816eea8b496432b258b3171bd9bf0
eb98a3b79dccd836df0f79c04e99ce79296b6bcf
0a1f72bffc328c1a6a9480026ff40a36e32987935685d262dec7d00df052dc7c
GET /wp-content/uploads/2021/05/blueprint-api-production.s3.amazonaws-360x200.com HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:37 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 13:30:08 GMT
ETag: "3da5-5c23620363800"
Accept-Ranges: bytes
Content-Length: 15781
Vary: User-Agent
Content-Type: application/x-msdownload
Via: 1.1 google
www.newsandpromotions.com/wp-content/uploads/2021/05/1620912671_blueprint-api-production.s3.amazonaws-360x200.com
200 OK 17 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/1620912671_blueprint-api-production.s3.amazonaws-360x200.com
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 360x200, components 3\012- data
Hash 4e275a8bbbdb3159617bce74fd0b1479
ca977b34441eb9417875ed5db14d0a25cb4dd62a
501d8f6eb49ebfb614032a5960cd816eb7c19ea81a658c74f602322ac72c5252
GET /wp-content/uploads/2021/05/1620912671_blueprint-api-production.s3.amazonaws-360x200.com HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:37 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 13:31:10 GMT
ETag: "438b-5c23623e84380"
Accept-Ranges: bytes
Content-Length: 17291
Vary: User-Agent
Content-Type: application/x-msdownload
Via: 1.1 google
www.newsandpromotions.com/wp-content/plugins/genesis-responsive-slider/assets/images/bg_control_nav.png
200 OK 495 B URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/genesis-responsive-slider/assets/images/bg_control_nav.png
IP
File type PNG image data, 13 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 6f6798afe457e1be6e235a1fe795c651
308f2fbe501ac5fbbd0855a274327942b97e7b44
c91efdaad892e857ceb32e443608f6c6b66ea1e4ed0be8d314959d59886fb4c0
GET /wp-content/plugins/genesis-responsive-slider/assets/images/bg_control_nav.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/wp-content/plugins/genesis-responsive-slider/assets/style.css?ver=1.0.1
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Length: 495
Pragma: public
Via: 1.1 google
Date: Wed, 22 Mar 2023 17:11:15 GMT
Last-Modified: Mon, 29 Aug 2022 13:18:47 GMT
ETag: "1ef-5e7611a8f5bc0"
Content-Type: image/png
Vary: Accept-Encoding
Age: 7402
Cache-Control: public,max-age=3600
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 16aafd1a707dc0d324f893d3db5cb1eb
9b7db1bf29f50b5ba54b346b467a9a2793d5ab0f
41d172e48f6e9cc6c9a19db6d67b1c9ebc468fb885a3c13e4b80d02ef5e7e04d
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155248
Date: Wed, 22 Mar 2023 19:14:37 GMT
Etag: "641af949-1d7"
Expires: Fri, 24 Mar 2023 14:22:05 GMT
Last-Modified: Wed, 22 Mar 2023 12:49:13 GMT
Server: ECAcc (nya/789D)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xabgVYtwa_gMeBg2m_o8dmmGk1vYOkwLkat_F16VFsXstXZCm0m2Jw==
Age: 5572
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 16aafd1a707dc0d324f893d3db5cb1eb
9b7db1bf29f50b5ba54b346b467a9a2793d5ab0f
41d172e48f6e9cc6c9a19db6d67b1c9ebc468fb885a3c13e4b80d02ef5e7e04d
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 22 Mar 2023 19:14:37 GMT
Last-Modified: Wed, 22 Mar 2023 17:42:43 GMT
Server: ECAcc (nya/79B0)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Nk87tI_FDDej7d9zzcD-bRbka-nuBzx7fUV5ikauVfIjscZ3s62zXA==
Age: 5514
c.fqtag.com/pixel
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pixel HTTP/1.1
Host: c.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain; charset=utf-8
Content-Length: 2407
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 204 No Content
Access-Control-Allow-Origin: *
Date: Wed, 22 Mar 2023 19:14:37 GMT
Via: 1.1 google
aorta.clickagy.com/pixel.gif?clkgypv=jstag
302 Found 0 B URL HTTP/2 aorta.clickagy.com/pixel.gif?clkgypv=jstag
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?clkgypv=jstag HTTP/1.1
Host: aorta.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 22 Mar 2023 19:14:37 GMT
content-type: application/json
content-length: 0
location: https://aa.agkn.com/adscores/g.pixel?sid=9212289188&_puid=c:a59f007fbf3384ccc33cc586d5d348f0&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D
server: Aorta/20230321.b911db394
x-aorta-host: ee2e4d326989
x-aorta-region: us-east-1
access-control-allow-credentials: true
access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction
access-control-expose-headers: Set-Cookie
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 31536000
cache-control: no-cache, no-store, must-revalidate
expect: 0
X-Firefox-Spdy: h2
www.newsandpromotions.com/wp-content/uploads/2021/05/image1-2-750x359.png
200 OK 63 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/uploads/2021/05/image1-2-750x359.png
IP
File type PNG image data, 750 x 359, 8-bit/color RGBA, non-interlaced\012- data
Hash 81ea0a57322fec1ccff87ede5f7f4d26
26f6eb0323c9711c8f9704f1a86033788e95f654
24f08fa1dd1174130b09a7a7f534a2ffabbb4fcb07edd4be206c50481e462470
GET /wp-content/uploads/2021/05/image1-2-750x359.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:37 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 20:32:30 GMT
ETag: "f794-5c23c06b67380"
Accept-Ranges: bytes
Content-Length: 63380
Vary: Accept-Encoding
Pragma: public
Content-Type: image/png
Via: 1.1 google
Cache-Control: public,max-age=3600
www.newsandpromotions.com/wp-content/themes/magazine-pro/images/icon-direction-nav.png
200 OK 4.6 kB URL HTTP/1.1 www.newsandpromotions.com/wp-content/themes/magazine-pro/images/icon-direction-nav.png
IP
File type PNG image data, 100 x 98, 8-bit/color RGBA, non-interlaced\012- data
Hash 207e8dfccfb8f1ed46957333e586aca7
e9986bfd5dcfc00524727c6c8fbf092fc3833064
91595b01ede4e9782e18a776003ab6b5dc71a03a5377ce24cfe84228e1ab71d1
GET /wp-content/themes/magazine-pro/images/icon-direction-nav.png HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/wp-content/themes/magazine-pro/style.css?ver=3.1
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:37 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 12:36:58 GMT
ETag: "11c9-5e76085030e80"
Accept-Ranges: bytes
Content-Length: 4553
Vary: Accept-Encoding
Pragma: public
Content-Type: image/png
Via: 1.1 google
Cache-Control: public,max-age=3600
aorta.clickagy.com/data
200 OK 82 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a8653a916713e224e5c4604f0c7fdc51
52019ddeaa1c1442f4ee137d94874eb36a49b1df
3e7b654c54f990a92b805cf1c1a10108f2f016f96ff5f965fe138c32eff9c1de
POST /data HTTP/1.1
Host: aorta.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 253
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 19:14:37 GMT
content-type: application/json
content-length: 82
server: Aorta/20230321.b911db394
x-aorta-host: c0805e26b25d
x-aorta-region: us-east-1
access-control-allow-credentials: true
access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction
access-control-expose-headers: Set-Cookie
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: http://www.newsandpromotions.com
access-control-max-age: 31536000
cache-control: no-cache, no-store, must-revalidate
expect: 0
content-encoding: gzip
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-31899.js?sv=5
301 Moved Permanently 167 B URL HTTP/1.1 static.hotjar.com/c/hotjar-31899.js?sv=5
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /c/hotjar-31899.js?sv=5 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 22 Mar 2023 19:14:37 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://static.hotjar.com/c/hotjar-31899.js?sv=5
X-Cache: Redirect from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 33g_pU8EelNgKmb4cs5wV2Mh2-CByMO_7ShqzGSCx6rzaoR9QRj2XA==
www.newsandpromotions.com/wp-content/plugins/genesis-favicon-uploader/favicons/favicon.ico
200 OK 370 B URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/genesis-favicon-uploader/favicons/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 1f398bbf1c2563bab04033939d969ef9
fe8decbaad3b46bca9756a0c424c24b70b8c8f24
338f006ae8db3202c7f93467d19acab859a85b0204be887cb527df381d4257f5
GET /wp-content/plugins/genesis-favicon-uploader/favicons/favicon.ico HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Server: Apache
Accept-Ranges: bytes
Content-Encoding: gzip
Pragma: public
Content-Length: 370
Via: 1.1 google
Date: Wed, 22 Mar 2023 16:51:26 GMT
Last-Modified: Mon, 29 Aug 2022 12:36:58 GMT
ETag: "47c-5e76085030e80-gzip"
Content-Type: image/x-icon
Vary: Accept-Encoding
Age: 8591
Cache-Control: public,max-age=3600
cdn.luckyorange.com/w.js
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w.js HTTP/1.1
Host: cdn.luckyorange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 22 Mar 2023 19:14:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 22 Mar 2023 20:14:37 GMT
Location: https://cdn.luckyorange.com/w.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DPSeHaBYETZqVsxkcekPBU%2FP61CX%2BI3Rru8923vTJSTPyonV0O1VFfoeN8pIWI%2BuRczEEC61MJXqBifZXql%2BpGO8SvnFIplIQaup6anX7bkuBRuEqSJVH%2FGBveHgwmSvUyi9FIQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac0c238ae44b503-OSL
alt-svc: h2=":443"; ma=60
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20085
Date: Wed, 22 Mar 2023 17:46:35 GMT
Expires: Wed, 22 Mar 2023 19:46:35 GMT
Cache-Control: public, max-age=7200
Age: 5282
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
Vary: Accept-Encoding
connect.facebook.net/en_US/sdk.js
301 Moved Permanently 0 B URL HTTP/1.1 connect.facebook.net/en_US/sdk.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 301 Moved Permanently
Location: https://connect.facebook.net/en_US/sdk.js
Content-Type: text/plain
Server: proxygen-bolt
Date: Wed, 22 Mar 2023 19:14:37 GMT
Connection: keep-alive
Content-Length: 0
track.ecampaignstats.com/lprd/impression.php
200 OK 0 B URL HTTP/1.1 track.ecampaignstats.com/lprd/impression.php
IP
ASN #394844 ROOT-LEVEL-TECHNOLOGY
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lprd/impression.php HTTP/1.1
Host: track.ecampaignstats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:37 GMT
Server: Apache/2.4.52 (Debian)
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
fo-api.omnitagjs.com/fo-api/ot.js
200 OK 1.0 kB URL HTTP/1.1 fo-api.omnitagjs.com/fo-api/ot.js
IP
ASN #200271 Iguane Solutions SAS
Hash 63583d3a4bb296028a3ff7106c9a924f
ba5034c54206f432cd6d1ee8a61dbddb62a7b809
ed57410b6d3577ae079759ca23479e4b44f02b6e0042fb56cf08b3904dc3fa70
GET /fo-api/ot.js HTTP/1.1
Host: fo-api.omnitagjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Accept-Encoding
access-control-allow-methods: OPTIONS, GET
access-control-allow-origin: *
access-control-max-age: 3600
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=utf-8
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=406aecb55068bb8289c8494d04e0c56a; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 19:14:37 GMT
content-length: 1009
x-envoy-upstream-service-time: 10
server: ayl-lb-fra02
static.hotjar.com/c/hotjar-31899.js?sv=5
200 OK 4.4 kB URL HTTP/2 static.hotjar.com/c/hotjar-31899.js?sv=5
IP
File type ASCII text, with very long lines (7813)
Hash 617becd44ab69203edee921911b8fb4e
a2b87f7bc4a2210f53b416f44410415d80284242
4c07aab9e58f051026c5c6e8c4872dc2c484fbd6f35413286d8437e2adc805ba
GET /c/hotjar-31899.js?sv=5 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 19:14:37 GMT
cache-control: max-age=60
etag: W/5d6c778c254cdd1cba15f4098e9976f2
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: chzxcgt8cjD2zV7lXAarsIoK83tHmn-3q4uByy9jObupaIZKKVoyrg==
age: 48
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6e965ba75b84abf96ca0d83da48d2fbb
4c2eb4c06cabee4d0f0606e88e9e074e2f767168
4b39bfe671df590e9c5baf75008d76f4272d8ffbafd7108e7592f8165b6806c6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5564
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:37 GMT
Last-Modified: Wed, 22 Mar 2023 17:41:53 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 4f74bb621ef72dc25211c1c334014fc0
759acdf137703a6be56fb149a2c5159052d2ec89
1750886f6d5c5076f65d6ce6d23387cf2894e0eed5d5a644e269649f86c4af0e
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: efbc98762e13b0247d2bac830e588357
etag: "36e57564cf6995299706d08f48240264"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 22 Mar 2023 19:19:32 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: T3S7Yh73LcJSEcHDNAFPwA==
x-fb-debug: AkXOVY8UfYiTPziZ7qLhL/7JtMXsH4KuIUqwH/J6/T312c19T2hpILuro2G1wCeDGm0UsYAdk5OwpNtxGKIqKA==
content-length: 1685
x-fb-trip-id: 1679558926
date: Wed, 22 Mar 2023 19:14:37 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&a=422770653&t=pageview&_s=2&dl=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&ul=en-us&de=UTF-8&dt=News%20%26%20Promotions%20%E2%80%93%20What%27s%20going%20on%20in%20your%20world%3F&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=633693816.1679512484&tid=UA-47081731-1&_gid=167194925.1679512484&z=384111779
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j99&a=422770653&t=pageview&_s=2&dl=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&ul=en-us&de=UTF-8&dt=News%20%26%20Promotions%20%E2%80%93%20What%27s%20going%20on%20in%20your%20world%3F&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=633693816.1679512484&tid=UA-47081731-1&_gid=167194925.1679512484&z=384111779
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&a=422770653&t=pageview&_s=2&dl=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&ul=en-us&de=UTF-8&dt=News%20%26%20Promotions%20%E2%80%93%20What%27s%20going%20on%20in%20your%20world%3F&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=633693816.1679512484&tid=UA-47081731-1&_gid=167194925.1679512484&z=384111779 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Wed, 22 Mar 2023 18:05:11 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
Age: 4166
cdn.taboola.com/libtrc/newsandpromotions/loader.js
200 OK 14 kB URL HTTP/1.1 cdn.taboola.com/libtrc/newsandpromotions/loader.js
IP
File type ASCII text, with very long lines (32016)
Hash b059d489918fb33e248673a72ed8d7b5
22325ae69925a59c51c0fe4af0551c40431615dc
a4140fb94f3077ec71647d5617bf87e84928557738d8889d1b0da8b3e032edd0
GET /libtrc/newsandpromotions/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 13717
x-amz-id-2: icP4gaxJ3IPKEy5ZEpjttGfvr5JmnxGCg7dURsXMk16HfiS/b/jrnpddJ0Wyi6p02M45IoZ30F8=
x-amz-request-id: SBAYHVJ5C1ZYS5T6
x-amz-replication-status: COMPLETED
Last-Modified: Sun, 17 Apr 2016 12:00:52 GMT
ETag: "b6297b83e8345e890ff1c5b8f1a1ee9d"
x-amz-version-id: 1.vZczLY5A5Fi2f8g6dyocx9EAdIVCZy
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 19:14:37 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1620-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1679512478.562000,VS0,VE216
Cache-Control: private,max-age=14401
Vary: Accept-Encoding
abp: 38
Access-Control-Allow-Origin: *
ocsp.digicert.com/
200 OK 471 B IP
Hash 6e965ba75b84abf96ca0d83da48d2fbb
4c2eb4c06cabee4d0f0606e88e9e074e2f767168
4b39bfe671df590e9c5baf75008d76f4272d8ffbafd7108e7592f8165b6806c6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5513
Cache-Control: max-age=160208
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:37 GMT
Etag: "641b0ce4-1d7"
Expires: Fri, 24 Mar 2023 15:44:45 GMT
Last-Modified: Wed, 22 Mar 2023 14:12:52 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
hemsync.clickagy.com/external/hasHashes?clkgypv=jstag&cb=null
200 OK 28 B URL HTTP/2 hemsync.clickagy.com/external/hasHashes?clkgypv=jstag&cb=null
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 830cb026fae1a13104725d2b3100ec10
40188da405f4a93c90f0b5e060e0ccca8e483eba
4d32822dd4fd4e7b58950d7c693e301eaa19b29305077afaebc12852df7f4ee0
GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1
Host: hemsync.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 19:14:37 GMT
content-type: text/plain; charset=utf-8
content-length: 28
access-control-allow-origin: http://www.newsandpromotions.com
vary: origin
access-control-allow-credentials: true
access-control-expose-headers: content-length, last-modified, expires, content-type
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3e968c0f4319273e79821cbabf3bdbdc
99f1127052594878d49370fdcc61b1e4fbb69e61
82ea5f81bec224fa88a6b83c50481d819586b5de2fbb435d522d24ce1250b6cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j99&a=422770653&t=pageview&_s=1&dl=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&ul=en-us&de=UTF-8&dt=News%20%26%20Promotions%20%E2%80%93%20What%27s%20going%20on%20in%20your%20world%3F&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=751639410&gjid=89511153&cid=633693816.1679512484&tid=UA-47081731-1&_gid=167194925.1679512484&_r=1&_slc=1&z=186440732
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=422770653&t=pageview&_s=1&dl=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&ul=en-us&de=UTF-8&dt=News%20%26%20Promotions%20%E2%80%93%20What%27s%20going%20on%20in%20your%20world%3F&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=751639410&gjid=89511153&cid=633693816.1679512484&tid=UA-47081731-1&_gid=167194925.1679512484&_r=1&_slc=1&z=186440732
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=422770653&t=pageview&_s=1&dl=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&ul=en-us&de=UTF-8&dt=News%20%26%20Promotions%20%E2%80%93%20What%27s%20going%20on%20in%20your%20world%3F&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=751639410&gjid=89511153&cid=633693816.1679512484&tid=UA-47081731-1&_gid=167194925.1679512484&_r=1&_slc=1&z=186440732 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.newsandpromotions.com
date: Wed, 22 Mar 2023 19:14:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
b.scorecardresearch.com/beacon.js
200 OK 2.2 kB URL HTTP/1.1 b.scorecardresearch.com/beacon.js
IP
File type ASCII text, with very long lines (4514)
Hash 29a10271b1a7cf0b77efb86107b24c24
2f6d66327475133019ad72712d240bb013b683be
8a95d45365241b5731ee7c33cd5a45184256105313d291af860fa4cfb670bed3
GET /beacon.js HTTP/1.1
Host: b.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 09 Mar 2023 09:22:40 GMT
x-amz-server-side-encryption: AES256
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Mar 2023 02:37:07 GMT
Cache-Control: max-age=86400
ETag: W/"a06e7a176f40dc26aa5e9567ac9d2d5e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SKpcVkCsPzSNRFqbeD_4yXzdZBcBXrzDw0AP1JV9Mr7W7zFxyKdZFw==
Age: 59851
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23c054d3aee551b6fdc42a5a472a7040
b1a46c12ac7d65c979fd1998bdb243f3dba8f956
9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/impl.205-RELEASE.js
200 OK 82 kB URL HTTP/1.1 cdn.taboola.com/libtrc/impl.205-RELEASE.js
IP
File type ASCII text, with very long lines (32045)
Hash 63208f5a0c6dda005c182f71acd99cb5
964b90563c30fb6eec6567fc9b84b84dc0fb5a86
928a0653cad2a2cfa68c616d499a15d12a642d22025a017e1efe15f5e798be61
GET /libtrc/impl.205-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 82427
x-amz-id-2: Qm5fLFjoytGXfFwW/vFB3oBoCppmVAsQnkcBXcS3Z3aq4J56GRwUf1QqyhHAI5dqI0EFsnulmv8=
x-amz-request-id: VH7M5WF3WAQ7A0B2
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 21 Apr 2016 11:01:32 GMT
ETag: "b271ab15d80778ccf730076dd2fa7bf8"
x-amz-version-id: G4.vYuMpf.hwuBE9LrHkwGh9fDb2BZUS
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Wed, 22 Mar 2023 19:14:37 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1620-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1679512478.816299,VS0,VE103
Cache-Control: private,max-age=31536000
Vary: Accept-Encoding
abp: 99
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ff476bde43022243f6c3f9dddd9360d3
7862bf4ba04f1218f10f85bbddbe2a11aeeeece6
6e8b017b6722c1f95b920e14876ef42e2a38556bbad3b9f4b1b1879634ced74a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sb.scorecardresearch.com/b?c1=7&c2=13739933&cs_it=b9&cv=4.0.0%2B2301240627&ns__t=1679512484024&ns_c=UTF-8&c3=20121515121&c7=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&c8=News%20%26%20Promotions%20%E2%80%93%20What%27s%20going%20on%20in%20your%20world%3F&c9=
204 No Content 0 B URL HTTP/2 sb.scorecardresearch.com/b?c1=7&c2=13739933&cs_it=b9&cv=4.0.0%2B2301240627&ns__t=1679512484024&ns_c=UTF-8&c3=20121515121&c7=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&c8=News%20%26%20Promotions%20%E2%80%93%20What%27s%20going%20on%20in%20your%20world%3F&c9=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b?c1=7&c2=13739933&cs_it=b9&cv=4.0.0%2B2301240627&ns__t=1679512484024&ns_c=UTF-8&c3=20121515121&c7=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&c8=News%20%26%20Promotions%20%E2%80%93%20What%27s%20going%20on%20in%20your%20world%3F&c9= HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 22 Mar 2023 19:14:37 GMT
set-cookie: UID=13A5f687ef23d2ca17bcd4c1679512477; domain=.scorecardresearch.com; path=/; max-age=62208000
accept-ch: UA, Platform, Arch, Model, Mobile
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lry87EfI3pISQX7RSpKColRkQOSPpEa5PSnkWRuZ973eULPzdBOvvA==
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-47081731-1&cid=633693816.1679512484&jid=751639410&gjid=89511153&_gid=167194925.1679512484&_u=IEBAAEAAAAAAACAAI~&z=334621277
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-47081731-1&cid=633693816.1679512484&jid=751639410&gjid=89511153&_gid=167194925.1679512484&_u=IEBAAEAAAAAAACAAI~&z=334621277
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-47081731-1&cid=633693816.1679512484&jid=751639410&gjid=89511153&_gid=167194925.1679512484&_u=IEBAAEAAAAAAACAAI~&z=334621277 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.newsandpromotions.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 22 Mar 2023 19:14:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ff476bde43022243f6c3f9dddd9360d3
7862bf4ba04f1218f10f85bbddbe2a11aeeeece6
6e8b017b6722c1f95b920e14876ef42e2a38556bbad3b9f4b1b1879634ced74a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d.agkn.com/pixel/10751/?che=1679512477661&ip=91.90.42.154&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D216613104463004254698
302 0 B URL HTTP/1.1 d.agkn.com/pixel/10751/?che=1679512477661&ip=91.90.42.154&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D216613104463004254698
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/10751/?che=1679512477661&ip=91.90.42.154&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D216613104463004254698 HTTP/1.1
Host: d.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Cache-Control: no-cache, must-revalidate
Date: Wed, 22 Mar 2023 19:14:37 GMT
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=128&cm=216613104463004254698
P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Set-Cookie: ab=0001%3ACKhsYVcyZycKLOgTmAR0ejTknFpny0mK;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
u=C|0AAArrhAdK64QHQAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
Content-Length: 0
Connection: keep-alive
tags.clickagy.com/data.js?rnd=5a7223b9ea03d
200 OK 14 kB URL HTTP/2 tags.clickagy.com/data.js?rnd=5a7223b9ea03d
IP
File type ASCII text, with very long lines (39089), with no line terminators
Hash 8ebdf850236ea0dd77091539c242494c
1c2dca0f079631d9e77b62026f0e0934c4855698
06d8e748fb4d58125a590d079fdf4a4f9295c5e85bb429d33556e16e74303f30
GET /data.js?rnd=5a7223b9ea03d HTTP/1.1
Host: tags.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 19:14:36 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 20:57:47 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: swy_aEi2mFevUnIx1k7ucq8H7V0abBgM
content-encoding: gzip
etag: W/"7dc7bc84811d5ae6527d61d30e0e1f4d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wv8ONRBgXw4e_lBYh6Ga5LjCoUG4YLorglnMpvqiA_bd0K4VowNLqQ==
age: 2071
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ac0c2344c9ab4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=128&cm=216613104463004254698
302 Found 0 B URL HTTP/2 aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=128&cm=216613104463004254698
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?clkgypv=pxl&ch=128&cm=216613104463004254698 HTTP/1.1
Host: aorta.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 22 Mar 2023 19:14:38 GMT
content-type: application/json
content-length: 0
location: https://dpm.demdex.net/ibs:dpid=79908&dpuuid=c:a59f007fbf3384ccc33cc586d5d348f0&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D
server: Aorta/20230321.b911db394
x-aorta-host: 5c350120e2e3
x-aorta-region: us-east-1
access-control-allow-credentials: true
access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction
access-control-expose-headers: Set-Cookie
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 31536000
cache-control: no-cache, no-store, must-revalidate
expect: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a237b3ec23da41b2cdefc39b643691f
322b5b2a4fb99140ac53a94058d34a4806133519
4d88ec2ff0cf38948e56dabbd03130bb35850d89921fe80e242e762fedde2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3993
Expires: Wed, 22 Mar 2023 20:21:11 GMT
Date: Wed, 22 Mar 2023 19:14:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3993
Expires: Wed, 22 Mar 2023 20:21:11 GMT
Date: Wed, 22 Mar 2023 19:14:38 GMT
Connection: keep-alive
fo-ssp.omnitagjs.com/fo-ssp/sync?attempt=local-chclcfzmj9n
200 OK 752 B URL HTTP/1.1 fo-ssp.omnitagjs.com/fo-ssp/sync?attempt=local-chclcfzmj9n
IP
ASN #200271 Iguane Solutions SAS
File type ASCII text, with very long lines (562)
Hash 1ff9144c48cdfa3d551b8546be0afbfc
372e7f9adf69409fe22812cff04d2c27d0c1b74b
9aea45d0668a0d6b10ef10a8f6e4b161fe36a2db436b0f86d18bf57b42bcec8c
GET /fo-ssp/sync?attempt=local-chclcfzmj9n HTTP/1.1
Host: fo-ssp.omnitagjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=c4aa0e167f29b66a4bc238bb88f84353; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 19:14:38 GMT
content-length: 752
x-envoy-upstream-service-time: 1
server: ayl-lb-fra02
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3993
Expires: Wed, 22 Mar 2023 20:21:11 GMT
Date: Wed, 22 Mar 2023 19:14:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3993
Expires: Wed, 22 Mar 2023 20:21:11 GMT
Date: Wed, 22 Mar 2023 19:14:38 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d8076782b7586aea6d69480d5434652e
6bd6f10f27f62711c6783bc8b5ea72cb74622e2f
ab660e165b0044aa0ca16ab2a42ac38a1922a24a6ae6e879d4e3e1e9c19822c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47081731-1&cid=633693816.1679512484&jid=751639410&_u=IEBAAEAAAAAAACAAI~&z=230619613
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47081731-1&cid=633693816.1679512484&jid=751639410&_u=IEBAAEAAAAAAACAAI~&z=230619613
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47081731-1&cid=633693816.1679512484&jid=751639410&_u=IEBAAEAAAAAAACAAI~&z=230619613 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Mar 2023 19:14:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f0b9e85381489dcf646c251722b21d4
5f7ea91288a2170bcabdca6be296718c4191eacd
911f803271ad9053ebac3787bdde9b75ec604acc6aa28692cc8e4c5c4fb61483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10480
x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJptHG7JoAMFSwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hqGFdT1Sk0IcvaNqfvjz5RsGBK-qMBcNKbK9FyZ7OoiH30hDL9ekxA==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:59:52 GMT
age: 76486
etag: "5f7ea91288a2170bcabdca6be296718c4191eacd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 412bd6aea60211324e649d7d920601d2
a813976bda850a584b5ab94d9a70bfe0da69aca0
d36ef17fc6ab3cd4e5e43836f7df2c6fdf1781f1bac73e42c9a09e8594f797f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: 1b374321-f2df-404f-ab91-4e73d830fac9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqmAEhHoAMFgRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a248c-217d81154ecfe0c44ca70432;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:41:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: DL7vQgu72hwpt7yHbmIKnAZnoIaR4CQPE1JJAjq8M4jg0REUsq5lOw==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:48:25 GMT
age: 77173
etag: "a813976bda850a584b5ab94d9a70bfe0da69aca0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aeb0d8069d746e467fecd886c0e42628
8229b537f84a7418dc67e30691e62db4cea67f0f
24705dc5b7eefd79a35323beee7c741aa041c3bf55801d13b4ffc2b202e6a394
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8037
x-amzn-requestid: 7a9f7bb5-d810-4831-b5d2-3eead1af864a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJprcGY1IAMFSAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-53cdee4b645ed18e1dfeb92c;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: QW8T5AGg_L1mT4fE8IHeBG9TSiGpbBJpZE2yZdBtAQMJCPV8OKK5Dw==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:43:22 GMT
age: 77476
etag: "8229b537f84a7418dc67e30691e62db4cea67f0f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c831201ad81f55c63c1b101ce854a810
0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5
c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5556
x-amzn-requestid: dd5a8417-ddd5-469d-aa84-e880f4b84464
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CHqKFGRsoAMFTGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6419570d-3f28a7502b56eda47dd82ba7;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 07:04:45 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: JImqyag05jmvEwsJSvKFVuisuS5KNKfr7xRuN0YPyneNXvVxKkFMzg==
via: 1.1 ee6ea1e4552345de209d26f9ffb35d4a.cloudfront.net (CloudFront), 1.1 5292c0d5844327feadb38f1efe42ebc6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 05:35:55 GMT
age: 49123
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2062cf7a271d4ac7a04c0a746d443e07
3343851f2128c5f1fe4302c2aa53e8ce1fb661ac
e479263c1742d2597cf8948ef059b0bc97dbb97f47bb5cafee3d4af12069d2ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10407
x-amzn-requestid: 87aba2e6-d7e8-4456-a12f-e05ac556b839
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqJhGnXIAMF1yA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23d6-2b6c3d62366f47f506ce8415;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: d7wlX2p3nm1VAV3qxRv2S1VbjxRah6GciBVRgyds7qbK1yNltNmtMQ==
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 1f41b5f27f3ec2e93db2155dbc56900c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:49:24 GMT
age: 77114
etag: "3343851f2128c5f1fe4302c2aa53e8ce1fb661ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47081731-1&cid=633693816.1679512484&jid=751639410&_u=IEBAAEAAAAAAACAAI~&z=230619613
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47081731-1&cid=633693816.1679512484&jid=751639410&_u=IEBAAEAAAAAAACAAI~&z=230619613
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-47081731-1&cid=633693816.1679512484&jid=751639410&_u=IEBAAEAAAAAAACAAI~&z=230619613 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Mar 2023 19:14:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F844f3e97-b153-4a18-b087-e858f349c316.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F844f3e97-b153-4a18-b087-e858f349c316.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8ab9fe4465396637b9c70a873634f63
d4e02105d3b968143681ee23ffe08443da8a7968
8f95b0a0bd72b13e993324d417e7a5b06803d9a506be2092a16054797e248982
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F844f3e97-b153-4a18-b087-e858f349c316.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8979
x-amzn-requestid: 2ef93be0-3140-4ee5-82d7-a56e73350e9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEVyoAMF4_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-5ef93dc8183099e43c4679d9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bKtbsfvZ9ooTwHawEQd1g5a4uQQGQfLJWf_QhiFkwRgwhSvW4JbYSA==
via: 1.1 ee32c7a76e2727d565413cc6c352ef48.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:41:23 GMT
age: 77595
etag: "d4e02105d3b968143681ee23ffe08443da8a7968"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e2281cccb4eaff498218cb2e3233776d
ecb9bb2e33bfc0c0cf0a69d827e6bf7d6d0d6e10
f487e24729710d69df876dad05c9d2cd4a030b94cdd816637dfcee6051f55cc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F487E24729710D69DF876DAD05C9D2CD4A030B94CDD816637DFCEE6051F55CC9"
Last-Modified: Mon, 20 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14676
Expires: Wed, 22 Mar 2023 23:19:14 GMT
Date: Wed, 22 Mar 2023 19:14:38 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8795e5b287f501dc39ee441cd6bd7125
9d420cfc40477940eff7fcfc1aee2c7731fd17a5
a2f6bc52d276e1f73a3e823606457e033bccf8eca8631940a55c298f952451ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d4817249d967a77181b5665e8f809c29
d29cfa30c91f05345c31553d0a09e8e0c47ddc92
9bb5b9f3c0ed5e2cd4944b22cde00507b187de394796c2082b2fe5a805dc92f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5670
Cache-Control: max-age=127625
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:38 GMT
Etag: "641a8d01-1d7"
Expires: Fri, 24 Mar 2023 06:41:43 GMT
Last-Modified: Wed, 22 Mar 2023 05:07:13 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9446303f24a6e8e8d138867549399aa2
410a03d7475ec879b8e346f1706aea491e3f1da5
f7d7017ca9dbdf1822739e9baa6f34868504e6ce0d827aeeef82517c5db72960
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 19:14:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
matching.ivitrack.com/sync?realm=ayl&uid=000000000000000000000000b00b1337
200 OK 42 B URL HTTP/2 matching.ivitrack.com/sync?realm=ayl&uid=000000000000000000000000b00b1337
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /sync?realm=ayl&uid=000000000000000000000000b00b1337 HTTP/1.1
Host: matching.ivitrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: istio-envoy
date: Wed, 22 Mar 2023 19:14:37 GMT
content-type: image/gif
content-length: 42
cache-control: public, max-age=86400
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: tag-manager.programmatic.svc.cluster.local:3000/*
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e2281cccb4eaff498218cb2e3233776d
ecb9bb2e33bfc0c0cf0a69d827e6bf7d6d0d6e10
f487e24729710d69df876dad05c9d2cd4a030b94cdd816637dfcee6051f55cc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F487E24729710D69DF876DAD05C9D2CD4A030B94CDD816637DFCEE6051F55CC9"
Last-Modified: Mon, 20 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14676
Expires: Wed, 22 Mar 2023 23:19:14 GMT
Date: Wed, 22 Mar 2023 19:14:38 GMT
Connection: keep-alive
aux.fqtag.com/aux/p
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/p HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain; charset=utf-8
Content-Length: 216
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
HTTP/1.1 204 No Content
Access-Control-Allow-Origin: *
Date: Wed, 22 Mar 2023 19:14:38 GMT
Via: 1.1 google
dpm.demdex.net/ibs:dpid=79908&dpuuid=c:a59f007fbf3384ccc33cc586d5d348f0&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=79908&dpuuid=c:a59f007fbf3384ccc33cc586d5d348f0&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=79908&dpuuid=c:a59f007fbf3384ccc33cc586d5d348f0&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v046-0647cef17.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=79908&dpuuid=c:a59f007fbf3384ccc33cc586d5d348f0&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=47313594528536532863503691745975013877; Max-Age=15552000; Expires=Mon, 18 Sep 2023 19:14:38 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: pjGBqSQLQec=
Content-Length: 0
Connection: keep-alive
contextual.media.net/cksync.php?cs=3&type=ayl&ovsid=000000000000000000000000b00b1337
200 OK 236 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=ayl&ovsid=000000000000000000000000b00b1337
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash a5ddbf3903d9758bafce9e15fd7eb5f7
e26bbbc8d54cc3923796855a8d28a405939dde95
ec3a21a491af4587bee1627d1283c4ec4b36021a7e281dea2ea6e20fd827ce71
GET /cksync.php?cs=3&type=ayl&ovsid=000000000000000000000000b00b1337 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 236
content-type: image/gif
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA"
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Wed, 22 Mar 2023 19:14:38 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 22 Mar 2023 19:14:38 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 88259605ddd591972df38880d6d002ad
41685fd7d475a3e03b12a5995869f47639e37242
fd858b0b50718b9ea2ecac3d63b0c21db3e6345429eb463651c5ce2b973e9748
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:38 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 19 Mar 2023 08:41:13 GMT
Expires: Sun, 26 Mar 2023 08:41:12 GMT
Etag: "41685fd7d475a3e03b12a5995869f47639e37242"
Cache-Control: max-age=306993,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ac0c23d181eb50c-OSL
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=79908&dpuuid=c:a59f007fbf3384ccc33cc586d5d348f0&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=79908&dpuuid=c:a59f007fbf3384ccc33cc586d5d348f0&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=79908&dpuuid=c:a59f007fbf3384ccc33cc586d5d348f0&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v046-07254eae8.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: JBAR/zKhTpo=
Content-Length: 59
Connection: keep-alive
s.seedtag.com/cs/cookiesync/adyoulike?channeluid=000000000000000000000000b00b1337&gdpr=0&gdpr_consent=
204 No Content 0 B URL HTTP/2 s.seedtag.com/cs/cookiesync/adyoulike?channeluid=000000000000000000000000b00b1337&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cs/cookiesync/adyoulike?channeluid=000000000000000000000000b00b1337&gdpr=0&gdpr_consent= HTTP/1.1
Host: s.seedtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 22 Mar 2023 19:14:38 GMT
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT, HEAD
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.facebook.com/v2.5/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df2682b90e96b406%26domain%3Dwww.newsandpromotions.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.newsandpromotions.com%252Ff3212235b5258a%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.newsandpromotions.com%2F&layout=button&locale=en_US&sdk=joey&show_faces=false&width=180
200 OK 0 B URL HTTP/2 www.facebook.com/v2.5/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df2682b90e96b406%26domain%3Dwww.newsandpromotions.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.newsandpromotions.com%252Ff3212235b5258a%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.newsandpromotions.com%2F&layout=button&locale=en_US&sdk=joey&show_faces=false&width=180
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2.5/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df2682b90e96b406%26domain%3Dwww.newsandpromotions.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.newsandpromotions.com%252Ff3212235b5258a%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.newsandpromotions.com%2F&layout=button&locale=en_US&sdk=joey&show_faces=false&width=180 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: 3+g5jCHfuSOmNWdurLLJigf072wlBuAoKKdYJ2WDZ3H+G7nOMRbIdZce7FO5pngOl7n63gXhuAtargUCLcM/tw==
content-length: 0
date: Wed, 22 Mar 2023 19:14:38 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sync.taboola.com/sg/adyoulikertb-network/1/rtb-h/?GDPR=0&GDPR_CONSENT=&taboola_hm=000000000000000000000000b00b1337
200 OK 471 B URL HTTP/2 sync.taboola.com/sg/adyoulikertb-network/1/rtb-h/?GDPR=0&GDPR_CONSENT=&taboola_hm=000000000000000000000000b00b1337
IP
ASN #200478 Taboola.com ltd
Hash 88259605ddd591972df38880d6d002ad
41685fd7d475a3e03b12a5995869f47639e37242
fd858b0b50718b9ea2ecac3d63b0c21db3e6345429eb463651c5ce2b973e9748
GET /sg/adyoulikertb-network/1/rtb-h/?GDPR=0&GDPR_CONSENT=&taboola_hm=000000000000000000000000b00b1337 HTTP/1.1
Host: sync.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 19:14:38 GMT
x-fastly-to-nlb-rtt: 22083
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cdn.luckyorange.com/w.js
200 OK 0 B IP
GET /w.js HTTP/1.1
Host: cdn.luckyorange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 19:14:37 GMT
content-type: application/javascript
cache-control: max-age=14400
cf-bgj: minify
etag: W/"dc0bbcecf2e632d9beb92f4d88b21c2b"
last-modified: Fri, 02 Sep 2022 19:59:48 GMT
vary: Accept-Encoding
via: 1.1 0edd9f6bc061f9d64e77285b1cac290c.cloudfront.net (CloudFront)
x-amz-cf-id: 0yP80Kwu6VmuiW59BSApHBwge5qQ1mFCBjs1KXNGIJdpMefgqoAQ6Q==
x-amz-cf-pop: ARN54-C1
x-cache: Hit from cloudfront
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vqUaq4AW71JhEsq2D3O4NJje%2Ff05AUh0TK6OmAL6t0P5IDmkg9Gro5d%2FCQKvnmTsWIiCi6O8aXQeutLGxU53wFfXrlrmbhZ0eznNAaXN7Tv%2FUpgS6XqPvrlFZnlu%2BpMDnbJP3tk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ac0c238fd7eb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
fo-static.omnitagjs.com/ot_multi.js
200 OK 0 B URL HTTP/2 fo-static.omnitagjs.com/ot_multi.js
IP
ASN #20940 Akamai International B.V.
GET /ot_multi.js HTTP/1.1
Host: fo-static.omnitagjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 16 Mar 2023 11:26:34 GMT
etag: "6412fcea-7d441"
server: ayl-lb-fra02
content-type: application/javascript; charset=UTF-8
pragma: public
access-control-max-age: 86400
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: OPTIONS, GET
access-control-allow-credentials: false
access-control-allow-headers: X-Requested-With, Content-Type
accept-ranges: bytes
x-envoy-upstream-service-time: 2
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=2
expires: Wed, 22 Mar 2023 19:14:39 GMT
date: Wed, 22 Mar 2023 19:14:37 GMT
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=5e300a8e9a7de54b8c707e96d7444aea
200 OK 0 B URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=5e300a8e9a7de54b8c707e96d7444aea
IP
GET /en_US/sdk.js?hash=5e300a8e9a7de54b8c707e96d7444aea HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Referer: http://www.newsandpromotions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 5aedbbc266be8fe019aad9b604fb925a
etag: "dccc48d3df6a6432c40a16fa0d0588e5"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 21 Mar 2024 18:10:30 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: iWU1aDFNiliaix11uJmzJQ==
x-fb-debug: CVj90bgfnXgtVw1/mYkZzaSPwHW+pe3hOmp1zFKi+lA0DG4+j3K79PBjCy/qq1yp2bEObyBGB70iipZW5Ksu3w==
content-length: 88590
x-fb-trip-id: 1679558926
date: Wed, 22 Mar 2023 19:14:37 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
settings.luckyorange.net/?u=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&s=49801
200 OK 0 B URL HTTP/2 settings.luckyorange.net/?u=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&s=49801
IP
GET /?u=http%3A%2F%2Fwww.newsandpromotions.com%2F%3Futm_source%3D0%26utm_medium%3Dcpc%26utm_campaign%3D0%26utm_content%26utm_term&s=49801 HTTP/1.1
Host: settings.luckyorange.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Origin: http://www.newsandpromotions.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 19:14:39 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-headers: Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,Keep-Alive,X-Requested-With,If-Modified-Since
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: http://www.newsandpromotions.com
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Ej6pdlBVH0alh5RiC8dYxHWrQpLCdmNkjzqe3Fjj8Gol4k%2BFZsMf4kjyvUatEXQMa6SSGpCHt9D86tz8srJ8JsruENTKB1KJRogBHa8I2TXf%2B3K6%2Fuj8A1BVqahdhpUeO%2B%2FRdpzNltuRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ac0c23a7c80b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.newsandpromotions.com/wp-content/plugins/m-wp-popup/js/wpp-popup-frontend.js?ver=1.0
200 OK 0 B URL HTTP/1.1 www.newsandpromotions.com/wp-content/plugins/m-wp-popup/js/wpp-popup-frontend.js?ver=1.0
IP
GET /wp-content/plugins/m-wp-popup/js/wpp-popup-frontend.js?ver=1.0 HTTP/1.1
Host: www.newsandpromotions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.newsandpromotions.com/?utm_source=0&utm_medium=cpc&utm_campaign=0&utm_content&utm_term
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 19:14:36 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 12:36:58 GMT
ETag: "8cd5-5e76085030e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Pragma: public
Cache-Control: public
Content-Length: 11107
Content-Type: application/x-javascript
Via: 1.1 google
aa.agkn.com/adscores/g.pixel?sid=9212289188&_puid=c:a59f007fbf3384ccc33cc586d5d348f0&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D
302 Found 0 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212289188&_puid=c:a59f007fbf3384ccc33cc586d5d348f0&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D
IP
GET /adscores/g.pixel?sid=9212289188&_puid=c:a59f007fbf3384ccc33cc586d5d348f0&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.newsandpromotions.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 22 Mar 2023 19:14:37 GMT
location: https://d.agkn.com/pixel/10751/?che=1679512477661&ip=91.90.42.154&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D216613104463004254698
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
set-cookie: ab=0001%3AVkx0vT76tw5a8ZuU2OSGtUc5KcEFHTP2; Path=/; Domain=.agkn.com; Expires=Fri, 22-Mar-2024 19:14:37 GMT; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
209.148.95.13
23.38.200.22
54.171.219.155
35.157.102.118
185.255.84.150
104.18.32.68
141.226.228.48
157.240.200.14
31.13.72.36
216.145.109.98
27.111.12.93