www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
301 Moved Permanently 167 B URL HTTP/1.1 www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths HTTP/1.1
Host: www.news5cleveland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 28 Jan 2023 18:37:53 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
X-Cache: Redirect from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lLjX1aXAm5jxBACWSVeJ73WTQT9JPKhaZor3S-HWhYnqYF3ZWcP3IA==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13143
Expires: Sat, 28 Jan 2023 22:16:56 GMT
Date: Sat, 28 Jan 2023 18:37:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15601
Expires: Sat, 28 Jan 2023 22:57:54 GMT
Date: Sat, 28 Jan 2023 18:37:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4332
Expires: Sat, 28 Jan 2023 19:50:06 GMT
Date: Sat, 28 Jan 2023 18:37:54 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 18:35:31 GMT
content-type: application/json
age: 143
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mwThMs9sQxciiWGDIRNTM0fkZ3KhwOoT8WmxoK41kll+E1rDXyrodDiP4szBa77Cf4vmu6hmTNY=
x-amz-request-id: FNVJBAXJ4A8AWSXR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 17:50:00 GMT
age: 2874
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 17:49:03 GMT
age: 2931
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 18:37:54 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
200 OK 71 kB URL HTTP/1.1 www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (48149), with LF, NEL line terminators
Hash 718f3ffd1912eba247208ce75a7ce358
1546892c26d8db62c095729a6256756a08cb2f98
e078acd2692e492f46de6094b99c4793cee478a75785a5ad13bbe54c35ba388f
GET /news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths HTTP/1.1
Host: www.news5cleveland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=240
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors 'self' https://cms.scrippsdigital.com
Date: Sat, 28 Jan 2023 18:37:54 GMT
Server: N/A
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Powered-By: Brightspot
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DsYVNBNqanIWaoY_5wjvOEAAoXa2uZYt9OXOdtpSgPUZMZIDPr8qWQ==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13991
Expires: Sat, 28 Jan 2023 22:31:05 GMT
Date: Sat, 28 Jan 2023 18:37:54 GMT
Connection: keep-alive
cdn.cookielaw.org/scripttemplates/otSDKStub.js
200 OK 8.1 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
File type ASCII text, with very long lines (24742)
Hash 59d0843ea535a679e836bfdc4fd847c9
8c8938ff086a2b05eb9e431cb8ff7150f50c7b48
6f5b514345f75508ac2e5827b6e50c804a3d5ec2aa44975ec6a2bdfcb438fd17
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:54 GMT
content-type: application/javascript
content-length: 8053
content-encoding: gzip
content-md5: WdCEPqU1pnnoNr/cT9hHyQ==
last-modified: Wed, 25 Jan 2023 15:15:48 GMT
etag: 0x8DAFEE709BC346E
x-ms-request-id: 85e8490b-e01e-017a-6c1a-31f4fe000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 86370
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790bd7917f9db524-OSL
X-Firefox-Spdy: h2
use.typekit.net/tsu4adm.css
200 OK 1.7 kB URL HTTP/2 use.typekit.net/tsu4adm.css
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (516)
Hash 45ae8ddfb37f7b1c038cc6416b571a8a
4be8567782fa7f363ec8e0f63a7807aa51da1573
4e586a19177aa147a7155e54709aea92574363a049f3292bd3e5128a3980c7eb
GET /tsu4adm.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 1740
date: Sat, 28 Jan 2023 18:37:54 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash a10c6e58c3b2d93009af0bbf0c1b9876
e1770e14d56bf4f92719aeaf44dc21933230a7d2
ed84c78a7315e66162a609a32a50ebb016243e8f8516248e09531eeef0c3b5ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4557
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:54 GMT
Last-Modified: Sat, 28 Jan 2023 17:21:57 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 278
p.typekit.net/p.css?s=1&k=tsu4adm&ht=tk&f=137.138.139.140.169.170.171.172.175.176.141.142.143.144.147.148.151.152.153.154.155.156.157.160.161.162.165.166.167.168&a=15199297&app=typekit&e=css
200 OK 5 B URL HTTP/2 p.typekit.net/p.css?s=1&k=tsu4adm&ht=tk&f=137.138.139.140.169.170.171.172.175.176.141.142.143.144.147.148.151.152.153.154.155.156.157.160.161.162.165.166.167.168&a=15199297&app=typekit&e=css
IP
ASN #20940 Akamai International B.V.
Hash 83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=tsu4adm&ht=tk&f=137.138.139.140.169.170.171.172.175.176.141.142.143.144.147.148.151.152.153.154.155.156.157.160.161.162.165.166.167.168&a=15199297&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Thu, 28 Jul 2022 22:24:50 GMT
etag: "62e30cb2-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:37:54 GMT
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.1.0/css/all.css
200 OK 10 kB URL HTTP/2 use.fontawesome.com/releases/v5.1.0/css/all.css
IP
File type ASCII text, with very long lines (45507)
Hash ace08064b3519732c7a6cdf96a80da43
7b311236555173af252e042f3b897204f34c21d1
4e28bb62ac95f980b31ac889cc43519b1974b216a3071e3f03658b925534450e
GET /releases/v5.1.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:54 GMT
content-type: text/css
x-amz-id-2: BV6DI4dblZj5AM1Yj6JzfC4pjlcApSnrKe/4gIoHYPBkaGCvfZw3PgRY5WL3w+Q38ArA417Be08=
x-amz-request-id: D57375HHS0NPYTTA
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:30:31 GMT
etag: W/"826c57385f3d35cfed5478ba7b1f5c03"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 101130
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BQHcoY8JOj%2FAM%2FMOfOwjKqAW2imkSmtCCM2UHhPO%2BN2D0zis2rXOoOuTf1FV1bFy8y3%2BDOPxvFpqzGE4NZveyA2RaQbPE%2B%2F9bwTdtbg7YwTK2apgCYXQ0Lu6D0GuDgEuuWK4wmpz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790bd7925b0f0712-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bbf09dfd1faa685c5808c1268df35d19
718487329f3c74e9de71edb86adfcd11b0ae641d
0432319ee88bf074c446e49f8ab5f167cab79c2338f8b2c8d7266a13dd0674e8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 18:37:54 GMT
Last-Modified: Sat, 28 Jan 2023 18:13:00 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bzm7aJhsRc4NxebYAytOGuLy6asVPqoxQaQTGBtKXQgakYJEG8gDsw==
Age: 1494
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bbf09dfd1faa685c5808c1268df35d19
718487329f3c74e9de71edb86adfcd11b0ae641d
0432319ee88bf074c446e49f8ab5f167cab79c2338f8b2c8d7266a13dd0674e8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155710
Date: Sat, 28 Jan 2023 18:37:54 GMT
Etag: "63d51126-1d7"
Expires: Mon, 30 Jan 2023 13:53:04 GMT
Last-Modified: Sat, 28 Jan 2023 12:12:22 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ifmLCIB0lDHNJiVXTziXrGPxI6XAg-yXVMS80nZ7A3LMO_9lYByxFw==
Age: 6042
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bbf09dfd1faa685c5808c1268df35d19
718487329f3c74e9de71edb86adfcd11b0ae641d
0432319ee88bf074c446e49f8ab5f167cab79c2338f8b2c8d7266a13dd0674e8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150404
Date: Sat, 28 Jan 2023 18:37:54 GMT
Etag: "63d51126-1d7"
Expires: Mon, 30 Jan 2023 12:24:38 GMT
Last-Modified: Sat, 28 Jan 2023 12:12:22 GMT
Server: ECS (dcb/7EA7)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5Ds-H4kDW_R9inoFzd6xo9cFaU-3aObMvbKWYClaslwnWYc3HdCeTw==
Age: 736
ewscripps.brightspotcdn.com/resource/00000185-e51e-d575-a3ad-f7bf68330000/styleguide/All.min.095b19a9593893b120b4626364e057de.gz.js
200 OK 105 kB URL HTTP/1.1 ewscripps.brightspotcdn.com/resource/00000185-e51e-d575-a3ad-f7bf68330000/styleguide/All.min.095b19a9593893b120b4626364e057de.gz.js
IP
File type Unicode text, UTF-8 text, with very long lines (32011), with LF, NEL line terminators
Size 105 kB (104861 bytes)
Hash a54d4386d6c47df974eb8c9ec32feb42
bbdac1e9c8dcde6d215c70b56bed5e8d8b0df16c
a016b0ac806267ac177e1f11b8d5b32221de18332a1c522ce3f2582502fb8e04
GET /resource/00000185-e51e-d575-a3ad-f7bf68330000/styleguide/All.min.095b19a9593893b120b4626364e057de.gz.js HTTP/1.1
Host: ewscripps.brightspotcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 104861
Connection: keep-alive
Date: Tue, 24 Jan 2023 18:50:58 GMT
Last-Modified: Tue, 24 Jan 2023 18:50:56 GMT
ETag: "a54d4386d6c47df974eb8c9ec32feb42"
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IJkpAhgOkEpLGbOYBu9ZKf9mvexs8rDvBZZ5OfcbtbOjiFldbS0egg==
Age: 344818
ewscripps.brightspotcdn.com/resource/00000185-e51e-d575-a3ad-f7bf68330000/styleguide/All.min.1e823b4c67d3b34bbaf82212958d0183.gz.css
200 OK 21 kB URL HTTP/1.1 ewscripps.brightspotcdn.com/resource/00000185-e51e-d575-a3ad-f7bf68330000/styleguide/All.min.1e823b4c67d3b34bbaf82212958d0183.gz.css
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 63dc8d15009425bdf7d94a6bffe0162c
d767293b270911644161de8f6ba54ad741746761
f085a8067ee0cb48afb4ac2f8acc3e0186b3b6c8e9d93f049ad851fdba652e18
GET /resource/00000185-e51e-d575-a3ad-f7bf68330000/styleguide/All.min.1e823b4c67d3b34bbaf82212958d0183.gz.css HTTP/1.1
Host: ewscripps.brightspotcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 21252
Connection: keep-alive
Date: Tue, 24 Jan 2023 18:50:58 GMT
Last-Modified: Tue, 24 Jan 2023 18:50:55 GMT
ETag: "63dc8d15009425bdf7d94a6bffe0162c"
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rRLq30sm3dM8hwn4eAVa3wVsf6OHQo6HY7CHjZ88xkW6QvgkAvyFvA==
Age: 344818
www.news5cleveland.com/styleguide/assets/Blank.gif
200 OK 57 B URL HTTP/1.1 www.news5cleveland.com/styleguide/assets/Blank.gif
IP
File type GIF image data, version 87a, 16 x 9\012- data
Hash 38461a487eac6907f06a11ec9ceb4974
b486a0cb7a9bb25e750aafee73673f82a18f14c5
e4447831baf6690d632168390edfd95679cb7b5a09aec2c54d47b0a2343e54aa
GET /styleguide/assets/Blank.gif HTTP/1.1
Host: www.news5cleveland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/gif;charset=UTF-8
Content-Length: 57
Connection: keep-alive
Cache-Control: public, max-age=31536000
Content-Security-Policy: frame-ancestors 'self' https://cms.scrippsdigital.com
Date: Sun, 02 Oct 2022 01:18:50 GMT
Server: N/A
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Vzx4STKgJ4WKxmKCiQVjibOOdQuvmjHFqVyi0KHmJ4HLrdbT9ZZX_g==
Age: 10257545
ewscripps.brightspotcdn.com/dims4/default/c034929/2147483647/strip/true/crop/413x133+0+0/resize/400x129!/quality/90/?url=http%3A%2F%2Fewscripps-brightspot.s3.amazonaws.com%2Fd0%2F64%2F3011cf464cc6a78bd636035b4c50%2Fmain-logo.png
200 OK 17 kB URL HTTP/1.1 ewscripps.brightspotcdn.com/dims4/default/c034929/2147483647/strip/true/crop/413x133+0+0/resize/400x129!/quality/90/?url=http%3A%2F%2Fewscripps-brightspot.s3.amazonaws.com%2Fd0%2F64%2F3011cf464cc6a78bd636035b4c50%2Fmain-logo.png
IP
File type PNG image data, 400 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash 9b957822a673c3988f6e2f90f7890404
2f0efa0f090d2fb89aeccdce10940480b81b647a
01f2c6f9e4ec3d1db5c04bc0457e83e6544d1bf9c948c3b9f135325c8e3ba01c
GET /dims4/default/c034929/2147483647/strip/true/crop/413x133+0+0/resize/400x129!/quality/90/?url=http%3A%2F%2Fewscripps-brightspot.s3.amazonaws.com%2Fd0%2F64%2F3011cf464cc6a78bd636035b4c50%2Fmain-logo.png HTTP/1.1
Host: ewscripps.brightspotcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 17113
Connection: keep-alive
Cache-Control: max-age=31536000, public
Date: Thu, 19 Jan 2023 07:36:59 GMT
Edge-Control: downstream-ttl=31536000
ETag: 00e8ed4a35e9a0ffcf43e52bc99fb3b8
Expires: Fri, 19 Jan 2024 07:36:59 GMT
Server: Apache
X-Robots-Tag: nofollow
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VfLJQY5mqFPse_-BnrlaTuyLSTF5mIzIJ0VQ7vEa4bOH1THACxQhkQ==
Age: 817256
ewscripps.brightspotcdn.com/dims4/default/62e7536/2147483647/strip/true/crop/480x360+0+0/resize/480x360!/format/webp/quality/90/?url=http%3A%2F%2Fewscripps-brightspot.s3.amazonaws.com%2F62%2Fd8%2F814f08964a0cb26e0cae43ba760f%2Fnational-literacy-week-2023-copy.jpg
200 OK 28 kB URL HTTP/1.1 ewscripps.brightspotcdn.com/dims4/default/62e7536/2147483647/strip/true/crop/480x360+0+0/resize/480x360!/format/webp/quality/90/?url=http%3A%2F%2Fewscripps-brightspot.s3.amazonaws.com%2F62%2Fd8%2F814f08964a0cb26e0cae43ba760f%2Fnational-literacy-week-2023-copy.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 480x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4810172a41bfb6b6aa86ada38ad757c2
23b8d8dd0648ce24373fad3d32d4779f8efe482c
84148e1a445befacbdc82fcac81c13d2b32245cac91930766ef5c20cbd6251a4
GET /dims4/default/62e7536/2147483647/strip/true/crop/480x360+0+0/resize/480x360!/format/webp/quality/90/?url=http%3A%2F%2Fewscripps-brightspot.s3.amazonaws.com%2F62%2Fd8%2F814f08964a0cb26e0cae43ba760f%2Fnational-literacy-week-2023-copy.jpg HTTP/1.1
Host: ewscripps.brightspotcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 28148
Connection: keep-alive
Cache-Control: max-age=31536000, public
Date: Sat, 21 Jan 2023 00:50:22 GMT
Edge-Control: downstream-ttl=31536000
ETag: 74952f7895c2cc01b2a903b174d22f88
Expires: Sun, 21 Jan 2024 00:50:22 GMT
Server: Apache
X-Robots-Tag: nofollow
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: O7KuoekYVoVYGVx1cKJ-L-KXizgEsf5M9s3ybV7cH6T6TbOiiOnuLQ==
Age: 668853
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wadkJD9zVodrPL4K+SibIg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /nyKVXFQ2xbRWu19B6DBYaoRm7o=
ocsp.digicert.com/
200 OK 280 B IP
Hash 80bd38dbbba2c622765d84927f15e043
8e16e3799ed64a86d1597ae0748c050755df99bd
2b217451165991f85052d4cdfe8e1061d6eed790da3774dd0bb8794fb83fa501
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3251
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Last-Modified: Sat, 28 Jan 2023 17:43:44 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3
200 OK 17 kB URL HTTP/2 use.typekit.net/af/efe4a5/00000000000000007735e609/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 16560, version 1.0\012- data
Hash 21776237ce9fa23dd98ad23252d6a3fa
bedf8f707c96c0cdb609c652828e797dcd214308
b4096925f34c85d0c0e934ad77c44165dcd66fecc354c153784d246f00911da5
GET /af/efe4a5/00000000000000007735e609/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 16560
etag: "ef52ad3657e4d4a42c21db6c00d5c7ccc649bc94"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 28 Jan 2023 18:37:55 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 9351606f8b5882d0df4472db2bce186a
66c64c966fdcacfb510fd071d867068fa426f053
99bc0a1045436ecc89c3934c10914c951aef9d6d5950a0cc3c6f2b8eac17ae78
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1589
Cache-Control: max-age=95841
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Etag: "63d438af-116"
Expires: Sun, 29 Jan 2023 21:15:16 GMT
Last-Modified: Fri, 27 Jan 2023 20:48:47 GMT
Server: ECS (amb/6BBD)
X-Cache: HIT
Content-Length: 278
use.typekit.net/af/8738d8/00000000000000007735e611/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n8&v=3
200 OK 17 kB URL HTTP/2 use.typekit.net/af/8738d8/00000000000000007735e611/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n8&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 16880, version 1.0\012- data
Hash 6a1d05018e31f55e279ffe04ec9ea9c1
0c2fb9790414353667bf93757473893fbe404e2a
5d8f24de649d274c051960845b51a0407362d6b4c80de23985e648d3378708f5
GET /af/8738d8/00000000000000007735e611/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n8&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 16880
etag: "a5565f97e4389f39e94f7880b2c8088023e4d88a"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 28 Jan 2023 18:37:55 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/2555e1/00000000000000007735e603/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3
200 OK 17 kB URL HTTP/2 use.typekit.net/af/2555e1/00000000000000007735e603/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 16832, version 1.0\012- data
Hash 99cfcab4e91c1bc97731bcfe27ac5b29
740fcbaba11d23a5b9daa66fbd99ed8c4250fe6d
81a6361b1f6ff5f9f6ca05b773fb993d7b7b3f668635ccba4379fa3ecb9a7e3e
GET /af/2555e1/00000000000000007735e603/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 16832
etag: "96c7595dad6bb306bf9cc4c7a3b3d28654c7d636"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 28 Jan 2023 18:37:55 GMT
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-2TJH
200 OK 48 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-2TJH
IP
File type ASCII text, with very long lines (14993)
Hash 203862a653eea1d763191dbddec1d77e
8d30b570295ae60e2673b9469522ce5fe14bce43
49363f7e34d4bad4ecee505339e17bb1714bc3767a947a83478b02a3999a32f1
GET /gtm.js?id=GTM-2TJH HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 28 Jan 2023 18:37:55 GMT
expires: Sat, 28 Jan 2023 18:37:55 GMT
cache-control: private, max-age=900
last-modified: Sat, 28 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48538
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
use.typekit.net/af/3322cc/00000000000000007735e616/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i4&v=3
200 OK 17 kB URL HTTP/2 use.typekit.net/af/3322cc/00000000000000007735e616/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 17212, version 1.0\012- data
Hash 133a3f4bada71d50c6dba1e84cd2f86e
89387c1bedc41f76e4234e623eee894b3e06fc52
fdcb74f626ef8f1059c0e3bd503017b8fdda4a54afcc26a4da734f5fd5c7a87a
GET /af/3322cc/00000000000000007735e616/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 17212
etag: "71f986ad2b4d0b6a0e5a056380e0c8c577137ae8"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 28 Jan 2023 18:37:55 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fab886d35a27f1ea89e95d08408e131c
ca2e7c94fa954aa477f1756d61ac9f94349bdc55
102b20858c47034b67115fcee25eb9c702e5a10119a3ee38bb1a6f1fe7cb5947
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5550
Cache-Control: max-age=88683
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Etag: "63d40d40-1d7"
Expires: Sun, 29 Jan 2023 19:15:58 GMT
Last-Modified: Fri, 27 Jan 2023 17:43:28 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
geolocation.onetrust.com/cookieconsentpub/v1/geo/location/dnsfeed
200 OK 60 kB URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location/dnsfeed
IP
Hash f55a75ecc6ad69fcc1654bff128db6a0
7e8c70f454486845367c5b8312bd6fa3ba8c9be8
fd9476ef5f464dfc27d5a1132abc7819415c14a50c682d7657cf7eedd8c1b415
GET /cookieconsentpub/v1/geo/location/dnsfeed HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:55 GMT
content-type: text/javascript
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 790bd7938f2ab506-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f4781149f5e88ff9a8ccc2636f637922
95aa171bbd154e3aafdfb2baa5f8c782f00bb8b0
8a95863f1e66dcd9f081db4425a2ae8bbd8c24aabccabb076e88215379710859
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 18:37:55 GMT
Etag: "63d50bc2-1d7"
Server: ECS (dcb/7FA8)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: On4N_FDwxPwAN2bZv9tknsNshOMmOwhTrz_8vaHokJaFcxLl85b4DQ==
use.fontawesome.com/releases/v5.1.0/webfonts/fa-brands-400.woff2
200 OK 63 kB URL HTTP/2 use.fontawesome.com/releases/v5.1.0/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 63376, version 1.0\012- data
Hash f319eac1c755f9929fd856720ce1695e
0a885a5dbd97bd9f4fb1821eb82f2135471faff9
62b5e7ae9e2ed60dcd7cb2e0823dd0884575f2176aff629f2df1e912dfae20e1
GET /releases/v5.1.0/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:55 GMT
content-type: font/woff2
content-length: 63376
x-amz-id-2: icMJrxbo/OqaWTaI0Tk1kAAZDtu60VMChJjGid/+NzoFXqtUCnZCN4G3czrk7QGu+Ae3pITUuT0=
x-amz-request-id: HRK8KHJW2V0SHMZJ
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:30:49 GMT
etag: "f319eac1c755f9929fd856720ce1695e"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2383933
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lmo3pDiBSue5aYddK%2B6Dd3g7zR%2B5bfwJPxu2zikSNB8DWFqYN43%2FyxWRr6cEbqS0%2FZmyxG3uNGYlDWy8%2Fs%2FpnsoKljDWdcIJnbN%2FAJ2N9HoaM6VmLh61hTPoMHxl9ChBbUVrcn83"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790bd7940ce20712-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
assets.scrippsdigital.com/cms/images/logo-scripps.png
200 OK 3.5 kB URL HTTP/1.1 assets.scrippsdigital.com/cms/images/logo-scripps.png
IP
File type PNG image data, 34 x 34, 8-bit/color RGB, non-interlaced\012- data
Hash f46791d665054bf21da09492d448e1d2
4b6a560aa122c68836e61beb63ea8c0a6d1366d4
d66c157e60a88623fc6bb87393d303096b3a2db235ad33c1cdb80ed71ee38c42
GET /cms/images/logo-scripps.png HTTP/1.1
Host: assets.scrippsdigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3532
Connection: keep-alive
x-amz-replication-status: COMPLETED
Last-Modified: Mon, 23 Oct 2017 14:04:11 GMT
x-amz-version-id: 8lNexGmb6tKD4SPVOeXslwnzBtFWYJoV
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 28 Jan 2023 05:33:18 GMT
ETag: "f46791d665054bf21da09492d448e1d2"
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9K1Tk06WGySzc2mO2zhSRFyuv48QXRl4-7mQ36ACUeTOFbOcI4mDDA==
Age: 47221
analyticssystems.net/api/v2/client/impression/6d6d25e3-5be4-444b-82ae-a8f0bb892234?rand=984862
202 Accepted 0 B URL HTTP/2 analyticssystems.net/api/v2/client/impression/6d6d25e3-5be4-444b-82ae-a8f0bb892234?rand=984862
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v2/client/impression/6d6d25e3-5be4-444b-82ae-a8f0bb892234?rand=984862 HTTP/1.1
Host: analyticssystems.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Sat, 28 Jan 2023 18:37:55 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
x-request-id: Fz6M8FOluFIiVz8BvrMx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DR3dqqylXuvXhjZwnjWSo1NY5R%2Fhr2yEPK4ZpUGHcxKWWLkwP165hLCesnxuVK9Lxk1i18ThEPl8sVeEjkmmyRtG8c5mJdjNkgTzlpTF5URA8yifbf8vcATQYo50oFLJDf4wMxyanQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790bd793ef12b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/000000/000000.json
404 Not Found 675 B URL HTTP/2 cdn.cookielaw.org/consent/000000/000000.json
IP
Hash 36c69d59e4b69472fbabc2a441556a0c
f9776f79d9cdd278989b277223730179969ecd1f
c9e84afe3b97ec46418eabe3fbf5ca8679328728c0a6c7a44ac2bac97ca73781
GET /consent/000000/000000.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sat, 28 Jan 2023 18:37:55 GMT
content-type: application/xml
x-ms-request-id: f880a281-701e-0119-7f47-33b2db000000
x-ms-version: 2009-09-19
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
expires: Sun, 29 Jan 2023 18:37:55 GMT
cache-control: public, max-age=86400
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790bd79359efb524-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 9351606f8b5882d0df4472db2bce186a
66c64c966fdcacfb510fd071d867068fa426f053
99bc0a1045436ecc89c3934c10914c951aef9d6d5950a0cc3c6f2b8eac17ae78
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1589
Cache-Control: max-age=95841
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Etag: "63d438af-116"
Expires: Sun, 29 Jan 2023 21:15:16 GMT
Last-Modified: Fri, 27 Jan 2023 20:48:47 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 278
d3plfjw9uod7ab.cloudfront.net/6d6d25e3-5be4-444b-82ae-a8f0bb892234.js
200 OK 25 kB URL HTTP/2 d3plfjw9uod7ab.cloudfront.net/6d6d25e3-5be4-444b-82ae-a8f0bb892234.js
IP
File type ASCII text, with very long lines (36293)
Hash dff5917feb7ae6ec36b98cb92b30bf88
aa1f332df87d4d324fddca5c0e1b2603a629e872
da745e0a40001618a4c5eb65f20d1542bb56994a1a939b08142f382f946e7b64
GET /6d6d25e3-5be4-444b-82ae-a8f0bb892234.js HTTP/1.1
Host: d3plfjw9uod7ab.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 13:16:24 GMT
x-amz-version-id: 2YmoUKxvEerAgqYu5_hCgTSn3.Rs3vac
server: AmazonS3
content-encoding: gzip
date: Sat, 28 Jan 2023 18:25:23 GMT
cache-control: max-age=3600, public
etag: W/"e4a531bd392e3e19506b373bc5c8c363"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Q0I7RbdHVawNDxNdK8ElyjrfkJ2HOXfz4SA4Qvch0OEzm3zPIrDTqw==
age: 752
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ab04da9bc46246cc0001464e7f6b5e19
01ce4f7004aec7a24d4545a1e742ab6a1e639b48
22e519a39cb2e7e5f6da23d35f4498aa7a2d00e06613fd3bbf8de8a62ed2d354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.news5cleveland.com/breaking-news-alerts?_renderer=json
200 OK 111 kB URL HTTP/1.1 www.news5cleveland.com/breaking-news-alerts?_renderer=json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 111 kB (110630 bytes)
Hash 413a80154808718f44a753a3108d12f9
0573b58bdfb5b65928a7f32829f3ba392f4fd0c7
26b09f652b708b7fe34a381582e6698a4d05ae9a9c151eff61370cc0e4ccc1f8
GET /breaking-news-alerts?_renderer=json HTTP/1.1
Host: www.news5cleveland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
Connection: keep-alive
Cookie: usprivacy=1---
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=240
Content-Security-Policy: frame-ancestors 'self' https://cms.scrippsdigital.com
Date: Sat, 28 Jan 2023 18:35:51 GMT
Server: N/A
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Powered-By: Brightspot
X-Robots-Tag: nofollow
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: m_ZXpfKW1waE-ytL-EH2XCRxbCqobENyCk3epNVu879WvaSk40LCKA==
Age: 124
www.news5cleveland.com/weather/alerts?_renderer=json
200 OK 119 kB URL HTTP/1.1 www.news5cleveland.com/weather/alerts?_renderer=json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 119 kB (119089 bytes)
Hash d0567e475cbae056d1d20e7da8bf439c
ab6fbd7530c5f49f921092aa5e91a896e1bbc63f
741d6933f33e3560b691b2df304a0d0aa337cfdb50dd79e9bbe8a48982855bdc
GET /weather/alerts?_renderer=json HTTP/1.1
Host: www.news5cleveland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
Connection: keep-alive
Cookie: usprivacy=1---
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=240
Content-Security-Policy: frame-ancestors 'self' https://cms.scrippsdigital.com
Date: Sat, 28 Jan 2023 18:35:50 GMT
Server: N/A
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Powered-By: Brightspot
X-Robots-Tag: nofollow
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cFCT2Vi15rf2axtHutsxztf_m23Ug4kVx55Gc6wEl35F1qvvAxqT_g==
Age: 125
assets.scrippsdigital.com/cms/video/player.html?video=https://content.uplynk.com/0d6a2b156eac42abb7e59bb3778e0e07.m3u8&mp4=http://stgec-ausw.uplynk.com/80C078/ausw/slices/0d6/b2c1c5c2af374f52af57ddcae54c6663/0d6a2b156eac42abb7e59bb3778e0e07/0d6a2b156eac42abb7e59bb3778e0e07_g.mp4&purl=/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ads.iu=/6088/ssp.wews/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ads.proxy=1&poster=https://stgec-ausw.uplynk.com/80C078/ausw/slices/0d6/b2c1c5c2af374f52af57ddcae54c6663/0d6a2b156eac42abb7e59bb3778e0e07/poster_728a25aa4f1d4f4d8ce581ebe378bea2.jpg&title=Ratepayers%20have%20helped%20Cleveland%20Water%20spend%20%241%20million%20in%20promoting%20itself&kw=%20Public%20Utility%20Director%20Robert%20Davis%20t%2C%20%20ratepayers%2C%20promotions%2CCleveland%20Water%20Department%2C%20sewer&autoplay=true&contplay=*recent&mute=0&tags=News%2CInvestigations%2CHomepage%20Showcase%2CLocal%20News%2CMobile%20Showcase§ion=Investigations&cust_params=temp%3D%26weather%3D&host=news5cleveland.com&s=wews
200 OK 46 kB URL HTTP/1.1 assets.scrippsdigital.com/cms/video/player.html?video=https://content.uplynk.com/0d6a2b156eac42abb7e59bb3778e0e07.m3u8&mp4=http://stgec-ausw.uplynk.com/80C078/ausw/slices/0d6/b2c1c5c2af374f52af57ddcae54c6663/0d6a2b156eac42abb7e59bb3778e0e07/0d6a2b156eac42abb7e59bb3778e0e07_g.mp4&purl=/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ads.iu=/6088/ssp.wews/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ads.proxy=1&poster=https://stgec-ausw.uplynk.com/80C078/ausw/slices/0d6/b2c1c5c2af374f52af57ddcae54c6663/0d6a2b156eac42abb7e59bb3778e0e07/poster_728a25aa4f1d4f4d8ce581ebe378bea2.jpg&title=Ratepayers%20have%20helped%20Cleveland%20Water%20spend%20%241%20million%20in%20promoting%20itself&kw=%20Public%20Utility%20Director%20Robert%20Davis%20t%2C%20%20ratepayers%2C%20promotions%2CCleveland%20Water%20Department%2C%20sewer&autoplay=true&contplay=*recent&mute=0&tags=News%2CInvestigations%2CHomepage%20Showcase%2CLocal%20News%2CMobile%20Showcase§ion=Investigations&cust_params=temp%3D%26weather%3D&host=news5cleveland.com&s=wews
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (46290), with no line terminators
Hash 6027a32cef30734e776d2be68fac6a53
c00e364ddcb2b7065e045640d2360a7a3d5386d8
e279a9027d865c42fb3f1d4f6563cb2684de9add9627c481a390d198229ca78d
GET /cms/video/player.html?video=https://content.uplynk.com/0d6a2b156eac42abb7e59bb3778e0e07.m3u8&mp4=http://stgec-ausw.uplynk.com/80C078/ausw/slices/0d6/b2c1c5c2af374f52af57ddcae54c6663/0d6a2b156eac42abb7e59bb3778e0e07/0d6a2b156eac42abb7e59bb3778e0e07_g.mp4&purl=/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ads.iu=/6088/ssp.wews/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ads.proxy=1&poster=https://stgec-ausw.uplynk.com/80C078/ausw/slices/0d6/b2c1c5c2af374f52af57ddcae54c6663/0d6a2b156eac42abb7e59bb3778e0e07/poster_728a25aa4f1d4f4d8ce581ebe378bea2.jpg&title=Ratepayers%20have%20helped%20Cleveland%20Water%20spend%20%241%20million%20in%20promoting%20itself&kw=%20Public%20Utility%20Director%20Robert%20Davis%20t%2C%20%20ratepayers%2C%20promotions%2CCleveland%20Water%20Department%2C%20sewer&autoplay=true&contplay=*recent&mute=0&tags=News%2CInvestigations%2CHomepage%20Showcase%2CLocal%20News%2CMobile%20Showcase§ion=Investigations&cust_params=temp%3D%26weather%3D&host=news5cleveland.com&s=wews HTTP/1.1
Host: assets.scrippsdigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 46290
Connection: keep-alive
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 24 Jan 2023 19:06:13 GMT
x-amz-meta-s3cmd-attrs: md5:6027a32cef30734e776d2be68fac6a53
x-amz-version-id: HkTZTkZVLa.IB7CPKqp6dnd0vNHHoAF.
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 28 Jan 2023 06:40:28 GMT
ETag: "6027a32cef30734e776d2be68fac6a53"
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cHzunCl4OZ29NptFaCMOvW_UIbvlb11CEXchXNC0aUvvBtVXLOUHTA==
Age: 43048
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2975
Expires: Sat, 28 Jan 2023 19:27:30 GMT
Date: Sat, 28 Jan 2023 18:37:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2975
Expires: Sat, 28 Jan 2023 19:27:30 GMT
Date: Sat, 28 Jan 2023 18:37:55 GMT
Connection: keep-alive
www.news5cleveland.com/weather/school-closings-delays?_renderer=json
200 OK 118 kB URL HTTP/1.1 www.news5cleveland.com/weather/school-closings-delays?_renderer=json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 118 kB (118416 bytes)
Hash 030bc17eac115c663a439cd6bd591556
c077ace3dd8b21fea36b493d1511d3e4f39c23b9
19e4320c099086063bcd8066af17d725ddae338116e3d433ab993ee22ce4050a
GET /weather/school-closings-delays?_renderer=json HTTP/1.1
Host: www.news5cleveland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
Connection: keep-alive
Cookie: usprivacy=1---
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=240
Content-Security-Policy: frame-ancestors 'self' https://cms.scrippsdigital.com
Date: Sat, 28 Jan 2023 18:35:52 GMT
Server: N/A
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Powered-By: Brightspot
X-Robots-Tag: nofollow
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FeQNKsAYxL0-4bQl3pwp789suQAJE2OzvnSseCqkjZtTabLCWzsWXA==
Age: 123
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4afa01d2ffe17f8378e4c0b5afd4608
f5c7e2137efa07a207427a6b6fe1df541f85ea25
84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13375
x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CxF6BoAMFyGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: otEuPlfCL7DeVwGZiGJuMjxjVyGdMwxPWeCz5T_mpXboi-oRujKhBw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:48:58 GMT
age: 74937
etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cd.connatix.com/connatix.playspace.js
302 Found 0 B URL HTTP/2 cd.connatix.com/connatix.playspace.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /connatix.playspace.js HTTP/1.1
Host: cd.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-cache, no-store, must-revalidate, max-age=0
location: https://cds.connatix.com/p/218122/connatix.playspace.dc.js
accept-ranges: bytes
access-control-max-age: 86400
date: Sat, 28 Jan 2023 18:37:55 GMT
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2975
Expires: Sat, 28 Jan 2023 19:27:30 GMT
Date: Sat, 28 Jan 2023 18:37:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2975
Expires: Sat, 28 Jan 2023 19:27:30 GMT
Date: Sat, 28 Jan 2023 18:37:55 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 23:03:41 GMT
age: 70454
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K9YWM9eaEc1DQ6wtEEuADnG1U-ahRBXDaiHIAm20dkWMOxPWBlJidw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:46:13 GMT
age: 71502
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 74469
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ed1a0bd725b2078b4cfe4ed83877901
62493ca03be9870aac2341e033611a6d56bd322a
706e84bc63fd98acaeb72789239af3210ae6e3910e6589d92a25899dc9059dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12397
x-amzn-requestid: e8436997-696d-483a-b03a-a84e7ca614ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T5HbzoAMFXsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-1c2ccd0a187d0a3e2f6a59cc;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lmLHc8fKQYUpq9B-GyOQ0FKzhxi0ToTEPA7cu6JnQftgDFDNV8USvw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:37 GMT
etag: "62493ca03be9870aac2341e033611a6d56bd322a"
content-type: image/jpeg
age: 74478
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
stgec-ausw.uplynk.com/80C078/ausw/slices/0d6/b2c1c5c2af374f52af57ddcae54c6663/0d6a2b156eac42abb7e59bb3778e0e07/poster_728a25aa4f1d4f4d8ce581ebe378bea2.jpg
404 Not Found 345 B URL HTTP/2 stgec-ausw.uplynk.com/80C078/ausw/slices/0d6/b2c1c5c2af374f52af57ddcae54c6663/0d6a2b156eac42abb7e59bb3778e0e07/poster_728a25aa4f1d4f4d8ce581ebe378bea2.jpg
IP
File type XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d8f540e3c342b32c8cfe52dc8f2a8f97
11a8d74e4a92df2bc378efa85fb65f10365e1b1b
17b3914195ad4aae3f4486a351fe9172aada062dad7fcc78bca5894221a6c019
GET /80C078/ausw/slices/0d6/b2c1c5c2af374f52af57ddcae54c6663/0d6a2b156eac42abb7e59bb3778e0e07/poster_728a25aa4f1d4f4d8ce581ebe378bea2.jpg HTTP/1.1
Host: stgec-ausw.uplynk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
cdn-request-id: 1474357966632441747410951575723094141228
content-type: image/jpeg
date: Sat, 28 Jan 2023 18:37:55 GMT
server: ECAcc (ska/F6AF)
content-length: 345
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c982569d070f24dba1259603091c22e3
0f93acb5bee53670cc4ef486922f7333d96a2f4e
9a5a2d8a181a763ee6f60c27b396a0e3d7b1527e5177b2aff8d511db250753ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4975
x-amzn-requestid: 633350b7-4686-40d5-8c9d-3c097f8e2d34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-EBGuaoAMFbSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b3-4201212c1a0eb2a65d3f494c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: M4VR-I89SGD0-FLzHhZ88PJJJmdWTEi0UrBnAmCBCQAdjRsssqnSzw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:49:06 GMT
age: 74929
etag: "0f93acb5bee53670cc4ef486922f7333d96a2f4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ads.rubiconproject.com/prebid/5776_Scripps_Local_Stations.js
200 OK 123 kB URL HTTP/2 ads.rubiconproject.com/prebid/5776_Scripps_Local_Stations.js
IP
File type ASCII text, with very long lines (65490)
Size 123 kB (123009 bytes)
Hash d7f176e96dd3de792fb8adedce666846
f3771f121c444c6c5084ede2b686307e90acb166
cb4d0588a52571eac36fa8c9e3ac99fb979cccfb6bb0010a6e9afbf79e710b21
GET /prebid/5776_Scripps_Local_Stations.js HTTP/1.1
Host: ads.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.scrippsdigital.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
last-modified: Thu, 19 Jan 2023 22:10:54 GMT
content-encoding: gzip
content-type: text/javascript
content-length: 123009
expires: Sat, 28 Jan 2023 18:37:55 GMT
date: Sat, 28 Jan 2023 18:37:55 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cds.connatix.com/p/218122/connatix.playspace.dc.js
200 OK 238 kB URL HTTP/2 cds.connatix.com/p/218122/connatix.playspace.dc.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 238 kB (237672 bytes)
Hash 9b858867344e6efab1bca98e207060ac
04557eb7738c857744c537262529bade4bd6d91e
ff0651efcf4ddf4683f39e3d71806b754477541c2bdc72fdee2c0eb381fcb31c
GET /p/218122/connatix.playspace.dc.js HTTP/1.1
Host: cds.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 27 Jan 2023 14:05:09 GMT
etag: "1b870dbc5baf4a87e04c0a65303a9133"
content-type: application/javascript
content-encoding: br
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:37:55 GMT
age: 102567
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 237672
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/hls.js/1.1.2-0.canary.8085/hls.min.js
200 OK 78 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/hls.js/1.1.2-0.canary.8085/hls.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9a996cb2dff41179823fdd6bf86a79e2
635f284b2e60379ee6eedc0cac6390e200660697
5f95c45e7fb8e15518709243c89f97a031e6dda1409e2458592ca80703683163
GET /ajax/libs/hls.js/1.1.2-0.canary.8085/hls.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.scrippsdigital.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 77995
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61af329e-130ab"
last-modified: Tue, 07 Dec 2021 10:08:30 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 14959915
expires: Thu, 18 Jan 2024 18:37:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QULig0CI4UsG%2FgmHuBGOVYy8TNxBrUj1ftlb%2BDYjgQJpTFAlBUYUXgOr7dSBU8LMCbwuqH9E2K3QH9hiBDyAd1dQh9G9wg6%2F%2FU%2Bbdsy%2FsrRN10t9ql8VCQoUCrje9bmxbOSQmD56"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 790bd796af180b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 990b5a35f522fe523b60eca8c5e2d036
b15e55b71ad116a319288b849a540343cbaff779
9c02004351cc97ef022baea890c2e282e74b99905b5d2bf7aeea56fdc78ab4d4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 18:37:55 GMT
Last-Modified: Sat, 28 Jan 2023 17:05:43 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wCgrBX056-tnpiRJqIJU52CQZ8bOLn3LuEBiZ4sFuJ5JAth7jzYFcQ==
Age: 5532
ads.rubiconproject.com/prebid/5776_Scripps_Local_Stations.js
304 Not Modified 0 B URL HTTP/2 ads.rubiconproject.com/prebid/5776_Scripps_Local_Stations.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /prebid/5776_Scripps_Local_Stations.js HTTP/1.1
Host: ads.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Thu, 19 Jan 2023 22:10:54 GMT
TE: trailers
HTTP/2 304 Not Modified
content-type: text/javascript
last-modified: Thu, 19 Jan 2023 22:10:54 GMT
expires: Sat, 28 Jan 2023 18:37:55 GMT
date: Sat, 28 Jan 2023 18:37:55 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.news5cleveland.com/apple-touch-icon.png
200 OK 11 kB URL HTTP/1.1 www.news5cleveland.com/apple-touch-icon.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash e257ad095f7449b048278521a6f1cd43
f35c53b3176dacf45428108d26efbd75894270e6
8a27d6e03f9af7d341e600216e35bd92e7831c86949770a01e4ee4a8bea347bd
GET /apple-touch-icon.png HTTP/1.1
Host: www.news5cleveland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
Cookie: usprivacy=1---
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png;charset=UTF-8
Content-Length: 11230
Connection: keep-alive
Cache-Control: max-age=240
Content-Security-Policy: frame-ancestors 'self' https://cms.scrippsdigital.com
Date: Sat, 28 Jan 2023 18:35:11 GMT
Server: N/A
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: M-f9jRB10hRYVvAZTN4ZXlzEuZbe_nLKTCGw_hPynwfNA8Q64ZXtFQ==
Age: 164
www.news5cleveland.com/favicon-16x16.png
200 OK 871 B URL HTTP/1.1 www.news5cleveland.com/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 19fd729588897db7cd44863a15ab09fb
cc83938645bbbda862e1918e473b8bde1df9af77
3861c904f0014f2ca430f538c38321583ff4cf3852b499e85e574289db28fd1e
GET /favicon-16x16.png HTTP/1.1
Host: www.news5cleveland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/news/local-news/investigations/cle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
Cookie: usprivacy=1---
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png;charset=UTF-8
Content-Length: 871
Connection: keep-alive
Cache-Control: max-age=240
Content-Security-Policy: frame-ancestors 'self' https://cms.scrippsdigital.com
Date: Sat, 28 Jan 2023 18:36:06 GMT
Server: N/A
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Mmc0nIZk9PFlm9gJ-CtXLbAUQHTMvggy0lYPw0uqComLQnlM6yLlZQ==
Age: 109
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 126 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2846)
Size 126 kB (126544 bytes)
Hash 08170b094847c66f3b89d5a577c739ea
ea3f55dae751aaa5fb5b0fd0d74354c26d76dccd
598ef4c4803f256ff79120afe545bc162d0d84bc1224acff09a1dcd2f0bd9b35
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.scrippsdigital.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 126544
date: Sat, 28 Jan 2023 18:37:55 GMT
expires: Sat, 28 Jan 2023 18:37:55 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.ewscloud.com/prod/scheduler/v1/com.news5cleveland/schedules/current/?type=web
200 OK 0 B URL HTTP/2 api.ewscloud.com/prod/scheduler/v1/com.news5cleveland/schedules/current/?type=web
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prod/scheduler/v1/com.news5cleveland/schedules/current/?type=web HTTP/1.1
Host: api.ewscloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Referer: https://www.news5cleveland.com/
Origin: https://www.news5cleveland.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 0
date: Sat, 28 Jan 2023 18:37:55 GMT
x-amzn-requestid: 6c2f90fc-cb42-4c55-a2b1-7ca4139b22d7
access-control-allow-origin: *
access-control-allow-headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: fd28nHLJIAMFysA=
access-control-allow-methods: GET,OPTIONS
x-amzn-trace-id: Root=1-63d56b83-6ac6d9d80c5651a2027a5c4e
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CyTofzb8PP2lb1i_-876SifKdyZ_DDMFKJsFZfv0TW0H-Kb0oixd1Q==
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 28 Jan 2023 17:46:59 GMT
expires: Sat, 28 Jan 2023 19:46:59 GMT
cache-control: public, max-age=7200
age: 3056
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash d84523b8e48c73bf2a836d7e3edc1f98
8f3354a4922782d983ac047638a59b43b43f7618
a19437d5674e2d46f60ce971a5b99e673f463285ba77e2e28315062dedf9f649
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 973b0dd1ce2cca9525d9e52beadaf9d3
etag: "bc32942b8e8e4030937a1b4b5e6afa9f"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 28 Jan 2023 18:56:21 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 2EUjuOSMc78qg21+PtwfmA==
x-fb-debug: VwugCP/N2Asn+56IRru9v4Uq/9xV+Tu4ma46+S/q6NGWh/ccbt+TrNzXoJJQmZkRs24OaECq0gp1CUeOsrlHzQ==
content-length: 1686
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:55 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widgets.outbrain.com/outbrain.js
200 OK 76 kB URL HTTP/2 widgets.outbrain.com/outbrain.js
IP
File type ASCII text, with very long lines (1595)
Hash 03b7f8283c6cbd638db92bf48fc913fa
873701fa40963d34b4fe3a0118fe788095ec4904
d7aeb952bc16014469d2acb3d3244d35b23b57c27502d7fd213f54eac5ae9abb
GET /outbrain.js HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 76122
x-traceid: a4f43b4d0a8e712aaf9744836bb5d75e
etag: "2a-ELQf1LYsA4GWcl3K9/nNvB0LIK8"
last-modified: Tue, 24 Jan 2023 14:17:06 GMT
cache-control: max-age=14400
content-encoding: gzip
vary: Accept-Encoding
date: Sat, 28 Jan 2023 18:37:55 GMT
edge-cache-tag: widget-cheetah-stg
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 541db4f3f0ba067bfb58cdac34cb86f4
20e6883f068568888ce37c6b9ef8f5d12be257c0
83898f3b2da2a11996d2eb3a5115ef301255030fdf231b8bf7971916769bc7be
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: sbYBC0cdqoTz1W8U6H46iIEOecRyrxO9STnE90uvhoPMOFecaWFDlHE5A24bHgB8jv4xFggOBTbXA2ec2MP4iA==
content-length: 27815
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:55 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fab886d35a27f1ea89e95d08408e131c
ca2e7c94fa954aa477f1756d61ac9f94349bdc55
102b20858c47034b67115fcee25eb9c702e5a10119a3ee38bb1a6f1fe7cb5947
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5550
Cache-Control: max-age=88683
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Etag: "63d40d40-1d7"
Expires: Sun, 29 Jan 2023 19:15:58 GMT
Last-Modified: Fri, 27 Jan 2023 17:43:28 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7da8f9a23d8c05f64f248e4e3427c76e
e2d001c2909cd9403173cbb0e288d55fbc8e4d0a
db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js
200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js
IP
File type ASCII text, with very long lines (771)
Size 164 kB (163774 bytes)
Hash 57c909ab73fc27ec24f737bbf1cb1de8
89b2c02e9e7a9a764518fca545d3eec2044fd6d9
7e407e2b00bb7c238c71d96472f7ab030de4e610b1048f0f77b25cb85c2d166b
GET /recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 17:09:34 GMT
expires: Tue, 23 Jan 2024 17:09:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 01:02:00 GMT
content-type: text/javascript
age: 437301
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cbe94bc7052911313fffd1cdad964a74
a96a6606f1d20baeeb4040c9ced3ba2f7bd1aada
430d90ac0a39038dbb5336cf29baf6786ac29491c5a8e4dcce04e93d9fceb5e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.amazon-adsystem.com/cdn/prod/config?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com
200 OK 454 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com
IP
File type JSON data\012- , ASCII text, with very long lines (454), with no line terminators
Hash 62e8ad3d0085a5e744683f6f743a42bd
3f1d7885fb441ce2f9f8074674404abe7b0bc360
7bceebd890cb5c1598fa1553fa9db16dd51cb1210b0fe4bfc43dd2d750eafbdd
GET /cdn/prod/config?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 454
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Sat, 28 Jan 2023 15:52:43 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UlskX4Iv96wuZJmIjJDydfw_ARLOObMxbFMnwFhRsbFfuQYrZtTPaA==
age: 9912
X-Firefox-Spdy: h2
cds.connatix.com/p/218122/connatix.playspace.css
200 OK 15 kB URL HTTP/2 cds.connatix.com/p/218122/connatix.playspace.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9ed84b31932aa05bb029576a95834db0
fd7c67c0bb8118a614d94cce64efe5904de3efa5
86a7c7405b4ff179f7a7e1c03983b9d8f4b4ab1b96bf23f58526c2b1291972dc
GET /p/218122/connatix.playspace.css HTTP/1.1
Host: cds.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 27 Jan 2023 14:05:09 GMT
etag: "7b96ed2c467f7874addd8218d40ff965"
content-type: text/css
content-encoding: br
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:37:56 GMT
age: 102567
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 15241
X-Firefox-Spdy: h2
sb.scorecardresearch.com/b?c1=2&c2=6036471&cs_it=b3&cv=3.8.0.210223&ns__t=1674931079639&ns_c=UTF-8&c7=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&c8=Cleveland%20Water%20spends%20%241M%20promoting%20itself&c9=
204 No Content 0 B URL HTTP/2 sb.scorecardresearch.com/b?c1=2&c2=6036471&cs_it=b3&cv=3.8.0.210223&ns__t=1674931079639&ns_c=UTF-8&c7=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&c8=Cleveland%20Water%20spends%20%241M%20promoting%20itself&c9=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b?c1=2&c2=6036471&cs_it=b3&cv=3.8.0.210223&ns__t=1674931079639&ns_c=UTF-8&c7=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&c8=Cleveland%20Water%20spends%20%241M%20promoting%20itself&c9= HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 18:37:56 GMT
set-cookie: UID=1977cb4e08c3c6ad1cf30ab1674931076; domain=.scorecardresearch.com; path=/; max-age=62208000
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7CBwEGkCvcMadtSF3smbfE18retXp2dAnIfvYmOmB0sEnzeOqYxCQg==
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=201ef82caab53393373b2df8ddbf2dd9
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=201ef82caab53393373b2df8ddbf2dd9
IP
File type ASCII text, with very long lines (18530)
Hash 7bd3bf160abca9cbb11abc77e59b1145
fab39d1967213589d33146d0fe6f9d1004441897
f4f60cccead7b47c9186e32d0591fdea72ad0b829fa5b80b95e57c99eb77a35a
GET /en_US/sdk.js?hash=201ef82caab53393373b2df8ddbf2dd9 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 8bb6f8070f425a52cd98dc1e4b30cec0
etag: "4a70e96b6109788804911906a190f751"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 28 Jan 2024 17:20:42 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: e9O/Fgq8qcuxGrx35ZsRRQ==
x-fb-debug: ouRvhW1j/dJ0gkwjBPXl1XnPcK0Sbr6ajIFuXHCEUGqQ7qY0w5GkHrqQhHeBG0ABmP3e5vzYjykG5ezXqETbTg==
priority: u=3,i
content-length: 88415
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
api.ewscloud.com/prod/scheduler/v1/com.news5cleveland/schedules/current/?type=web
200 OK 5.7 kB URL HTTP/2 api.ewscloud.com/prod/scheduler/v1/com.news5cleveland/schedules/current/?type=web
IP
File type JSON data\012- , ASCII text
Hash e7fda28a02814fd796ffeec48f089b2e
31079f4429fdeb2ceb0854b304360b382659a29d
295b619aaa140b7dde4a59cf028c368aeb083bb7815476520ef1a5fff6295b8b
GET /prod/scheduler/v1/com.news5cleveland/schedules/current/?type=web HTTP/1.1
Host: api.ewscloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Authorization: Token bc22df1e0efb4dcb53f2438a4b71da118f05788c
Origin: https://www.news5cleveland.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 5748
date: Sat, 28 Jan 2023 18:37:56 GMT
x-amzn-requestid: b73fb081-ea5e-4d62-a1e1-f7adcbe2e0a7
access-control-allow-origin: *
x-amz-apigw-id: fd28rF3qoAMFwhw=
x-amzn-trace-id: Root=1-63d56b84-63208cfc7f1eb61d7d046e17
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1F4Iu5mEdPIDGhsNnniGX9BpPbQgkM5SMWTm0DF1jxUS_1MBhjlNhA==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c762d7ee8c59a6230380838b44ef1491
e9c2c549c7a7b6f0fa717b8fe663c923dfa6fee2
53ec17e65f509fe213adf19a474c980f82e84f2ba3734293880c06adad2e7e46
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "53EC17E65F509FE213ADF19A474C980F82E84F2BA3734293880C06ADAD2E7E46"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9242
Expires: Sat, 28 Jan 2023 21:11:58 GMT
Date: Sat, 28 Jan 2023 18:37:56 GMT
Connection: keep-alive
widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
200 OK 43 B URL HTTP/2 widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /widget/detect/px.gif?ch=1 HTTP/1.1
Host: widget-pixels.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 43
content-type: image/gif
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3:1601475749.911431"
last-modified: Wed, 30 Sep 2020 14:22:29 GMT
server: AkamaiNetStorage
cache-control: max-age=2592000
expires: Mon, 27 Feb 2023 18:37:56 GMT
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
200 OK 47 kB URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
File type ASCII text, with very long lines (65457)
Hash ed55c043697cc904a0f7124c11a93a6b
022850d0d7c5dbc64230732a34131932576dc1de
386c307a3320d44b666894127eb096e7cac884b4a33ac21172743fc03b7ab31a
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 28 Jan 2023 18:24:10 GMT
last-modified: Wed, 25 Jan 2023 21:28:25 GMT
etag: W/"8a6d0f2d51de2b80e524e04684f71215"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 6fd3ab2be93b19c970fb371964d46d94.cloudfront.net (CloudFront), 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-P1
x-amz-cf-id: lI4F4KZ968yr-iL8SWPECL7-ZySDS6cNRe6uMaFKzAcEKUuidSDfvg==
age: 826
X-Firefox-Spdy: h2
cdn.parsely.com/keys/news5cleveland.com//p.js
200 OK 24 kB URL HTTP/2 cdn.parsely.com/keys/news5cleveland.com//p.js
IP
Hash 54347a3c9d9da0b614601ce2fe2d4f94
d95f5ef733a9e6046060d98af8721809771e01fe
3b5bb52ef05816dfa5c5b0320d017ec1f358aca554df0c1da5b82384e706c10f
GET /keys/news5cleveland.com//p.js HTTP/1.1
Host: cdn.parsely.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Tue, 02 Feb 2021 21:20:35 GMT
pragma: public
content-encoding: gzip
date: Sat, 28 Jan 2023 05:42:23 GMT
expires: Sun, 29 Jan 2023 05:42:23 GMT
cache-control: max-age=86400, public
etag: W/"6019c223-10717"
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LENNthayT8NnhC0JoZUMVu4XcvCjvkGKVS3_F0cQt1sFdTreRqEEXA==
age: 46532
X-Firefox-Spdy: h2
p1.parsely.com/plogger/?rand=1674931079719&plid=31989996&idsite=news5cleveland.com&url=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&urlref=&screen=1280x1024%7C1280x1002%7C24&data=%7B%7D&sid=1&surl=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&sref=&sts=1674931079711&slts=0&title=Cleveland+Water+spends+%241M+promoting+itself&date=Sat+Jan+28+2023+18%3A37%3A59+GMT%2B0000+(Coordinated+Universal+Time)&action=pageview&pvid=60782029&u=pid%3D35c0045bc38553fb2b3a081920529025
200 OK 43 B URL HTTP/1.1 p1.parsely.com/plogger/?rand=1674931079719&plid=31989996&idsite=news5cleveland.com&url=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&urlref=&screen=1280x1024%7C1280x1002%7C24&data=%7B%7D&sid=1&surl=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&sref=&sts=1674931079711&slts=0&title=Cleveland+Water+spends+%241M+promoting+itself&date=Sat+Jan+28+2023+18%3A37%3A59+GMT%2B0000+(Coordinated+Universal+Time)&action=pageview&pvid=60782029&u=pid%3D35c0045bc38553fb2b3a081920529025
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /plogger/?rand=1674931079719&plid=31989996&idsite=news5cleveland.com&url=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&urlref=&screen=1280x1024%7C1280x1002%7C24&data=%7B%7D&sid=1&surl=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&sref=&sts=1674931079711&slts=0&title=Cleveland+Water+spends+%241M+promoting+itself&date=Sat+Jan+28+2023+18%3A37%3A59+GMT%2B0000+(Coordinated+Universal+Time)&action=pageview&pvid=60782029&u=pid%3D35c0045bc38553fb2b3a081920529025 HTTP/1.1
Host: p1.parsely.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 18:37:56 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Saturday, 28-Jan-2023 18:37:56 GMT
Cache-Control: no-cache
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-40532382-1&cid=1133145016.1674931080&jid=2006400475&gjid=1540055600&_gid=283025256.1674931080&_u=aGDAiEAjBAAAAGAAI~&z=1834683388
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-40532382-1&cid=1133145016.1674931080&jid=2006400475&gjid=1540055600&_gid=283025256.1674931080&_u=aGDAiEAjBAAAAGAAI~&z=1834683388
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-40532382-1&cid=1133145016.1674931080&jid=2006400475&gjid=1540055600&_gid=283025256.1674931080&_u=aGDAiEAjBAAAAGAAI~&z=1834683388 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.news5cleveland.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 28 Jan 2023 18:37:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tcheck.outbrainimg.com/tcheck/check/d3d3Lm5ld3M1Y2xldmVsYW5kLmNvbQ==
200 OK 15 B URL HTTP/1.1 tcheck.outbrainimg.com/tcheck/check/d3d3Lm5ld3M1Y2xldmVsYW5kLmNvbQ==
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 529cac05e2a53fd8794eb9e5699d9740
6b22e508bdcfbb35d24e176eefc89179212397a6
39d160e97e2bea07b0cf1c647259ffa4f0bd07069dba4e6c19a22d38b408510f
GET /tcheck/check/d3d3Lm5ld3M1Y2xldmVsYW5kLmNvbQ== HTTP/1.1
Host: tcheck.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Length: 15
X-TraceId: 379129b60dd00278472edb60756b0608
ETag: W/"f-ayLlCL3PuzXSThdu78iReSEjl6Y"
Cache-Control: max-age=26355
Expires: Sun, 29 Jan 2023 01:57:11 GMT
Date: Sat, 28 Jan 2023 18:37:56 GMT
Connection: keep-alive
Access-Control-Max-Age: 43200
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *
capi.connatix.com/core/story?v=218122
200 OK 2.7 kB URL HTTP/2 capi.connatix.com/core/story?v=218122
IP
Hash 7bb1aa30dd6aeeaf10ea93e93d1e83a9
ab07b16548af1054714c69a8ff59304828a74e0f
874e396771d60da8915ba61d3af0991cef6565bfdcfc61a98ae123ac4996086a
POST /core/story?v=218122 HTTP/1.1
Host: capi.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 216
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.news5cleveland.com
content-encoding: gzip
content-type: application/x-protobuf
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:37:56 GMT
vary: Accept-Encoding
access-control-max-age: 86400
content-length: 2735
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
304 Not Modified 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://assets.scrippsdigital.com
Connection: keep-alive
Referer: https://assets.scrippsdigital.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-None-Match: W/"a4d296427fc806b21335359e398c025c"
TE: trailers
HTTP/2 304 Not Modified
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 23 Dec 2022 01:05:48 GMT
x-amz-version-id: 1R3b4YI9dI20q9Y7Gq1DHxVUnq3Fp2gn
server: AmazonS3
date: Sat, 28 Jan 2023 03:25:59 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rYe5sE4NTo39OtPuGsNjts8rj13xpEBkLRkzzKw-pMnmAxjimwXlMg==
age: 54825
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yN/l/0,cross/TM77vnRu7wi.css?_nc_x=Ij3Wp8lg5Kz
200 OK 7.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yN/l/0,cross/TM77vnRu7wi.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (14177)
Hash b542a1f078e3b922ce6c45388db68d02
ceac96ba18bb816ea96d5fe3d2b7fb3b3701b9de
d67fdf40e6478e1afb7ab3a58695d5ab127c247fb138213b24036aca8e90eb15
GET /rsrc.php/v3/yN/l/0,cross/TM77vnRu7wi.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 25 Jan 2024 20:14:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: tUKh8HjjuSLObEU4jbaNAg==
x-fb-debug: hn49Jtk0dl5RELfJHmhij5zb5Wj73w4dpTZIMQT9aQcdQWtKhioSR8sSpjD6/z44u2O3ipnZbr5opj+a0gaEqg==
content-length: 7265
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash e822d41cf422e863628f1a7826ff9f5c
98b6d2c8f0481d24a677f2474077c383922cbf93
3c9a2d5a39eaa9bf0b5c4e4d0f2bfe30559ea062e40224d10d4b3094a8e3691a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3161
Cache-Control: max-age=162573
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:56 GMT
Etag: "63d53738-1d7"
Expires: Mon, 30 Jan 2023 15:47:29 GMT
Last-Modified: Sat, 28 Jan 2023 14:54:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
static.xx.fbcdn.net/rsrc.php/v3/yO/r/2ihP3NA43zp.js?_nc_x=Ij3Wp8lg5Kz
200 OK 85 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yO/r/2ihP3NA43zp.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18622)
Hash 9290ac0bd9b4ab609f16d7e4285c267c
ee56180ad884dab1dbee0c4aa0fb3cb87c9fefe0
ce4e2c0fd3dd90d7e20ca4f70cf5488fc84a6b46f3953a4e7186fa0c82c1ea36
GET /rsrc.php/v3/yO/r/2ihP3NA43zp.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 24 Jan 2024 23:40:43 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: kpCsC9m0q2CfFtfkKFwmfA==
x-fb-debug: DiMmWL8/+OeHVRyb+kfMg/PZl/UFzjY07zvYk7SVWV4h2yifpX4cSS5yVAvPMLl6F7hJ0bxye2ie0Y0wnUrGxA==
priority: u=3,i
content-length: 85074
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6946776e652785bf384db6df7a79b598
1027b0848c3def2f33c368316f2e6ea883efc2e3
1569f11bca5b42d40585adc66b47d91d709b8d46250367f2506d99450bfe7ea7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4671
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:56 GMT
Last-Modified: Sat, 28 Jan 2023 17:20:05 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
static.xx.fbcdn.net/rsrc.php/v3/y2/r/t_SEcMfMc5f.js?_nc_x=Ij3Wp8lg5Kz
200 OK 135 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y2/r/t_SEcMfMc5f.js?_nc_x=Ij3Wp8lg5Kz
IP
Hash c38688163a9e80f60de113e4bef88322
13ad1a58b177f287c59255a00787aa9415a4d490
016121e4e78cc7e42ea1f32b32df6e08db3986da2a1c55c5086d50419e692dad
GET /rsrc.php/v3/y2/r/t_SEcMfMc5f.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: w4aIFjqegPYN4RPkvviDIg==
expires: Mon, 22 Jan 2024 17:36:32 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: h/q3R4IAaGp8x1QYDe+dwRNSOPqcoL+pa0prr/2GSQ9q2aUivgdZVA53po8CxJyDuBqYTXj8jLW/dmSwFHKPzQ==
content-length: 135
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yk/r/T8uk6-SYQke.js?_nc_x=Ij3Wp8lg5Kz
200 OK 26 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yk/r/T8uk6-SYQke.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (8848)
Hash 0b0c225669375a266ac1ade7b27df5fb
a31f2b86c31d6fbb35ddde8677bd05ba5eb835d2
ba120a8cb9993d65125f96591d50b7a26309752ebfbb597ef47e6aeaf52c8365
GET /rsrc.php/v3/yk/r/T8uk6-SYQke.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 20 Jan 2024 21:03:27 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: CwwiVmk3WiZqwa3nsn31+w==
x-fb-debug: susfLU1xj1zUXpRdapaLmERB9WGzWYVd8kqrVk1df1E8iPlkZ8xLmPExf6mra6PvmuQfeqDb7EOybDUMtY5bVA==
priority: u=3,i
content-length: 25957
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iv1q4/y8/l/en_US/RVl8Wc4_Tur.js?_nc_x=Ij3Wp8lg5Kz
200 OK 83 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iv1q4/y8/l/en_US/RVl8Wc4_Tur.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4057)
Hash cbda84e573f8e7f94e94406f743a0da3
a6aee6d1e1211a95706f7fde6d4be0ccecedd9c2
26d2d97a9e60be55833127eaabb45181f64cf29a79ff58ae8e0842e72d4cbdc3
GET /rsrc.php/v3iv1q4/y8/l/en_US/RVl8Wc4_Tur.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 26 Jan 2024 00:40:04 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: y9qE5XP45/lOlEBvdDoNow==
x-fb-debug: 74lyaZ4byMd2snuulEUDExuECT2pTTYksq9KIqZ3mdWBVK8gLr4AdSAmlCqOQ9CJU908foFeFHbs4Ocf1HnhUQ==
priority: u=3,i
content-length: 83080
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3ifTu4/y3/l/en_US/8-bMRr714NL.js?_nc_x=Ij3Wp8lg5Kz
200 OK 100 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3ifTu4/y3/l/en_US/8-bMRr714NL.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (14192)
Hash ec2f87e027e413aa5e2de4e37e1ef3bb
05cfd55531f72ffc6d1585d6bb617476b180a420
1f141a64d0fdec51f00316602eb3f90c4f89ebaba06895bd5ad2321bc9dbb2d8
GET /rsrc.php/v3ifTu4/y3/l/en_US/8-bMRr714NL.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 25 Jan 2024 20:12:10 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: 7C+H4CfkE6peLeTjfh7zuw==
x-fb-debug: HYw6heoIpdcr8ee9aTjBNcxVso0M4GFsIdbDkVot+7+9VQwftd3dp31MtK+ggNlvzCH+LFyMrEYbVND+Sc3R6Q==
priority: u=3,i
content-length: 99831
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ewscripps-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=f8db6f6f-7849-45fc-bf19-f7d1e8c68198%2C3faf08a5-fdd4-4dd2-9d42-f55de6d1e85c&nocache=1674931080307&us_privacy=1---&aus=728x90%7C300x600%2C300x250&divids=MAD_INVIEW%2CMAD_RIGHT_RAIL&aucs=%252F6088%252Fssp.wews%252Finview-bottom%2C%252F6088%252Fssp.wews%252Fnews%252Flocal_news%252Finvestigations%252Fdetail%2523MAD_RIGHT_RAIL&auid=544041416%2C544041414
200 OK 78 B URL HTTP/2 ewscripps-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=f8db6f6f-7849-45fc-bf19-f7d1e8c68198%2C3faf08a5-fdd4-4dd2-9d42-f55de6d1e85c&nocache=1674931080307&us_privacy=1---&aus=728x90%7C300x600%2C300x250&divids=MAD_INVIEW%2CMAD_RIGHT_RAIL&aucs=%252F6088%252Fssp.wews%252Finview-bottom%2C%252F6088%252Fssp.wews%252Fnews%252Flocal_news%252Finvestigations%252Fdetail%2523MAD_RIGHT_RAIL&auid=544041416%2C544041414
IP
File type JSON data\012- , ASCII text
Hash 05a092ebedfb2b028138cd0362dd853f
81a57104192cc4e2fa342f1944537d0411eaffc3
6da2068a50c33c59aeb25878ba5ace1ffc3d154b9f14aebd07704f63317d855c
GET /w/1.0/arj?ju=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=f8db6f6f-7849-45fc-bf19-f7d1e8c68198%2C3faf08a5-fdd4-4dd2-9d42-f55de6d1e85c&nocache=1674931080307&us_privacy=1---&aus=728x90%7C300x600%2C300x250&divids=MAD_INVIEW%2CMAD_RIGHT_RAIL&aucs=%252F6088%252Fssp.wews%252Finview-bottom%2C%252F6088%252Fssp.wews%252Fnews%252Flocal_news%252Finvestigations%252Fdetail%2523MAD_RIGHT_RAIL&auid=544041416%2C544041414 HTTP/1.1
Host: ewscripps-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sat, 28 Jan 2023 18:37:56 GMT
content-type: application/json
content-length: 78
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9a763983ef09d1e760fb847edb99e321
751ce20bc2af7c1740879d5032473ade5a7168dc
ed01bec810a6470e2a4fb7018bdc70aed0173f4a97c124a9b0fd75d98f552e47
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 18:37:56 GMT
Last-Modified: Sat, 28 Jan 2023 17:07:17 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 472K33BaSJsR8obaexa6gZiBAMAqE-gDUZVDleQ3WWYH_yyoYyUPkw==
Age: 5439
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9a763983ef09d1e760fb847edb99e321
751ce20bc2af7c1740879d5032473ade5a7168dc
ed01bec810a6470e2a4fb7018bdc70aed0173f4a97c124a9b0fd75d98f552e47
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118626
Date: Sat, 28 Jan 2023 18:37:56 GMT
Etag: "63d481e3-1d7"
Expires: Mon, 30 Jan 2023 03:35:02 GMT
Last-Modified: Sat, 28 Jan 2023 02:01:07 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XAHImXHBOAMurKCbt0ymFvvriPjyZ5uEp7tTETPT_YgqXqV2f5wrjQ==
Age: 5635
static.xx.fbcdn.net/rsrc.php/v3iLpP4/ye/l/en_US/hqheXVnevzy.js?_nc_x=Ij3Wp8lg5Kz
200 OK 78 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iLpP4/ye/l/en_US/hqheXVnevzy.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (10772)
Hash 18208f03ceb00c5980433a1ef98811e1
721572590631e52444077e078a17335ac986e0ca
0ad80292fc33d9da13b41a5f4d9052671c57f2a6cf75a8a4438b255e49767492
GET /rsrc.php/v3iLpP4/ye/l/en_US/hqheXVnevzy.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 18 Jan 2024 21:52:21 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: GCCPA86wDFmAQzoe+YgR4Q==
x-fb-debug: Jwwa8+/z6fZg7FDJVPrFPwBx4eAxuFsU5sX9rvkSj7ZeX2zYwgPe6nHFK2TsoGEnNJbFucx2EbuhcuSMlfK0JA==
content-length: 78072
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&pid=FeEogqpjerm0F&cb=0&ws=1280x939&v=23.123.1617&t=1500&slots=%5B%7B%22sd%22%3A%22MAD_INVIEW%22%2C%22s%22%3A%5B%22728x90%22%5D%7D%2C%7B%22sd%22%3A%22MAD_RIGHT_RAIL%22%2C%22s%22%3A%5B%22300x600%22%2C%22300x250%22%5D%7D%5D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 717 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&pid=FeEogqpjerm0F&cb=0&ws=1280x939&v=23.123.1617&t=1500&slots=%5B%7B%22sd%22%3A%22MAD_INVIEW%22%2C%22s%22%3A%5B%22728x90%22%5D%7D%2C%7B%22sd%22%3A%22MAD_RIGHT_RAIL%22%2C%22s%22%3A%5B%22300x600%22%2C%22300x250%22%5D%7D%5D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with very long lines (698)
Hash 4265174ff4ab9236ca2e40e7ddf338c9
23f348ac351b87c0760195428bf8c4db8a3a4bfe
66bfc7214f95efd5c161d3e10ca31b4c4efaaaf25fc15f53b479ba2b8ac7dd0c
GET /e/dtb/bid?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&pid=FeEogqpjerm0F&cb=0&ws=1280x939&v=23.123.1617&t=1500&slots=%5B%7B%22sd%22%3A%22MAD_INVIEW%22%2C%22s%22%3A%5B%22728x90%22%5D%7D%2C%7B%22sd%22%3A%22MAD_RIGHT_RAIL%22%2C%22s%22%3A%5B%22300x600%22%2C%22300x250%22%5D%7D%5D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 717
server: Server
date: Sat, 28 Jan 2023 18:37:56 GMT
x-amz-rid: NDKWWDGSC7B6G9W2Q6J6
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QL-2zWBpZd82pzxYUft4Q2Vq87cfGQQQlkJRFzyTI_NDE7p29rapBA==
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y4/l/0,cross/JvBpHGwKKFj.css?_nc_x=Ij3Wp8lg5Kz
200 OK 142 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y4/l/0,cross/JvBpHGwKKFj.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (36103)
Size 142 kB (141983 bytes)
Hash 1c0ee23c74cb03d7a284fdeaade65699
4f355ca76fb1197e540d614388deb88823ed53cc
2b4944099cf37e7a47aeaa133b067398fdcc5267e32af5ed8777a72f9174dbd6
GET /rsrc.php/v3/y4/l/0,cross/JvBpHGwKKFj.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 28 Jan 2024 05:45:42 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: HA7iPHTLA9eihP3qreZWmQ==
x-fb-debug: eObP3xX2IJ6zVbs/+MKMng1TcP59zWQpGQjhFzhWsT9y8g4t6gpBmtWddGhkiMJ5XosF0kUTY1V4SGIbIREN3Q==
content-length: 141983
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d8cd0def47dd00e2a6a6eea45c0c8ac7
461db62ea353486bdc6cae64ab4daaa0962f8838
5658eb770f35378d919fdec137d1daff425553871c8d7ff8438133670533da0e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 18:37:56 GMT
Last-Modified: Sat, 28 Jan 2023 18:32:03 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3Q363BtWrsxVUl6wPzRAPl_nU0IbB51RnARF9Sjm7hzOYFvzUU7ogg==
Age: 353
static.xx.fbcdn.net/rsrc.php/v3ivzh4/yR/l/en_US/FBT3bq1SbsC.js?_nc_x=Ij3Wp8lg5Kz
200 OK 147 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3ivzh4/yR/l/en_US/FBT3bq1SbsC.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (13658)
Size 147 kB (147002 bytes)
Hash 90f23cca897110cb264845f45ebc20b0
d37902d1a16cbc81a201c1a3a8ddd4536817166f
121ec49b1003abd566fb921c44be272770290606c7c45d1b1b7c6eba32b31d04
GET /rsrc.php/v3ivzh4/yR/l/en_US/FBT3bq1SbsC.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 27 Jan 2024 18:48:57 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: kPI8yolxEMsmSEX0XrwgsA==
x-fb-debug: l1gStryL+WNnnyOBIbAfv8M/W7lFBf14R1k/2IQ06rOKpZGUrr0kdqSS1Puu1UujlQ1Ek4DVzegR+DCvSQwoMQ==
content-length: 147002
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f09e1173390d8b8cfa3b5c518ef0ab7c
d42a8b91bc1fb6ebec1751a4fb63de69a7a03b0d
105b87f7e78087586cdd66fc0fdf48f0867ddb7e0c2e55a7bf1d71b4eb491f6d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "105B87F7E78087586CDD66FC0FDF48F0867DDB7E0C2E55A7BF1D71B4EB491F6D"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8942
Expires: Sat, 28 Jan 2023 21:06:58 GMT
Date: Sat, 28 Jan 2023 18:37:56 GMT
Connection: keep-alive
web.hb.ad.cpe.dotomi.com/cvx/client/hb/ortb/25
204 No Content 0 B URL HTTP/2 web.hb.ad.cpe.dotomi.com/cvx/client/hb/ortb/25
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cvx/client/hb/ortb/25 HTTP/1.1
Host: web.hb.ad.cpe.dotomi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1537
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 28 Jan 2023 18:37:56 GMT
cache-control: no-cache
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
hblg.media.net/log?logid=kfk&evtid=flog&itype=HB&tElp=19&adt=desktop&cid=8CU6Q6626&ct=OSLO&cc=NO&ugd=4&app=0&pht=939&pid=8PRL4E7N3&dn=news5cleveland.com&servname=ssp-serving-7554bd9849-8srwf&svr=011812_514_011709_490_ssp&sc=&version=4&vh=939&vw=1280&vsid=&vid=00001674931080457015326356485382&sspAbBucket=CONTROL&lw=1&dapp=green&itypeid=1&sd=1&adbd=0&npa=0&gdpr_enf=1&csex=0&gdfstr=Y-N&gdpr=1&csstr=&tcf_cmp=&tcf_status=&tcf_prp=&suc=0&tcf_api=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=&ufca=-1&coppa_status=&coppa_applied=&id_details=&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=700>d=&inid=&ngfundl=1000&rdl=700&a=0&r=209&lper=1&requrl=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&kwrf=
200 OK 35 B URL HTTP/2 hblg.media.net/log?logid=kfk&evtid=flog&itype=HB&tElp=19&adt=desktop&cid=8CU6Q6626&ct=OSLO&cc=NO&ugd=4&app=0&pht=939&pid=8PRL4E7N3&dn=news5cleveland.com&servname=ssp-serving-7554bd9849-8srwf&svr=011812_514_011709_490_ssp&sc=&version=4&vh=939&vw=1280&vsid=&vid=00001674931080457015326356485382&sspAbBucket=CONTROL&lw=1&dapp=green&itypeid=1&sd=1&adbd=0&npa=0&gdpr_enf=1&csex=0&gdfstr=Y-N&gdpr=1&csstr=&tcf_cmp=&tcf_status=&tcf_prp=&suc=0&tcf_api=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=&ufca=-1&coppa_status=&coppa_applied=&id_details=&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=700>d=&inid=&ngfundl=1000&rdl=700&a=0&r=209&lper=1&requrl=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&kwrf=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 349909ce1e0bc971d452284590236b09
adfc01f8a9de68b9b27e6f98a68737c162167066
796c46ec10bc9105545f6f90d51593921b69956bd9087eb72bee83f40ad86f90
GET /log?logid=kfk&evtid=flog&itype=HB&tElp=19&adt=desktop&cid=8CU6Q6626&ct=OSLO&cc=NO&ugd=4&app=0&pht=939&pid=8PRL4E7N3&dn=news5cleveland.com&servname=ssp-serving-7554bd9849-8srwf&svr=011812_514_011709_490_ssp&sc=&version=4&vh=939&vw=1280&vsid=&vid=00001674931080457015326356485382&sspAbBucket=CONTROL&lw=1&dapp=green&itypeid=1&sd=1&adbd=0&npa=0&gdpr_enf=1&csex=0&gdfstr=Y-N&gdpr=1&csstr=&tcf_cmp=&tcf_status=&tcf_prp=&suc=0&tcf_api=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=&ufca=-1&coppa_status=&coppa_applied=&id_details=&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=700>d=&inid=&ngfundl=1000&rdl=700&a=0&r=209&lper=1&requrl=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&kwrf= HTTP/1.1
Host: hblg.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
access-control-allow-origin: *
content-length: 35
expires: Sat, 28 Jan 2023 18:37:57 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 28 Jan 2023 18:37:57 GMT
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash e822d41cf422e863628f1a7826ff9f5c
98b6d2c8f0481d24a677f2474077c383922cbf93
3c9a2d5a39eaa9bf0b5c4e4d0f2bfe30559ea062e40224d10d4b3094a8e3691a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5718
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:57 GMT
Last-Modified: Sat, 28 Jan 2023 17:02:39 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 492adde21eba0fa897a07342bbca8d6c
3fd300d75e3f7ec403d3e2ba7e1bb7681f6d0a9e
5a3bd926b13644bce35b2ede0e182892e8e8df302133cb5b1e23b1f911bffc14
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4756
Cache-Control: max-age=141156
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:57 GMT
Etag: "63d4dd55-1d7"
Expires: Mon, 30 Jan 2023 09:50:33 GMT
Last-Modified: Sat, 28 Jan 2023 08:31:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 492adde21eba0fa897a07342bbca8d6c
3fd300d75e3f7ec403d3e2ba7e1bb7681f6d0a9e
5a3bd926b13644bce35b2ede0e182892e8e8df302133cb5b1e23b1f911bffc14
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4756
Cache-Control: max-age=141156
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:57 GMT
Etag: "63d4dd55-1d7"
Expires: Mon, 30 Jan 2023 09:50:33 GMT
Last-Modified: Sat, 28 Jan 2023 08:31:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
tlx.3lift.com/header/auction?lib=prebid&v=7.31.0&referrer=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&tmax=2000&us_privacy=1---
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.31.0&referrer=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&tmax=2000&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.31.0&referrer=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&tmax=2000&us_privacy=1--- HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1185
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:57 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-arch,sec-ch-rtt,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-viewport-width,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a969c0301797961d75b6287a987004c&pos=8a9691c501797961dc1a629215b20095&cmd=bid&secure=1&us_privacy=1---
200 OK 80 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a969c0301797961d75b6287a987004c&pos=8a9691c501797961dc1a629215b20095&cmd=bid&secure=1&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 780fae6fbddd92dc07e0364b51f72845
0b1c9f525760925d478b0140e673588ebe8ca7aa
d65bcc18b1031441f82cca79e6a27f5f93a3c024befef729c200822fd98528e7
GET /bidRequest?dcn=8a969c0301797961d75b6287a987004c&pos=8a9691c501797961dc1a629215b20095&cmd=bid&secure=1&us_privacy=1--- HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:57 GMT
content-type: application/json;charset=utf-8
content-length: 80
server: ATS/9.1.10.25
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Accept-Encoding, User-Agent
access-control-allow-credentials: true
content-encoding: gzip
age: 0
set-cookie: A3=d=AQABBIVr1WMCEBetrlhgFE6-5JVN_bUyF4UFEgEBAQG91mPfYwAAAAAA_eMAAA&S=AQAAAkCT-q6v4O2I3tKAkF5xhHA; Expires=Mon, 29 Jan 2024 00:37:57 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a969c0301797961d75b6287a987004c&pos=8a9691c501797961dc1a6292710d00b3&cmd=bid&secure=1&us_privacy=1---
200 OK 80 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a969c0301797961d75b6287a987004c&pos=8a9691c501797961dc1a6292710d00b3&cmd=bid&secure=1&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c3796532494f96ff530b77f761d46f64
94089aa59aa9f3087d047fe3541a71ee27fda208
8c70790d17f9cdfd9dfb910c7089dc2fc1e8683740bee0c29a697962d05a710b
GET /bidRequest?dcn=8a969c0301797961d75b6287a987004c&pos=8a9691c501797961dc1a6292710d00b3&cmd=bid&secure=1&us_privacy=1--- HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:57 GMT
content-type: application/json;charset=utf-8
content-length: 80
server: ATS/9.1.10.25
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Accept-Encoding, User-Agent
access-control-allow-credentials: true
content-encoding: gzip
age: 0
set-cookie: A3=d=AQABBIVr1WMCEOB-K22-yB4YLuLv1eCWqDgFEgEBAQG91mPfYwAAAAAA_eMAAA&S=AQAAAsrB2y0_gamW0_fHgkppeuM; Expires=Mon, 29 Jan 2024 00:37:57 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 267f4ae69d25aef386a481704a88a2f8
19b27adf872cce06aa62cc5a482dda7490ed8774
aede4b0049566f7cd69433a63135ca7c4e1aab77b89bc059874570680a40efd6
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1165
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 28 Jan 2023 18:37:57 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.news5cleveland.com
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 49daeded-8e02-42f3-a70d-50ea02962677
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
web.hb.ad.cpe.dotomi.com/cvx/client/hb/ortb/25
204 No Content 0 B URL HTTP/2 web.hb.ad.cpe.dotomi.com/cvx/client/hb/ortb/25
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cvx/client/hb/ortb/25 HTTP/1.1
Host: web.hb.ad.cpe.dotomi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1148
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 28 Jan 2023 18:37:57 GMT
cache-control: no-cache
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a969c0301797961d75b6287a987004c&pos=8a9691c501797961dc1a629218f40096&cmd=bid&secure=1&us_privacy=1---
200 OK 80 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a969c0301797961d75b6287a987004c&pos=8a9691c501797961dc1a629218f40096&cmd=bid&secure=1&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c22161e9db9c8239be31561bcaf83a9a
7633bc2a552dbb4a4cfd6bca327a676ceccb2c4f
c23e2a1092f206bebee8d83abc5513a325d707fa3d42bb4cbdeea8f8f41acc3b
GET /bidRequest?dcn=8a969c0301797961d75b6287a987004c&pos=8a9691c501797961dc1a629218f40096&cmd=bid&secure=1&us_privacy=1--- HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:57 GMT
content-type: application/json;charset=utf-8
content-length: 80
server: ATS/9.1.10.25
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Accept-Encoding, User-Agent
access-control-allow-credentials: true
content-encoding: gzip
age: 0
set-cookie: A3=d=AQABBIVr1WMCEFr8WON13mj8hBB0g93f6WwFEgEBAQG91mPfYwAAAAAA_eMAAA&S=AQAAAoHi8P3_1jKnq6nJA1ujL4c; Expires=Mon, 29 Jan 2024 00:37:57 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
e.serverbid.com/api/v2
200 OK 42 B IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash 6b3ea90ae05ba6e3c5cb69e41bd4f3b0
e30d26c37cfb45eb346edb53f9322a672fdb2368
d1f523b2fc3183afb2614ae37c78a70c1a51374882df736654ba9021eee82960
POST /api/v2 HTTP/1.1
Host: e.serverbid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 680
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 10080
content-type: application/json
content-length: 42
content-encoding: gzip
set-cookie: CONSUMABLEID=974c25c5040a49b98c25c5040a19b987; Max-Age=1296000; Expires=Sun, 12 Feb 2023 18:37:57 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None
date: Sat, 28 Jan 2023 18:37:56 GMT
X-Firefox-Spdy: h2
e.serverbid.com/api/v2
200 OK 42 B IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash 6b3ea90ae05ba6e3c5cb69e41bd4f3b0
e30d26c37cfb45eb346edb53f9322a672fdb2368
d1f523b2fc3183afb2614ae37c78a70c1a51374882df736654ba9021eee82960
POST /api/v2 HTTP/1.1
Host: e.serverbid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 522
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 10080
content-type: application/json
content-length: 42
content-encoding: gzip
set-cookie: CONSUMABLEID=6e9cf3cb888645019cf3cb8886f5014e; Max-Age=1296000; Expires=Sun, 12 Feb 2023 18:37:57 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None
date: Sat, 28 Jan 2023 18:37:56 GMT
X-Firefox-Spdy: h2
g2.gumgum.com/hbid/imp?lt=1674931080827&to=0&aun=MAD_HEADER&gpid=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_HEADER&t=hylav7wr&pi=3&maxw=970&maxh=250&si=113120&bf=970x250%2C728x90%2C970x90&uspConsent=1---&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ce=false&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.31.0%22%7D&ogu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
200 OK 16 kB URL HTTP/2 g2.gumgum.com/hbid/imp?lt=1674931080827&to=0&aun=MAD_HEADER&gpid=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_HEADER&t=hylav7wr&pi=3&maxw=970&maxh=250&si=113120&bf=970x250%2C728x90%2C970x90&uspConsent=1---&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ce=false&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.31.0%22%7D&ogu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
IP
Hash 396ea8901ff26ba24282f98f6488795a
d4ae8aa4dee2a83b151a408361201a916dd71865
4861fdd718c57aa1407ccfc740022a70ea3738b1e23363e36cd8bc6fa38afb3f
GET /hbid/imp?lt=1674931080827&to=0&aun=MAD_HEADER&gpid=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_HEADER&t=hylav7wr&pi=3&maxw=970&maxh=250&si=113120&bf=970x250%2C728x90%2C970x90&uspConsent=1---&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ce=false&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.31.0%22%7D&ogu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths HTTP/1.1
Host: g2.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:57 GMT
content-type: application/json;charset=UTF-8
server: nginx
cache-control: private, no-store, must-revalidate, max-age=0
expires: 0
pragma: no-cache
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
set-cookie: cs=true; Domain=.gumgum.com; Expires=Sun, 28 Jan 2024 18:37:57 GMT; Path=/; Secure; SameSite=None
loc=N7qTz27lIInvAtVkW_A2n8IPDSVhUFp5ZtvvLnagCyWgO6qnhr3rsDgpAvQ4k_ILucM2xp01RC01kWvmi96IUASz3YPoPsdndUXuslWRIRkGoJVdhs0Ggw; Domain=.gumgum.com; Expires=Mon, 27 Feb 2023 18:37:57 GMT; Path=/; Secure; SameSite=None
vst=e_98843bc2-012f-467d-bc55-92b3b60ba6cd; Domain=.gumgum.com; Expires=Sun, 28 Jan 2024 18:37:57 GMT; Path=/; Secure; SameSite=None
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
odb.outbrain.com/utils/get?url=https%3A%2F%2Fwww.news5cleveland.com%2F%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&idx=0&rand=34946&key=NANOWDGT01&widgetJSId=AR_11&va=true&et=true&format=html&adblck=false&abwl=false&px=154&py=4193&vpd=3254&cw=608&activeTab=true&ab=0&wl=0&settings=true&recs=true&version=2010100&sig=FCDXLrE4&apv=false&&osLang=en-US&winW=1268&winH=939&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpa=1---&ccpaStat=1&chs=1&ogn=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
200 OK 7.5 kB URL HTTP/2 odb.outbrain.com/utils/get?url=https%3A%2F%2Fwww.news5cleveland.com%2F%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&idx=0&rand=34946&key=NANOWDGT01&widgetJSId=AR_11&va=true&et=true&format=html&adblck=false&abwl=false&px=154&py=4193&vpd=3254&cw=608&activeTab=true&ab=0&wl=0&settings=true&recs=true&version=2010100&sig=FCDXLrE4&apv=false&&osLang=en-US&winW=1268&winH=939&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpa=1---&ccpaStat=1&chs=1&ogn=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
IP
File type Unicode text, UTF-8 text, with very long lines (35652), with no line terminators
Hash 8b1691b9ba9823d7c51193144d3f0b02
aab5506942f6bb9db0ca49b320775c510b9b1e60
3430a8646fb05fe599dfbbaab58d5af5c1772d12e9ad4ad11d3a3db51e9fcf85
GET /utils/get?url=https%3A%2F%2Fwww.news5cleveland.com%2F%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&idx=0&rand=34946&key=NANOWDGT01&widgetJSId=AR_11&va=true&et=true&format=html&adblck=false&abwl=false&px=154&py=4193&vpd=3254&cw=608&activeTab=true&ab=0&wl=0&settings=true&recs=true&version=2010100&sig=FCDXLrE4&apv=false&&osLang=en-US&winW=1268&winH=939&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpa=1---&ccpaStat=1&chs=1&ogn=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths HTTP/1.1
Host: odb.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-traceid: bb052c51b30b03b4d9c6dcc2475e6fe5
content-encoding: gzip
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Sat, 28 Jan 2023 18:37:57 GMT
x-served-by: cache-lga21927-LGA, cache-bma1633-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1674931077.091747,VS0,VE128
vary: Accept-Encoding, User-Agent
traffic-path: NYDC1, LGA, BMA, Europe1
content-length: 7535
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&pid=FeEogqpjerm0F&cb=1&ws=1280x939&v=23.123.1617&t=1500&slots=%5B%7B%22sd%22%3A%22MAD_HEADER%22%2C%22s%22%3A%5B%22970x250%22%2C%22728x90%22%2C%22970x90%22%2C%22994x30%22%2C%2210x1%22%5D%7D%5D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 245 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&pid=FeEogqpjerm0F&cb=1&ws=1280x939&v=23.123.1617&t=1500&slots=%5B%7B%22sd%22%3A%22MAD_HEADER%22%2C%22s%22%3A%5B%22970x250%22%2C%22728x90%22%2C%22970x90%22%2C%22994x30%22%2C%2210x1%22%5D%7D%5D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash 51500f8fd0550142e75c669d8cbbe30e
601796f6ddad6756adc053b2fa9c9a3c78b4052d
ee9fcd885006526eaa34fe1672aa7ac104d4424e0c11d8f4a46ab061a4d495a8
GET /e/dtb/bid?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&pid=FeEogqpjerm0F&cb=1&ws=1280x939&v=23.123.1617&t=1500&slots=%5B%7B%22sd%22%3A%22MAD_HEADER%22%2C%22s%22%3A%5B%22970x250%22%2C%22728x90%22%2C%22970x90%22%2C%22994x30%22%2C%2210x1%22%5D%7D%5D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 245
server: Server
date: Sat, 28 Jan 2023 18:37:57 GMT
x-amz-rid: RMAVSMZ4VT0H8DWCYDEV
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zHw7uN5kFgDcLSSN4oCziS4dyPg5RGLWsu5ylYEAStvDtgqzw9puUw==
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=prebid&v=7.31.0&referrer=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&tmax=2000&us_privacy=1---
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.31.0&referrer=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&tmax=2000&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.31.0&referrer=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&tmax=2000&us_privacy=1--- HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 843
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:57 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-platform,sec-ch-viewport-width,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data,sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-arch,sec-ch-rtt,sec-ch-viewport-height
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/2010100/module/streamFeed.js?e=2
200 OK 13 kB URL HTTP/2 widgets.outbrain.com/nanoWidget/2010100/module/streamFeed.js?e=2
IP
File type ASCII text, with very long lines (1562)
Hash 05afebff1b0b63c029f2987b4e29a3fd
4880fc95fa3ba4138808fe73a2990c23d56fe4ca
a411ac16133f8fd739f4117bb25fc798b79ec644945bf355d5030884aa953f85
GET /nanoWidget/2010100/module/streamFeed.js?e=2 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "727ebd9d68a62707ae15e1f022c77edd:1674570725.536848"
last-modified: Tue, 24 Jan 2023 14:15:52 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sat, 04 Feb 2023 18:37:57 GMT
date: Sat, 28 Jan 2023 18:37:57 GMT
content-length: 13247
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/ob_logo_67x12.png
200 OK 2.3 kB URL HTTP/2 widgets.outbrain.com/images/widgetIcons/ob_logo_67x12.png
IP
File type PNG image data, 67 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash c52b07e749f7a09fa7b97b7e195e06ce
1ef88a5ee1b625df63c918425400b2a70cb15364
487aec7746a83542b3573383df65747e31c494d8412103b5675329f3d4befaeb
GET /images/widgetIcons/ob_logo_67x12.png HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
etag: "c52b07e749f7a09fa7b97b7e195e06ce:1673369415.187551"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 2326
cache-control: max-age=2592000
expires: Mon, 27 Feb 2023 18:37:57 GMT
date: Sat, 28 Jan 2023 18:37:57 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/achoice.svg
200 OK 990 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/achoice.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (990), with no line terminators
Hash 5ab8e16b5f46213840bcd403e349419c
f03f6dc8e2206a94119af76f9a3b3c835390cae7
9ba56f5ffa579747efde1d2a429b325a9fb7220d30f4268e4a44ecbe4a9bf034
GET /images/widgetIcons/achoice.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "5ab8e16b5f46213840bcd403e349419c:1673369393.880194"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 990
cache-control: max-age=2592000
expires: Mon, 27 Feb 2023 18:37:57 GMT
date: Sat, 28 Jan 2023 18:37:57 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-1/311591600_251252433910379_7218669929639581407_n.jpg?stp=cp0_dst-jpg_p40x40&_nc_cat=103&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=BQ_3T1ZTefAAX9FilSZ&_nc_ht=scontent-arn2-1.xx&edm=AGo2L-IEAAAA&oh=00_AfAirkG3hOYFSAORaJ9bHNA2MrZS1jtSwDUrzS21Cn4UIA&oe=63D9D6EA
200 OK 1.4 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-1/311591600_251252433910379_7218669929639581407_n.jpg?stp=cp0_dst-jpg_p40x40&_nc_cat=103&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=BQ_3T1ZTefAAX9FilSZ&_nc_ht=scontent-arn2-1.xx&edm=AGo2L-IEAAAA&oh=00_AfAirkG3hOYFSAORaJ9bHNA2MrZS1jtSwDUrzS21Cn4UIA&oe=63D9D6EA
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 40x40, components 3\012- data
Hash c69c5f2d54815a2b7998026b1464dcb1
c6e87996a5546980102651775d4e5c5bdf9cecdf
27b91694d22be0ccf6acbb269e313f0a43a9211c3c40178d6252d512f08a830b
GET /v/t39.30808-1/311591600_251252433910379_7218669929639581407_n.jpg?stp=cp0_dst-jpg_p40x40&_nc_cat=103&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=BQ_3T1ZTefAAX9FilSZ&_nc_ht=scontent-arn2-1.xx&edm=AGo2L-IEAAAA&oh=00_AfAirkG3hOYFSAORaJ9bHNA2MrZS1jtSwDUrzS21Cn4UIA&oe=63D9D6EA HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Sat, 15 Oct 2022 06:15:24 GMT
x-haystack-needlechecksum: 3263093996
x-needle-checksum: 346664264
content-type: image/jpeg
content-digest: adler32=837862419
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
content-length: 1434
x-fb-trip-id: 1904183273
date: Sat, 28 Jan 2023 18:37:57 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 9029870a73c15641ec4ba505443e4f5c
f5fc0106dc716e27b8fbab520c6dc79b4437a81a
05505548f6839519819c9108a4ae3257f832665e42713d03c19a4eb4abe2f08c
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6174
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:57 GMT
Last-Modified: Sat, 28 Jan 2023 16:55:03 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
scontent-arn2-1.xx.fbcdn.net/v/t15.5256-10/21460608_10159355200875002_3490401393246732288_n.jpg?stp=dst-jpg_s851x315&_nc_cat=107&ccb=1-7&_nc_sid=08861d&_nc_ohc=mdKAlbo7hCQAX-g9uCG&_nc_ht=scontent-arn2-1.xx&edm=AGo2L-IEAAAA&oh=00_AfCF9i4kJQvKCjASPSu751ORFyVVSsiH0t_bjtRQnJXcnw&oe=63DAB935
200 OK 33 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t15.5256-10/21460608_10159355200875002_3490401393246732288_n.jpg?stp=dst-jpg_s851x315&_nc_cat=107&ccb=1-7&_nc_sid=08861d&_nc_ohc=mdKAlbo7hCQAX-g9uCG&_nc_ht=scontent-arn2-1.xx&edm=AGo2L-IEAAAA&oh=00_AfCF9i4kJQvKCjASPSu751ORFyVVSsiH0t_bjtRQnJXcnw&oe=63DAB935
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 560x315, components 3\012- data
Hash e3d6c967539581a8860a46a3c6f0663f
ae2fe8e013b23cf6744d36c4b834b35a0d00381b
2ade1ba7a05ba282e98f7e186d10408c4b67425ca5f9ed570241f584a6d492e2
GET /v/t15.5256-10/21460608_10159355200875002_3490401393246732288_n.jpg?stp=dst-jpg_s851x315&_nc_cat=107&ccb=1-7&_nc_sid=08861d&_nc_ohc=mdKAlbo7hCQAX-g9uCG&_nc_ht=scontent-arn2-1.xx&edm=AGo2L-IEAAAA&oh=00_AfCF9i4kJQvKCjASPSu751ORFyVVSsiH0t_bjtRQnJXcnw&oe=63DAB935 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 06 Sep 2017 22:41:06 GMT
x-haystack-needlechecksum: 73208396
x-needle-checksum: 1072669920
content-type: image/jpeg
content-length: 33131
content-digest: adler32=1643997338
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1904183273
date: Sat, 28 Jan 2023 18:37:57 GMT
x-fb-edge-debug: QfvEoptrqD1l9xex4pJRY_F9fkeOIwJn_PyaR_Ky3HrVAGGNCa2UfLFE7MbQZw_59lAyIbMMqVpMYQ0kW5Djj7OCmXXXz2Lm8U5YWIqoJ6I
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=b71b1d588b6ff37b26f92573794491a7_4113_1674931077165&tm=1291&eT=0&widgetWidth=608&widgetHeight=28&widgetX=154&widgetY=4193&wRV=2010100&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&cheq=0&rtt=416&oo=true&lo=2927&odbreq=4030&odbres=4445&to=1674931076742&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=b71b1d588b6ff37b26f92573794491a7_4113_1674931077165&tm=1291&eT=0&widgetWidth=608&widgetHeight=28&widgetX=154&widgetY=4193&wRV=2010100&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&cheq=0&rtt=416&oo=true&lo=2927&odbreq=4030&odbres=4445&to=1674931076742&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=b71b1d588b6ff37b26f92573794491a7_4113_1674931077165&tm=1291&eT=0&widgetWidth=608&widgetHeight=28&widgetX=154&widgetY=4193&wRV=2010100&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&cheq=0&rtt=416&oo=true&lo=2927&odbreq=4030&odbres=4445&to=1674931076742&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Origin: https://www.news5cleveland.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 18:37:57 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 6945b121744de25350d61d44696f133a
ocsp.digicert.com/
200 OK 279 B IP
Hash 446fbed2d9dddf5b584c32dede974828
1f7cea418ce1f849e8b5674644d3bd0e99854a6a
313de67baad36b36dcb3b7f376c0776aff2f0ce8ad5a7f34353e90927526fb21
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5912
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Last-Modified: Sat, 28 Jan 2023 16:59:27 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
btloader.com/tag?aax_id=AAX21O2VJ&upapi=true
302 Found 61 B URL HTTP/2 btloader.com/tag?aax_id=AAX21O2VJ&upapi=true
IP
File type HTML document, ASCII text
Hash 91d1577a17f53554dab3d3560b245098
e9e43c8aa33c9bb026d2d9d3e01241a1e8322545
e5929b8849783956ab1135ec5558090e2596fcb4d74a3d3b8459af1968425890
GET /tag?aax_id=AAX21O2VJ&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 28 Jan 2023 18:37:58 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=3600, must-revalidate
location: /tag?o=5107371200741376&upapi=true
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 778
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JtmM8fVp8L6yN%2FMW6GjKbMgTm%2FULci7srcFqY4TtvgvX577giClVUxxsXk5Zlhp2ujpqaT3Q0uoZhbBtnM6sfDAfM%2FsEnaowVLaa2oZxSeXq1CrsHl5TGLMJ18aRiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790bd7a5a83cb500-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ab04da9bc46246cc0001464e7f6b5e19
01ce4f7004aec7a24d4545a1e742ab6a1e639b48
22e519a39cb2e7e5f6da23d35f4498aa7a2d00e06613fd3bbf8de8a62ed2d354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-40532382-1&cid=1133145016.1674931080&jid=2006400475&_u=aGDAiEAjBAAAAGAAI~&z=434088446
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-40532382-1&cid=1133145016.1674931080&jid=2006400475&_u=aGDAiEAjBAAAAGAAI~&z=434088446
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-40532382-1&cid=1133145016.1674931080&jid=2006400475&_u=aGDAiEAjBAAAAGAAI~&z=434088446 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 18:37:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 445063afd151207b8f2cbf00e1aef829
48d80360c1d94ce5315b13b9b6570534b46c3e52
47f18d9dd5cddfded0522a3f71ba70cc32740f23a52b5443c530461a35440e51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2737
Cache-Control: max-age=141649
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Etag: "63d4e726-117"
Expires: Mon, 30 Jan 2023 09:58:47 GMT
Last-Modified: Sat, 28 Jan 2023 09:13:10 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 445063afd151207b8f2cbf00e1aef829
48d80360c1d94ce5315b13b9b6570534b46c3e52
47f18d9dd5cddfded0522a3f71ba70cc32740f23a52b5443c530461a35440e51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3435
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Etag: "63d4e726-117"
Last-Modified: Sat, 28 Jan 2023 17:40:43 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
adservice.google.no/adsid/integrator.js?domain=www.news5cleveland.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.news5cleveland.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.news5cleveland.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 28 Jan 2023 18:37:58 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.news5cleveland.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.news5cleveland.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.news5cleveland.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 28 Jan 2023 18:37:58 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=2
200 OK 43 B URL HTTP/2 ad-delivery.net/px.gif?ch=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:58 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdvRyQuiKR7vao0d0gZH1fD4TACxVBfdiOoBZcjsTHe5pQD9btOiEjggzyh8C86yatVzyUlYTAFym5Cc073wIsWMUTACWflM
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 26 Jan 2023 22:54:58 GMT
cache-control: public, max-age=86400
age: 160806
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VryF0nXefsi0OBKlFhgxmTqzYG7HNm5nWR4tjaK4lFNJGia35li6Z75uWAdwMm8%2FYtGR19FRVpHvW3yOpcqVE0FfKK%2BG6A3kEpuxv9HG%2BMl%2F%2FW%2BlDSPykyZPOMUC0DztMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bd7a67e61fac4-OSL
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=1&e=0.640041728659996
200 OK 43 B URL HTTP/2 ad-delivery.net/px.gif?ch=1&e=0.640041728659996
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.640041728659996 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:58 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdvRyQuiKR7vao0d0gZH1fD4TACxVBfdiOoBZcjsTHe5pQD9btOiEjggzyh8C86yatVzyUlYTAFym5Cc073wIsWMUTACWflM
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 26 Jan 2023 22:54:58 GMT
cache-control: public, max-age=86400
age: 160806
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kVjMD40vMNK1pXfUShaO3cYO1MkE122sBiiZHqVv61ebZQNWfZrnyzYeOoUyRXgtVtB3vcpGhDdkw5rcgecQr7KLhE0rrUV%2Ba%2FAUzGblsrj887b3G3GJr8jcHrvmc0w0fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790bd7a69e6efac4-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash af1c521d29c662e208d80836c19fa58a
64e18dcf8f3ea43f6aeb1c66299bd37121cdfe14
57fe9c6dbb637c6090c7110234fb9d3aadb75850d6d5ed5c668376ebd121c1f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ins.connatix.com/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/af083abe-fb56-4e94-9f5a-0acd24fdb26c/insights.bin
200 OK 210 B URL HTTP/2 ins.connatix.com/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/af083abe-fb56-4e94-9f5a-0acd24fdb26c/insights.bin
IP
Hash 3c5dac2ffb9a934adbdd4d8dd0e345fc
fab212b615657bb71a13494b15f3622277643657
f705eb79f74997d8d4ebdda66d4e61278d8a60afeabd4785984851fbc477ed48
GET /e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/af083abe-fb56-4e94-9f5a-0acd24fdb26c/insights.bin HTTP/1.1
Host: ins.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Fri, 27 Jan 2023 19:59:48 GMT
etag: "f15484ead7cce9011eb7c2a163745d6f"
x-amz-server-side-encryption: AES256
content-type: application/octet-stream
content-encoding: gzip
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:37:58 GMT
age: 78281
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 210
X-Firefox-Spdy: h2
lit.connatix.com/08d73d33-9bb5-9b21-f035-1721d593115a/blockedDomains_7.bin
200 OK 101 B URL HTTP/2 lit.connatix.com/08d73d33-9bb5-9b21-f035-1721d593115a/blockedDomains_7.bin
IP
Hash c66e7bc0ba3aa8943eba7179a309d18d
2d826a6183600e4c464c41a17c0dc66108da7387
9f36edf94631e729e9636e96e7168b872ae4380934a1d0dae9e51c927bbdb5ed
GET /08d73d33-9bb5-9b21-f035-1721d593115a/blockedDomains_7.bin HTTP/1.1
Host: lit.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 04 May 2022 14:04:38 GMT
etag: "07bbfe91d7886a5178aa8cbc65cdd250"
content-type: application/octet-stream
content-encoding: gzip
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:37:58 GMT
age: 23257905
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 101
X-Firefox-Spdy: h2
vid.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/af083abe-fb56-4e94-9f5a-0acd24fdb26c.bin
200 OK 953 B URL HTTP/2 vid.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/af083abe-fb56-4e94-9f5a-0acd24fdb26c.bin
IP
Hash 17660ddc4950ec256227cbf7ea59565d
2f9bf5f90b7878ff770ddff6fea28d33fae1dcf5
6f5bd8a3c95fb08c7ba27168837e9e3a9e1cef30e4c498b738e2565c187f6a7c
GET /pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/af083abe-fb56-4e94-9f5a-0acd24fdb26c.bin HTTP/1.1
Host: vid.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Fri, 27 Jan 2023 19:59:30 GMT
etag: "b67ae2da50b27279160b297e87b0d2e4"
x-amz-server-side-encryption: AES256
content-type: application/octet-stream
content-encoding: gzip
cache-control: public,max-stale=31557600,stale-while-revalidate=31557600,immutable,max-age=31557600
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:37:58 GMT
age: 81384
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 953
X-Firefox-Spdy: h2
ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
200 OK 104 B URL HTTP/2 ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
IP
File type MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors\012- data
Hash 32ac8a9b81788b981a3a7e13c14082d4
fbfd48a2bfe8d4247a975176f88d18c3c2ad1952
00cc7617e054596ff0aaabd8a93a9214dc5304bfe317316022dbf4fb3ea073d2
GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 104
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 15:55:01 GMT
expires: Sun, 29 Jan 2023 15:55:01 GMT
cache-control: public, max-age=86400
age: 9777
last-modified: Tue, 08 May 2012 13:08:06 GMT
content-type: image/x-icon
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mv.outbrain.com/Multivac/api/get?url=https%3A%2F%2Fwww.news5cleveland.com%2F%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&settings=true&recs=true&widgetJSId=AR_11&key=NANOWDGT01&version=2010100&apv=false&sig=FCDXLrE4&format=html&rand=20969&osLang=en-US&seid=null&va=true&et=true&cmpStat=0&ccpa=1---&ccpaStat=1&scrW=1280&scrH=1024&t=YjcxYjFkNTg4YjZmZjM3YjI2ZjkyNTczNzk0NDkxYTc=&winW=1268&winH=939&adblck=false&abwl=false&secured=true&feedIdx=0&lastIdx=0&lastCardIdx=0&fAB=no_abtest&dpr=1&cw=608&activeTab=true&ogn=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&rw=CR_12&chs=1
200 OK 39 kB URL HTTP/2 mv.outbrain.com/Multivac/api/get?url=https%3A%2F%2Fwww.news5cleveland.com%2F%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&settings=true&recs=true&widgetJSId=AR_11&key=NANOWDGT01&version=2010100&apv=false&sig=FCDXLrE4&format=html&rand=20969&osLang=en-US&seid=null&va=true&et=true&cmpStat=0&ccpa=1---&ccpaStat=1&scrW=1280&scrH=1024&t=YjcxYjFkNTg4YjZmZjM3YjI2ZjkyNTczNzk0NDkxYTc=&winW=1268&winH=939&adblck=false&abwl=false&secured=true&feedIdx=0&lastIdx=0&lastCardIdx=0&fAB=no_abtest&dpr=1&cw=608&activeTab=true&ogn=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&rw=CR_12&chs=1
IP
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 0912f30a3e7f0e7d8d3c316aec1e76d9
6f32752a12b98b4de26e17db37c63931e9a4bb6e
2186dbb674fa7035f23cba5b1cda0a4fdd1527085add1a38c9233596edce3c69
GET /Multivac/api/get?url=https%3A%2F%2Fwww.news5cleveland.com%2F%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&settings=true&recs=true&widgetJSId=AR_11&key=NANOWDGT01&version=2010100&apv=false&sig=FCDXLrE4&format=html&rand=20969&osLang=en-US&seid=null&va=true&et=true&cmpStat=0&ccpa=1---&ccpaStat=1&scrW=1280&scrH=1024&t=YjcxYjFkNTg4YjZmZjM3YjI2ZjkyNTczNzk0NDkxYTc=&winW=1268&winH=939&adblck=false&abwl=false&secured=true&feedIdx=0&lastIdx=0&lastCardIdx=0&fAB=no_abtest&dpr=1&cw=608&activeTab=true&ogn=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&rw=CR_12&chs=1 HTTP/1.1
Host: mv.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-traceid: efbb302dc4044a84717138fa4a61dfce
content-encoding: gzip
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Sat, 28 Jan 2023 18:37:58 GMT
x-served-by: cache-lga21962-LGA, cache-bma1633-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1674931078.527395,VS0,VE737
vary: Accept-Encoding, User-Agent
traffic-path: NYDC1, LGA, BMA, Europe1
content-length: 38769
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash af1c521d29c662e208d80836c19fa58a
64e18dcf8f3ea43f6aeb1c66299bd37121cdfe14
57fe9c6dbb637c6090c7110234fb9d3aadb75850d6d5ed5c668376ebd121c1f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
24d5bc60b35bab761caf87253230c9ed.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
200 OK 2.7 kB URL HTTP/2 24d5bc60b35bab761caf87253230c9ed.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash e8ee9c011ff8e1f464e74c37113119ee
64ad72134ea05877de0f2b6503f5c0d8c3f78197
09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
GET /safeframe/1-0-40/html/container.html HTTP/1.1
Host: 24d5bc60b35bab761caf87253230c9ed.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Sat, 28 Jan 2023 18:37:58 GMT
expires: Sun, 28 Jan 2024 18:37:58 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
images.outbrainimg.com/transform/v3/eyJpdSI6IjM0NGEzZTg5NjI3Y2ZhYWZmYTllYWYzOTRlMzA3ODA4ODNiNzJiNDVkMThlYjg5NzQ5NTAxN2FjZDQyMDhmZWMiLCJ3Ijo0MCwiaCI6NDAsImQiOjIuMCwiY3MiOjAsImYiOjR9.webp
200 OK 1.7 kB URL HTTP/2 images.outbrainimg.com/transform/v3/eyJpdSI6IjM0NGEzZTg5NjI3Y2ZhYWZmYTllYWYzOTRlMzA3ODA4ODNiNzJiNDVkMThlYjg5NzQ5NTAxN2FjZDQyMDhmZWMiLCJ3Ijo0MCwiaCI6NDAsImQiOjIuMCwiY3MiOjAsImYiOjR9.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 80x80, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c403f7f59be89303ecfc025a1f6a1039
3c0003d9d35cdcf23687c1034398c38815f8a9e6
1de3cf90c300c303c8c1226d41b92b33036e5b805cba4cef6ab5c810eb85dd05
GET /transform/v3/eyJpdSI6IjM0NGEzZTg5NjI3Y2ZhYWZmYTllYWYzOTRlMzA3ODA4ODNiNzJiNDVkMThlYjg5NzQ5NTAxN2FjZDQyMDhmZWMiLCJ3Ijo0MCwiaCI6NDAsImQiOjIuMCwiY3MiOjAsImYiOjR9.webp HTTP/1.1
Host: images.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 1696
last-modified: Tue, 18 Oct 2022 19:02:37 GMT
x-traceid: 12c2314c16d91062ee44ecc52b85ecd9
cache-control: max-age=427532
date: Sat, 28 Jan 2023 18:37:58 GMT
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8f0d4ba2e105e5b3b872bcc7aa903f8c
67a55ac93ffacc9184f1bb2b5b667ebb5e1fc7ee
05a8c7444d6b0442d4b704bb1b25aabc6f4402068bcbdeae21c0f1537db8577a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3743
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Last-Modified: Sat, 28 Jan 2023 17:35:35 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
IP
Hash 8764e71905cb7fd66d6ef30092e2f3ca
1abdc4aadd7f25a86445fea4fd59911538946463
5dca7324024182b4c3d2322970609d2e5f2f6cf67b06cdeebe76aa43a2cc4b5b
POST /s/gts1d4/-vVKdY11C3E HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
IP
Hash 8764e71905cb7fd66d6ef30092e2f3ca
1abdc4aadd7f25a86445fea4fd59911538946463
5dca7324024182b4c3d2322970609d2e5f2f6cf67b06cdeebe76aa43a2cc4b5b
POST /s/gts1d4/-vVKdY11C3E HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6aedd5303ea95f0511fda488e8ffcae0
978b28a68413766109985a7a52882d2d67ccc5a2
4356ae90036d2aa6883ec18084b98eb6a62c79b2210b1cc4743e673c09ba4a6a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 18:37:58 GMT
Last-Modified: Sat, 28 Jan 2023 16:54:15 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: auqfjfvWG0zTcA_bJ_KL8MP5X_EqN_qloMsmgnVtURdVLAWzhFlFIw==
Age: 6223
video-arn2-1.xx.fbcdn.net/v/t42.1790-2/21472592_1352059374906247_8970981990262112256_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=985c63&efg=eyJybHIiOjUyMiwicmxhIjo1MTIsInZlbmNvZGVfdGFnIjoic3ZlX3NkIn0%3D&_nc_ohc=NmuJcPHgWP8AX8qqgcq&rl=522&vabr=290&_nc_ht=video-arn2-1.xx&edm=AGo2L-IEAAAA&oh=00_AfA3T31qA2pwJLDQzPSBKqI68ZkHCw4uptHjf2EDjl64-g&oe=63D593BA
206 Partial Content 466 kB URL HTTP/2 video-arn2-1.xx.fbcdn.net/v/t42.1790-2/21472592_1352059374906247_8970981990262112256_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=985c63&efg=eyJybHIiOjUyMiwicmxhIjo1MTIsInZlbmNvZGVfdGFnIjoic3ZlX3NkIn0%3D&_nc_ohc=NmuJcPHgWP8AX8qqgcq&rl=522&vabr=290&_nc_ht=video-arn2-1.xx&edm=AGo2L-IEAAAA&oh=00_AfA3T31qA2pwJLDQzPSBKqI68ZkHCw4uptHjf2EDjl64-g&oe=63D593BA
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 466 kB (466383 bytes)
Hash 88127c7d9555a15675204e643a7034a1
232267ed511be353a6823f5264bb9f4ed03bda88
0e5bc351ba88effc94663665199f0a88c11aa828ef86d11518f4f68195dd4af5
GET /v/t42.1790-2/21472592_1352059374906247_8970981990262112256_n.mp4?_nc_cat=104&ccb=1-7&_nc_sid=985c63&efg=eyJybHIiOjUyMiwicmxhIjo1MTIsInZlbmNvZGVfdGFnIjoic3ZlX3NkIn0%3D&_nc_ohc=NmuJcPHgWP8AX8qqgcq&rl=522&vabr=290&_nc_ht=video-arn2-1.xx&edm=AGo2L-IEAAAA&oh=00_AfA3T31qA2pwJLDQzPSBKqI68ZkHCw4uptHjf2EDjl64-g&oe=63D593BA HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
x-storage-error-category: dfs:none;hs_p:206:HS_ESUCCESS
last-modified: Wed, 06 Sep 2017 22:40:58 GMT
content-type: video/mp4
x-haystack-needlechecksum: 2563318983
x-needle-checksum: 2559167392
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-digest: adler32=2559167392
content-length: 1618629
accept-ranges: bytes
content-range: bytes 0-1618628/1618629
x-fb-trip-id: 436667874
date: Sat, 28 Jan 2023 18:37:58 GMT
x-fb-edge-debug: k0VifBL75tmCyAZ-dyei1WFIrlSAhpynIEFvhMKEF9yG2qtGwbIOxwIxwDkOs6jS2pPK06p340rdX3avcTzVotaEmVMCkW8Lkc2uaDD3aUI
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
200 OK 13 kB URL HTTP/2 pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
IP
File type ASCII text, with very long lines (1493)
Hash 0dece4b354fc41d0430994be26247a47
1063c9471665bb53cc9a4e89c4cf0f1e9f695f8d
71a1c1d814cc6c713b3513212be779f944e9b4002e1fb89ac36e438a1a04e4a0
GET /omsdk/releases/live/omweb-v1.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/omsdk-team-release-policy
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="omsdk-team-release-policy"
report-to: {"group":"omsdk-team-release-policy","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/omsdk-team-release-policy"}]}
content-length: 13109
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 18:09:09 GMT
expires: Sat, 28 Jan 2023 19:09:09 GMT
cache-control: public, max-age=3600
age: 1729
last-modified: Mon, 31 Oct 2022 17:24:37 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s0.2mdn.net/instream/video/client.js
200 OK 17 kB URL HTTP/2 s0.2mdn.net/instream/video/client.js
IP
File type ASCII text, with very long lines (2156)
Hash 49295de6ccd23cf80b6418a2d209868f
42a955b4560bb22cb9b5b39577f7a691ea345018
d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
GET /instream/video/client.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Sat, 28 Jan 2023 18:37:58 GMT
expires: Sat, 28 Jan 2023 18:37:58 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.btloader.com/pv?tid=GdlIJuZ7c&w=5140160189038592&o=5107371200741376&cv=2.1.06-2-g014272c&r=false&vr=1280x939&pageURL=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&sid=M3Gj1AVwA&upapi=true
204 No Content 0 B URL HTTP/2 api.btloader.com/pv?tid=GdlIJuZ7c&w=5140160189038592&o=5107371200741376&cv=2.1.06-2-g014272c&r=false&vr=1280x939&pageURL=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&sid=M3Gj1AVwA&upapi=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pv?tid=GdlIJuZ7c&w=5140160189038592&o=5107371200741376&cv=2.1.06-2-g014272c&r=false&vr=1280x939&pageURL=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&sid=M3Gj1AVwA&upapi=true HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
vary: Origin
date: Sat, 28 Jan 2023 18:37:58 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.btloader.com/country
200 OK 16 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 452880c1a375b8fba8c9499f0930d05f
ffe5484a23512c2a574d837fe2d3267b134e48c8
8b3383aa4c71f1d816bfaf33e3ef2e8ded067698a7798b9f306204d5777b140d
GET /country HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Origin: https://www.news5cleveland.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600
content-type: application/json
vary: Origin
date: Sat, 28 Jan 2023 18:37:58 GMT
content-length: 16
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
capi-tier-2-us-east-2.connatix.com/tr/sr?v=218122
200 OK 20 B URL HTTP/1.1 capi-tier-2-us-east-2.connatix.com/tr/sr?v=218122
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
POST /tr/sr?v=218122 HTTP/1.1
Host: capi-tier-2-us-east-2.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 399
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.news5cleveland.com
content-encoding: gzip
content-type: application/x-protobuf
date: Sat, 28 Jan 2023 18:37:58 GMT
server: Kestrel
vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
IP
Hash 8764e71905cb7fd66d6ef30092e2f3ca
1abdc4aadd7f25a86445fea4fd59911538946463
5dca7324024182b4c3d2322970609d2e5f2f6cf67b06cdeebe76aa43a2cc4b5b
POST /s/gts1d4/-vVKdY11C3E HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
log.outbrainimg.com/loggerServices/dwce_cheq_events?timestamp=1674931081877&sessionId=33d4009f-06b4-ea49-fe79-0ae7e84f7233&url=www.news5cleveland.com&cheqSource=1&cheqEvent=3&responseTime=1972
200 OK 4 B URL HTTP/1.1 log.outbrainimg.com/loggerServices/dwce_cheq_events?timestamp=1674931081877&sessionId=33d4009f-06b4-ea49-fe79-0ae7e84f7233&url=www.news5cleveland.com&cheqSource=1&cheqEvent=3&responseTime=1972
IP
File type ASCII text, with no line terminators
Hash b326b5062b2f0e69046810717534cb09
5ffe533b830f08a0326348a9160afafc8ada44db
b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
GET /loggerServices/dwce_cheq_events?timestamp=1674931081877&sessionId=33d4009f-06b4-ea49-fe79-0ae7e84f7233&url=www.news5cleveland.com&cheqSource=1&cheqEvent=3&responseTime=1972 HTTP/1.1
Host: log.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 18:37:58 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 4
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST
X-TraceId: 097f0726c2254c2fac5b850949813830
mcdp-nydc1.outbrain.com/l?token=11cb2d29998f31b68d8512e89cfe1675_4113_1674931077916&tm=2298&eT=0&widgetWidth=608&widgetHeight=624&widgetX=154&widgetY=4660&wRV=2010100&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&rtt=931&oo=true&lo=2927&odbreq=4030&odbres=4445&mvreq=4518&mvres=5451&re=5460&cs=3&to=1674931076742&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=11cb2d29998f31b68d8512e89cfe1675_4113_1674931077916&tm=2298&eT=0&widgetWidth=608&widgetHeight=624&widgetX=154&widgetY=4660&wRV=2010100&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&rtt=931&oo=true&lo=2927&odbreq=4030&odbres=4445&mvreq=4518&mvres=5451&re=5460&cs=3&to=1674931076742&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=11cb2d29998f31b68d8512e89cfe1675_4113_1674931077916&tm=2298&eT=0&widgetWidth=608&widgetHeight=624&widgetX=154&widgetY=4660&wRV=2010100&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&rtt=931&oo=true&lo=2927&odbreq=4030&odbres=4445&mvreq=4518&mvres=5451&re=5460&cs=3&to=1674931076742&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Origin: https://www.news5cleveland.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 18:37:58 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 3899019abea5596021e4e80027fe3964
mcdp-nydc1.outbrain.com/l?token=a49dd04b045a6192196fa183b3e9b427_4113_1674931078029&tm=2320&eT=0&widgetWidth=608&widgetHeight=780&widgetX=154&widgetY=5284&wRV=2010100&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&rtt=931&oo=true&lo=2927&odbreq=4030&odbres=4445&mvreq=4518&mvres=5451&re=5483&cs=3&to=1674931076742&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=a49dd04b045a6192196fa183b3e9b427_4113_1674931078029&tm=2320&eT=0&widgetWidth=608&widgetHeight=780&widgetX=154&widgetY=5284&wRV=2010100&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&rtt=931&oo=true&lo=2927&odbreq=4030&odbres=4445&mvreq=4518&mvres=5451&re=5483&cs=3&to=1674931076742&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=a49dd04b045a6192196fa183b3e9b427_4113_1674931078029&tm=2320&eT=0&widgetWidth=608&widgetHeight=780&widgetX=154&widgetY=5284&wRV=2010100&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&rtt=931&oo=true&lo=2927&odbreq=4030&odbres=4445&mvreq=4518&mvres=5451&re=5483&cs=3&to=1674931076742&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Origin: https://www.news5cleveland.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 18:37:58 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: e68770252279a7fa8babc9def4ac5a20
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efada10d2d3b1c0348542f4385bb0125
f7a73a926024caff1886422c930c6816192293d6
109aa85aa5895922a8c042bee431609d2c514ee08547cc0f4cbd96de9060b04f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 129259bf062d7eb460547eb66ee30a83
c340a86ed2c1b2b508c6b21ca21dd6cfd8afc815
753d90d0ee7702f263d9970d624633bf1f5a73d7dc792e3ee073eb961967c126
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efada10d2d3b1c0348542f4385bb0125
f7a73a926024caff1886422c930c6816192293d6
109aa85aa5895922a8c042bee431609d2c514ee08547cc0f4cbd96de9060b04f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.ampproject.org/rtv/012301112346000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012301112346000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14751)
Hash 8d4f7148a157a31d69df198119f15f6c
869d2edb3409f82d8da8690b3b6c7c4212466bf1
9e17a0f37428d7db29cea9973f978d4716aaa7581c2480e9c337efcc84def4bf
GET /rtv/012301112346000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5217
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:11:05 GMT
expires: Tue, 23 Jan 2024 18:11:05 GMT
cache-control: public, max-age=31536000
etag: "cee5c64b71634b65"
content-type: text/javascript; charset=UTF-8
age: 433613
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 129259bf062d7eb460547eb66ee30a83
c340a86ed2c1b2b508c6b21ca21dd6cfd8afc815
753d90d0ee7702f263d9970d624633bf1f5a73d7dc792e3ee073eb961967c126
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 129259bf062d7eb460547eb66ee30a83
c340a86ed2c1b2b508c6b21ca21dd6cfd8afc815
753d90d0ee7702f263d9970d624633bf1f5a73d7dc792e3ee073eb961967c126
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.ampproject.org/rtv/012301112346000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012301112346000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5021)
Hash 7fe5c160dceb250b352d5e11b7586036
0903f40a74a5805f6391a371509369de8e2e1c50
eaec033417fdbf02ec62fc0bf45d0bee3538e3e1722660a312cbe3e4dd60068f
GET /rtv/012301112346000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1907
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:11:08 GMT
expires: Tue, 23 Jan 2024 18:11:08 GMT
cache-control: public, max-age=31536000
etag: "5788572ff662ddbc"
content-type: text/javascript; charset=UTF-8
age: 433610
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012301112346000/v0/amp-analytics-0.1.mjs
200 OK 29 kB URL HTTP/2 cdn.ampproject.org/rtv/012301112346000/v0/amp-analytics-0.1.mjs
IP
File type ASCII text, with very long lines (65534)
Hash 7c4e76629bf5f57043e927954d19a19d
a144b16ad4d7168628eaed4f4b26e00a8f4364e3
310354d1c8f1db61fdfb182e107c8eb8a2e7986d1f4e95a2664df2cbdc1f7ccf
GET /rtv/012301112346000/v0/amp-analytics-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 28839
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:11:05 GMT
expires: Tue, 23 Jan 2024 18:11:05 GMT
cache-control: public, max-age=31536000
etag: "22d781f17bba60c1"
content-type: text/javascript; charset=UTF-8
age: 433613
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012301112346000/v0/amp-form-0.1.mjs
200 OK 13 kB URL HTTP/2 cdn.ampproject.org/rtv/012301112346000/v0/amp-form-0.1.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (41068)
Hash dac0049d10fef1c315153ac07254ffda
6282a0a8727d76cb0fe8267c7f1aac6646302ebc
e7d78a90fc0d890bd6da55f94658d31a587cca0247d81364b7a39a7f142772d1
GET /rtv/012301112346000/v0/amp-form-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 12955
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:11:08 GMT
expires: Tue, 23 Jan 2024 18:11:08 GMT
cache-control: public, max-age=31536000
etag: "ba03cd6134fdf15c"
content-type: text/javascript; charset=UTF-8
age: 433610
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 129259bf062d7eb460547eb66ee30a83
c340a86ed2c1b2b508c6b21ca21dd6cfd8afc815
753d90d0ee7702f263d9970d624633bf1f5a73d7dc792e3ee073eb961967c126
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 49 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3504)
Hash eaf26b8f5900d361a5d447ea72df4752
26b0a44ca382082dde8648abd0a4d949bdf0c664
1334af0b91c26ce21cb75ab69d0c7e9c8ec1f00c0ce946a3689bb9d6fdcc4d37
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 49065
date: Sat, 28 Jan 2023 18:37:58 GMT
expires: Sat, 28 Jan 2023 18:37:58 GMT
cache-control: private, max-age=3000
etag: "1674650782302584"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 17504951994384b5dfa3387f5e8b684f
d76ab271cbc580a05222ec155fbc0e82545ae97c
f7e09c196a20bed2d1c1f6fada5eb982e04880a2f1c8c24d7fdce87e46152c3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 622fef0135648b055d1691ae97508eff
535c21115ccc50934d06c70e153df6ae542f1b5c
a66508fe21cab04638a3988ee90babe52167f0399a5440e329cf397182c813b4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 18:37:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
200 OK 29 kB URL HTTP/2 fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
IP
File type gzip compressed data, max compression\012- data
Hash 939209d057cd987b968ddf347451e4b7
f09df88329647db187f664bd34746a9fe612cdf7
6268301b2bb6abb784f8201b8e6e15afeda27945436cc436292652cdd014769c
GET /s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 14:34:21 GMT
expires: Fri, 26 Jan 2024 14:34:21 GMT
cache-control: public, max-age=31536000
age: 187418
last-modified: Wed, 01 Jun 2022 19:05:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/images/adchoices/icon.png
200 OK 295 B URL HTTP/2 tpc.googlesyndication.com/pagead/images/adchoices/icon.png
IP
File type PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced\012- data
Hash d848a2953307aa510bdad31f5bf84671
e9d6d8daa9255f99e4e778ff4c4b47806bdb18c1
7fd59024b6ca83f11f7a3448ec148309a13b705725716df134f699e60a96eb1b
GET /pagead/images/adchoices/icon.png HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
server: cafe
content-length: 295
x-xss-protection: 0
date: Sat, 28 Jan 2023 13:49:48 GMT
expires: Sun, 29 Jan 2023 13:49:48 GMT
cache-control: public, max-age=86400
age: 17291
etag: 426692510519060060
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/images/adchoices/en_bl.png
200 OK 2.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/images/adchoices/en_bl.png
IP
File type PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash a2ecfe2f1ee4b65edff71fd02eef82f2
f062d54119184483f6608c869e7d06a0fbbce5bb
e1a3c83144fa5752c8668ca056742ec9e6d6dfe5cfb75a97a9e53d1150068f91
GET /pagead/images/adchoices/en_bl.png HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
server: cafe
content-length: 2471
x-xss-protection: 0
date: Sat, 28 Jan 2023 10:05:58 GMT
expires: Sun, 29 Jan 2023 10:05:58 GMT
cache-control: public, max-age=86400
age: 30721
etag: 11660698925711390587
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=bb95772a7186241b613e25b2468e9752_4113_1674931078197&tm=2323&eT=0&widgetWidth=608&widgetHeight=624&widgetX=154&widgetY=6064&wRV=2010100&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&rtt=931&oo=true&lo=2927&odbreq=4030&odbres=4445&mvreq=4518&mvres=5451&re=5486&cs=3&to=1674931076742&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=bb95772a7186241b613e25b2468e9752_4113_1674931078197&tm=2323&eT=0&widgetWidth=608&widgetHeight=624&widgetX=154&widgetY=6064&wRV=2010100&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&rtt=931&oo=true&lo=2927&odbreq=4030&odbres=4445&mvreq=4518&mvres=5451&re=5486&cs=3&to=1674931076742&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=bb95772a7186241b613e25b2468e9752_4113_1674931078197&tm=2323&eT=0&widgetWidth=608&widgetHeight=624&widgetX=154&widgetY=6064&wRV=2010100&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&ccpa=1---&rtt=931&oo=true&lo=2927&odbreq=4030&odbres=4445&mvreq=4518&mvres=5451&re=5486&cs=3&to=1674931076742&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Origin: https://www.news5cleveland.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 18:37:59 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 7c0aac06417c52cfbef3ec7d38a4c568
flint.defybrick.com/show_pla?id=65349&url=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&sf=0&k=&idx=0&ch=&ext=&np=linux%20x86_64&nv=&rand=94780261919920820721680181990686289776125260006288165917526122018672&nc=0&tsf=0&tsfmi=&pv=0&cb=1674931082501&ref=&pit=1&hl=1&op=0&fs=1280x939&ss=1280x1024&pre=0&jsonp=OBR.extern.onCheqResponse&mr=&ag=1317291471&at=&bid=e30%3D&di=W1siZWYiLDgyOTZdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFstMSwiTGludXggeDg2XzY0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&tsfu=&fst=1280x939&dep=0&cpos=%5B%7B%22x%22%3A154%2C%22y%22%3A4621%2C%22w%22%3A607%2C%22h%22%3A28%7D%2C%7B%22w%22%3A1280%2C%22h%22%3A939%7D%5D&ver=41&cri=IglW4BJ4Ye&sdd=%7B%7D&pto=5763
200 OK 1.5 kB URL HTTP/2 flint.defybrick.com/show_pla?id=65349&url=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&sf=0&k=&idx=0&ch=&ext=&np=linux%20x86_64&nv=&rand=94780261919920820721680181990686289776125260006288165917526122018672&nc=0&tsf=0&tsfmi=&pv=0&cb=1674931082501&ref=&pit=1&hl=1&op=0&fs=1280x939&ss=1280x1024&pre=0&jsonp=OBR.extern.onCheqResponse&mr=&ag=1317291471&at=&bid=e30%3D&di=W1siZWYiLDgyOTZdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFstMSwiTGludXggeDg2XzY0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&tsfu=&fst=1280x939&dep=0&cpos=%5B%7B%22x%22%3A154%2C%22y%22%3A4621%2C%22w%22%3A607%2C%22h%22%3A28%7D%2C%7B%22w%22%3A1280%2C%22h%22%3A939%7D%5D&ver=41&cri=IglW4BJ4Ye&sdd=%7B%7D&pto=5763
IP
File type ASCII text, with very long lines (2541), with no line terminators
Hash 9b1c5e1186a9530871a7544a5b09ed3f
9c41c3a15489390790227a4c05553fa7a023370e
09983ba3d45e3050cf1c536ea83f53e50ebc4308dd3f2968885d13fed3174a94
GET /show_pla?id=65349&url=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&sf=0&k=&idx=0&ch=&ext=&np=linux%20x86_64&nv=&rand=94780261919920820721680181990686289776125260006288165917526122018672&nc=0&tsf=0&tsfmi=&pv=0&cb=1674931082501&ref=&pit=1&hl=1&op=0&fs=1280x939&ss=1280x1024&pre=0&jsonp=OBR.extern.onCheqResponse&mr=&ag=1317291471&at=&bid=e30%3D&di=W1siZWYiLDgyOTZdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFstMSwiTGludXggeDg2XzY0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&tsfu=&fst=1280x939&dep=0&cpos=%5B%7B%22x%22%3A154%2C%22y%22%3A4621%2C%22w%22%3A607%2C%22h%22%3A28%7D%2C%7B%22w%22%3A1280%2C%22h%22%3A939%7D%5D&ver=41&cri=IglW4BJ4Ye&sdd=%7B%7D&pto=5763 HTTP/1.1
Host: flint.defybrick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sat, 28 Jan 2023 18:37:59 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 1543
X-Firefox-Spdy: h2
flint.defybrick.com/tracker/imp.gif?e=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&cb=1674931082987&cri=IglW4BJ4Ye
200 OK 43 B URL HTTP/2 flint.defybrick.com/tracker/imp.gif?e=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&cb=1674931082987&cri=IglW4BJ4Ye
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/imp.gif?e=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&cb=1674931082987&cri=IglW4BJ4Ye HTTP/1.1
Host: flint.defybrick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sat, 28 Jan 2023 18:37:59 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
g2.gumgum.com/hbid/imp?lt=1674931080324&to=0&aun=MAD_INVIEW&gpid=%2F6088%2Fssp.wews%2Finview-bottom&t=hylav7wr&pi=3&maxw=728&maxh=90&si=113123&bf=728x90&uspConsent=1---&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ce=false&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.31.0%22%7D&ogu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
200 OK 790 B URL HTTP/2 g2.gumgum.com/hbid/imp?lt=1674931080324&to=0&aun=MAD_INVIEW&gpid=%2F6088%2Fssp.wews%2Finview-bottom&t=hylav7wr&pi=3&maxw=728&maxh=90&si=113123&bf=728x90&uspConsent=1---&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ce=false&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.31.0%22%7D&ogu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
IP
File type JSON data\012- , ASCII text, with very long lines (1602), with no line terminators
Hash fc938d2389a5e4fb06ea992c4d590048
2536f822317920ab4554b6150b3f2915d6ba8ad7
74e2e090c72e92bee309d194b343c9b24070cdce1b636a13170a7a7e7673a065
GET /hbid/imp?lt=1674931080324&to=0&aun=MAD_INVIEW&gpid=%2F6088%2Fssp.wews%2Finview-bottom&t=hylav7wr&pi=3&maxw=728&maxh=90&si=113123&bf=728x90&uspConsent=1---&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ce=false&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.31.0%22%7D&ogu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths HTTP/1.1
Host: g2.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:56 GMT
content-type: application/json;charset=UTF-8
server: nginx
cache-control: private, no-store, must-revalidate, max-age=0
expires: 0
pragma: no-cache
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
set-cookie: cs=true; Domain=.gumgum.com; Expires=Sun, 28 Jan 2024 18:37:56 GMT; Path=/; Secure; SameSite=None
loc=N7qTz27lIInvAtVkW_A2n8IPDSVhUFp5ZtvvLnagCyWgO6qnhr3rsDgpAvQ4k_ILucM2xp01RC01kWvmi96IUASz3YPoPsdndUXuslWRIRkGoJVdhs0Ggw; Domain=.gumgum.com; Expires=Mon, 27 Feb 2023 18:37:56 GMT; Path=/; Secure; SameSite=None
vst=e_7056bcee-226f-4145-809e-52b903b74e02; Domain=.gumgum.com; Expires=Sun, 28 Jan 2024 18:37:56 GMT; Path=/; Secure; SameSite=None
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/si?st=NO_DATA HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sat, 28 Jan 2023 18:37:59 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: DSID=NO_DATA; expires=Sat, 28-Jan-2023 19:37:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 28 Jan 2023 18:37:59 GMT
cache-control: private
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 13 kB URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
File type ASCII text, with very long lines (25382)
Hash ff95835f40ed4bf55fe086c860e2f2ed
7b22d087c3cdc89f29effbdcc361e6dc43e7f10e
babbc7bbc82f45a4d66315661c8f48c7c607b26b144bb9e375bf2015cb31a4cc
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 23 Dec 2022 01:05:48 GMT
x-amz-version-id: 1R3b4YI9dI20q9Y7Gq1DHxVUnq3Fp2gn
server: AmazonS3
content-encoding: gzip
date: Sat, 28 Jan 2023 06:02:00 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2B9V3xy7MtVZYH9P1jTe35NjMq1hjjO5fuQbkdeCA3asaMKvQTSfew==
age: 45357
X-Firefox-Spdy: h2
img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/fa0018de-343b-46ef-a50e-6022e17709ab.jpg?crop=600:410,smart&width=600&height=410&format=jpeg&quality=60&fit=crop
200 OK 14 kB URL HTTP/2 img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/fa0018de-343b-46ef-a50e-6022e17709ab.jpg?crop=600:410,smart&width=600&height=410&format=jpeg&quality=60&fit=crop
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x410, components 3\012- data
Hash 853c9dc9ade1160e84feea521559e0a4
0a5000a7b451f916fb674e8a5e82a560f0d1822c
2dd1d924971392f5a89233eec845ea18b390577b4aa03cce59a14ae1b7def473
GET /pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/fa0018de-343b-46ef-a50e-6022e17709ab.jpg?crop=600:410,smart&width=600&height=410&format=jpeg&quality=60&fit=crop HTTP/1.1
Host: img.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "Wea2OonbyxoxoC5uz+k4iWMp1Pdq+ixmGp/hTOUVi+A"
fastly-io-info: ifsz=161761 idim=1200x630 ifmt=png ofsz=14963 odim=600x410 ofmt=jpeg
fastly-stats: io=1
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000, public
content-encoding: br
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:38:00 GMT
age: 81386
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 13896
X-Firefox-Spdy: h2
capi-tier-2-us-east-2.connatix.com/tr/ao?v=218122
200 OK 20 B URL HTTP/1.1 capi-tier-2-us-east-2.connatix.com/tr/ao?v=218122
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
POST /tr/ao?v=218122 HTTP/1.1
Host: capi-tier-2-us-east-2.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 414
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.news5cleveland.com
content-encoding: gzip
content-type: application/x-protobuf
date: Sat, 28 Jan 2023 18:37:59 GMT
server: Kestrel
vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive
capi-tier-2-us-east-2.connatix.com/tr/ps?v=218122
200 OK 20 B URL HTTP/1.1 capi-tier-2-us-east-2.connatix.com/tr/ps?v=218122
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
POST /tr/ps?v=218122 HTTP/1.1
Host: capi-tier-2-us-east-2.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 365
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.news5cleveland.com
content-encoding: gzip
content-type: application/x-protobuf
date: Sat, 28 Jan 2023 18:38:00 GMT
server: Kestrel
vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive
img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/fa0018de-343b-46ef-a50e-6022e17709ab.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
200 OK 12 kB URL HTTP/2 img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/fa0018de-343b-46ef-a50e-6022e17709ab.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x338, components 3\012- data
Hash 250dc1a04f834456cf0d77427f6fa57e
bb7557215d6231f306f1c8724ddde3abc2eb2f0a
f238295e88d6ded068c7141d9614f13cccf8db586047ce4e3e4376bcd98c640f
GET /pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/fa0018de-343b-46ef-a50e-6022e17709ab.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop HTTP/1.1
Host: img.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "XtVXomASZf0ODEnRp3Fzxn3nTyrB/frMTu34+bQwT88"
fastly-io-info: ifsz=161761 idim=1200x630 ifmt=png ofsz=13402 odim=600x338 ofmt=jpeg
fastly-stats: io=1
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000, public
content-encoding: br
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:38:00 GMT
age: 81386
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 12425
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&pid=FeEogqpjerm0F&cb=2&ws=1280x898&v=23.123.1617&t=2000&slots=%5B%7B%22id%22%3A%22Connatix_Instream_Video%22%2C%22mt%22%3A%22v%22%7D%5D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 204 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&pid=FeEogqpjerm0F&cb=2&ws=1280x898&v=23.123.1617&t=2000&slots=%5B%7B%22id%22%3A%22Connatix_Instream_Video%22%2C%22mt%22%3A%22v%22%7D%5D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash c8ae673ccdead9952bfdbcf15103df68
88ec82fa387f7952e26477b19702f0618f99a425
8eeb63ed4f108412d7b56cd5c21fffd29b5d5d0ea6bfbba79e9e79b427c85399
GET /e/dtb/bid?src=3295&u=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&pid=FeEogqpjerm0F&cb=2&ws=1280x898&v=23.123.1617&t=2000&slots=%5B%7B%22id%22%3A%22Connatix_Instream_Video%22%2C%22mt%22%3A%22v%22%7D%5D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 204
server: Server
date: Sat, 28 Jan 2023 18:38:00 GMT
x-amz-rid: HM89QR2H2TNSPN9APAWE
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tMWCF19aKFSStuSGd44FQfA7iiwWS9mkuKLhzPUIxqN6k9IgUNWfUg==
X-Firefox-Spdy: h2
img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/057f45eb-8d39-4e40-863b-a5c7c471e369.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
200 OK 6.0 kB URL HTTP/2 img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/057f45eb-8d39-4e40-863b-a5c7c471e369.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x338, components 3\012- data
Hash 57e618fe6731c0e39b290df714429700
f6114cc585be1d9c602a9e8f3430f2b72e750c14
54d5fc015c316073a28513f19abeab010b4461a07ab508188c5f9790ffe3e717
GET /pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/057f45eb-8d39-4e40-863b-a5c7c471e369.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop HTTP/1.1
Host: img.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "EPyQ5ELCTcIFzv/qnJkcnVS7FTybo2eRiAm5o/c+ChU"
fastly-io-info: ifsz=26094 idim=1200x630 ifmt=jpeg ofsz=7421 odim=600x338 ofmt=jpeg
fastly-stats: io=1
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000, public
content-encoding: br
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:38:00 GMT
age: 81386
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 5985
X-Firefox-Spdy: h2
img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/6b2cfa6c-ec34-4fba-81b0-d0721f461627.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
200 OK 22 kB URL HTTP/2 img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/6b2cfa6c-ec34-4fba-81b0-d0721f461627.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x338, components 3\012- data
Hash c6305aaf0c1ffd951ff868cf45d1d83e
43b0ca93a4a1596ff2264c0add46d1a56dd96380
c8022158d4af17699d47d4b9978fc343d9e0f625e6741c503a0a26da07b49542
GET /pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/6b2cfa6c-ec34-4fba-81b0-d0721f461627.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop HTTP/1.1
Host: img.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "ECkLi3HG6ReuhNHeEn4OgK5ZQ+EXo0dpz9TAkZRsbLk"
fastly-io-info: ifsz=133437 idim=1200x630 ifmt=jpeg ofsz=22238 odim=600x338 ofmt=jpeg
fastly-stats: io=1
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000, public
content-encoding: br
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:38:00 GMT
age: 81386
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 21789
X-Firefox-Spdy: h2
img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/2e91c11a-7863-40ba-97e1-682eda783647.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
200 OK 9.8 kB URL HTTP/2 img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/2e91c11a-7863-40ba-97e1-682eda783647.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x338, components 3\012- data
Hash f0c0389edf42b6b879794214e7165898
7444d63f587d1c67fe33da90e09259f578e21386
4b8b951c1f7a1a0dffd4d7d4a88bd0e0d1293abc6f3178d31fe6e851a011326b
GET /pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/2e91c11a-7863-40ba-97e1-682eda783647.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop HTTP/1.1
Host: img.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "ubKv2lVmW9NUNXYSVFrcKFLQaz8wPtjVV1HZ/xKWdrs"
fastly-io-info: ifsz=400606 idim=1200x630 ifmt=png ofsz=11496 odim=600x338 ofmt=jpeg
fastly-stats: io=1
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000, public
content-encoding: br
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:38:00 GMT
age: 81386
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 9795
X-Firefox-Spdy: h2
capi-tier-2-us-east-2.connatix.com/rtb/g?v=218122
200 OK 370 B URL HTTP/1.1 capi-tier-2-us-east-2.connatix.com/rtb/g?v=218122
IP
Hash e9c0c82fbd22c3723e9fe7139368f2ec
6846b54a09f9cbcc352f5e35c4ca9d2ad95ad6d6
69052e90b7bcd50fd1d23ecb865dd676cf630583c4e2c66c38f38a237a91636b
POST /rtb/g?v=218122 HTTP/1.1
Host: capi-tier-2-us-east-2.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data
Content-Length: 1077
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.news5cleveland.com
content-encoding: gzip
content-type: application/x-protobuf
date: Sat, 28 Jan 2023 18:37:59 GMT
server: Kestrel
vary: Accept-Encoding
Content-Length: 370
Connection: keep-alive
img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/73c7e19e-156d-4bef-bd91-1219f52cbea8.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
200 OK 14 kB URL HTTP/2 img.connatix.com/pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/73c7e19e-156d-4bef-bd91-1219f52cbea8.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x338, components 3\012- data
Hash 8256f66eb2883eea99a5c39e0b187a7c
2b4e1252d7b95bcb13a478f5984a49b6742f992f
74f2d133a4aa548c1dafcb65dca4e05f138bd640f4c420e472ecb9bcf3f59aa7
GET /pid-e5750b44-30cd-414b-9fa4-7d5295501d3b/e1bb6cd9-bf88-4e4a-889b-83b30bbcacdd/73c7e19e-156d-4bef-bd91-1219f52cbea8.jpg?crop=600:338,smart&width=600&height=338&format=jpeg&quality=60&fit=crop HTTP/1.1
Host: img.connatix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "1i49c0AyJa5jdWWdK+o1zxtoZI1ZKu6Y+H4WDtBx9FU"
fastly-io-info: ifsz=510493 idim=1200x630 ifmt=png ofsz=14445 odim=600x338 ofmt=jpeg
fastly-stats: io=1
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000, public
content-encoding: br
accept-ranges: bytes
date: Sat, 28 Jan 2023 18:38:00 GMT
age: 81386
access-control-max-age: 86400
access-control-allow-origin: *
content-length: 14056
X-Firefox-Spdy: h2
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-index_rx_n-MediaNet_ox-db5_n-sharethrough_pm-db5_ym_rbd_n-emx_n-vmg_an-db5_sovrn_3lift_n-Outbrain
302 Found 0 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-index_rx_n-MediaNet_ox-db5_n-sharethrough_pm-db5_ym_rbd_n-emx_n-vmg_an-db5_sovrn_3lift_n-Outbrain
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-index_rx_n-MediaNet_ox-db5_n-sharethrough_pm-db5_ym_rbd_n-emx_n-vmg_an-db5_sovrn_3lift_n-Outbrain HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Sat, 28 Jan 2023 18:38:00 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: BPEY3PJND1RH75QSBTAA
Set-Cookie: ad-id=A43z4PJfzEG4rol_wB-PQl4|t; Domain=.amazon-adsystem.com; Expires=Sun, 01-Oct-2023 18:38:00 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-index_rx_n-MediaNet_ox-db5_n-sharethrough_pm-db5_ym_rbd_n-emx_n-vmg_an-db5_sovrn_3lift_n-Outbrain&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-index_rx_n-MediaNet_ox-db5_n-sharethrough_pm-db5_ym_rbd_n-emx_n-vmg_an-db5_sovrn_3lift_n-Outbrain&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-index_rx_n-MediaNet_ox-db5_n-sharethrough_pm-db5_ym_rbd_n-emx_n-vmg_an-db5_sovrn_3lift_n-Outbrain&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_n-index_rx_n-MediaNet_ox-db5_n-sharethrough_pm-db5_ym_rbd_n-emx_n-vmg_an-db5_sovrn_3lift_n-Outbrain&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Sat, 28 Jan 2023 18:38:00 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: KAG457J0W844YWRJRJ77
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
static.xx.fbcdn.net/rsrc.php/v3i6-G4/yk/l/en_US/4c8G_VnlB7X.js?_nc_x=Ij3Wp8lg5Kz
200 OK 0 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3i6-G4/yk/l/en_US/4c8G_VnlB7X.js?_nc_x=Ij3Wp8lg5Kz
IP
GET /rsrc.php/v3i6-G4/yk/l/en_US/4c8G_VnlB7X.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 28 Jan 2024 03:13:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: N/DhrKyWR/vGT98nKHOfSA==
x-fb-debug: grk6EWVVX+vp7a/RZsm8M2G2Pmu0rI2KPE3zD2ZthgYTHelsGUhy8ysJxjFLz3wt2Rr1Wk4nZipK0bU2rTANBg==
content-length: 142804
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/plugins/video.php?href=https%3A%2F%2Fwww.facebook.com%2FClevelandMetroparksZoo%2Fvideos%2F10159355197300002%2F&show_text=0&width=560
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/video.php?href=https%3A%2F%2Fwww.facebook.com%2FClevelandMetroparksZoo%2Fvideos%2F10159355197300002%2F&show_text=0&width=560
IP
GET /plugins/video.php?href=https%3A%2F%2Fwww.facebook.com%2FClevelandMetroparksZoo%2Fvideos%2F10159355197300002%2F&show_text=0&width=560 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: pExkjKlgWqnfJlJBGtnzGk0FxLUOyJbaBCaVzOjIGCKeGA8d9ERb9S6KnRIHhqagQaHuJiRZYbfPgK0iXJVrSg==
date: Sat, 28 Jan 2023 18:37:56 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
d3plfjw9uod7ab.cloudfront.net/ad/6d6d25e3-5be4-444b-82ae-a8f0bb892234.js
200 OK 0 B URL HTTP/2 d3plfjw9uod7ab.cloudfront.net/ad/6d6d25e3-5be4-444b-82ae-a8f0bb892234.js
IP
GET /ad/6d6d25e3-5be4-444b-82ae-a8f0bb892234.js HTTP/1.1
Host: d3plfjw9uod7ab.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 13:16:24 GMT
x-amz-version-id: OkSKuOi_M1KeQLKx0csIv8JFbutYIrO3
server: AmazonS3
content-encoding: br
date: Sat, 28 Jan 2023 18:05:15 GMT
cache-control: max-age=7200, public
etag: W/"7a14d816c6b9923b84f9184b6f85eef6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: prugjHzz-Ya_1FzEMzd9BiUCwt21CteVMYA5sfvctpIaz0lQ977FTg==
age: 2242
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=5776&site_id=361740&zone_id=1953830&size_id=2&alt_size_ids=55%2C57&p_pos=atf&us_privacy=1---&rf=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&kw=PublicUtilityDirectorRobertDavist%2Cratepayers%2Cpromotions%2CClevelandWaterDepartment%2Csewer&tg_i.page=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&tg_i.domain=news5cleveland.com&tg_i.aupname=%2F6088%2Fssp.wews%26mad_header&tg_i.pbadslot=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_HEADER&tk_flint=dmpbjs_v7.31.0&x_source.tid=77e11b20-0962-4ee2-860c-8910e45384da&l_pb_bid_id=35e221082b2ee598&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_HEADER&slots=1&rand=0.9688026767915633
200 OK 0 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=5776&site_id=361740&zone_id=1953830&size_id=2&alt_size_ids=55%2C57&p_pos=atf&us_privacy=1---&rf=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&kw=PublicUtilityDirectorRobertDavist%2Cratepayers%2Cpromotions%2CClevelandWaterDepartment%2Csewer&tg_i.page=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&tg_i.domain=news5cleveland.com&tg_i.aupname=%2F6088%2Fssp.wews%26mad_header&tg_i.pbadslot=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_HEADER&tk_flint=dmpbjs_v7.31.0&x_source.tid=77e11b20-0962-4ee2-860c-8910e45384da&l_pb_bid_id=35e221082b2ee598&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_HEADER&slots=1&rand=0.9688026767915633
IP
GET /a/api/fastlane.json?account_id=5776&site_id=361740&zone_id=1953830&size_id=2&alt_size_ids=55%2C57&p_pos=atf&us_privacy=1---&rf=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&kw=PublicUtilityDirectorRobertDavist%2Cratepayers%2Cpromotions%2CClevelandWaterDepartment%2Csewer&tg_i.page=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&tg_i.domain=news5cleveland.com&tg_i.aupname=%2F6088%2Fssp.wews%26mad_header&tg_i.pbadslot=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_HEADER&tk_flint=dmpbjs_v7.31.0&x_source.tid=77e11b20-0962-4ee2-860c-8910e45384da&l_pb_bid_id=35e221082b2ee598&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_HEADER&slots=1&rand=0.9688026767915633 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sat, 28 Jan 2023 18:37:57 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.news5cleveland.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LDGAPUC2-1S-24JZ; Domain=.rubiconproject.com; Path=/; Expires=Sun, 28-Jan-2024 18:37:57 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrwaXHuIiwwX+9DtVM30fCgUUU2gzpZzyL0RME9IbeWOMIv984sWo10Zs/WQYjwFaFymPvo8pleP+vvlaCeciHL/R7Fz5/Qhm0=; Domain=.rubiconproject.com; Path=/; Expires=Sun, 28-Jan-2024 18:37:57 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
btloader.com/tag?o=5107371200741376&upapi=true
200 OK 0 B URL HTTP/2 btloader.com/tag?o=5107371200741376&upapi=true
IP
GET /tag?o=5107371200741376&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.news5cleveland.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:58 GMT
content-type: application/javascript
cache-control: public, max-age=300, must-revalidate, stale-if-error=86400
etag: W/"b8ee3de82e79cd94adf1a150fbc19914"
last-modified: Sat, 28 Jan 2023 18:21:08 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 777
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VYnsi%2F73m%2BKAdH3mXM7%2FWh9ace%2BjzbJDCMgIaJpND6Sq0L63BhFQm5qela%2FmxPXSaHaUvcRD2boOPs7EvXXjMM%2FzcPYgSR3k8txKYkbf9WHb1Vyqn5I5PiHciIE9Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790bd7a5c866b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.cookielaw.org/opt-out/otCCPAiab.js
200 OK 0 B URL HTTP/2 cdn.cookielaw.org/opt-out/otCCPAiab.js
IP
GET /opt-out/otCCPAiab.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:54 GMT
content-type: application/javascript
content-md5: ERttG9+iQk1LCPjR495NRw==
last-modified: Tue, 22 Feb 2022 22:01:18 GMT
x-ms-request-id: 00bc8f20-801e-016a-3f39-28c218000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 58859
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790bd7917f9eb524-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
g2.gumgum.com/hbid/imp?lt=1674931080324&to=0&aun=MAD_RIGHT_RAIL&gpid=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_RIGHT_RAIL&t=hylav7wr&pi=3&maxw=300&maxh=600&si=113122&bf=300x600%2C300x250&uspConsent=1---&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ce=false&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.31.0%22%7D&ogu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
200 OK 0 B URL HTTP/2 g2.gumgum.com/hbid/imp?lt=1674931080324&to=0&aun=MAD_RIGHT_RAIL&gpid=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_RIGHT_RAIL&t=hylav7wr&pi=3&maxw=300&maxh=600&si=113122&bf=300x600%2C300x250&uspConsent=1---&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ce=false&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.31.0%22%7D&ogu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths
IP
GET /hbid/imp?lt=1674931080324&to=0&aun=MAD_RIGHT_RAIL&gpid=%2F6088%2Fssp.wews%2Fnews%2Flocal_news%2Finvestigations%2Fdetail%23MAD_RIGHT_RAIL&t=hylav7wr&pi=3&maxw=300&maxh=600&si=113122&bf=300x600%2C300x250&uspConsent=1---&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths&ce=false&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.31.0%22%7D&ogu=https%3A%2F%2Fwww.news5cleveland.com%2Fnews%2Flocal-news%2Finvestigations%2Fcle-water-spends-1-million-dollars-promoting-itself-with-mugs-water-bottles-even-zoo-baths HTTP/1.1
Host: g2.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.news5cleveland.com
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 18:37:56 GMT
content-type: application/json;charset=UTF-8
server: nginx
cache-control: private, no-store, must-revalidate, max-age=0
expires: 0
pragma: no-cache
access-control-allow-origin: https://www.news5cleveland.com
access-control-allow-credentials: true
set-cookie: cs=true; Domain=.gumgum.com; Expires=Sun, 28 Jan 2024 18:37:56 GMT; Path=/; Secure; SameSite=None
loc=N7qTz27lIInvAtVkW_A2n8IPDSVhUFp5ZtvvLnagCyWgO6qnhr3rsDgpAvQ4k_ILucM2xp01RC01kWvmi96IUASz3YPoPsdndUXuslWRIRkGoJVdhs0Ggw; Domain=.gumgum.com; Expires=Mon, 27 Feb 2023 18:37:56 GMT; Path=/; Secure; SameSite=None
vst=e_5318892b-513f-42fd-9962-7e87b9283741; Domain=.gumgum.com; Expires=Sun, 28 Jan 2024 18:37:56 GMT; Path=/; Secure; SameSite=None
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012301112346000/amp4ads-v0.mjs
200 OK 0 B URL HTTP/2 cdn.ampproject.org/rtv/012301112346000/amp4ads-v0.mjs
IP
GET /rtv/012301112346000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61771
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:11:05 GMT
expires: Tue, 23 Jan 2024 18:11:05 GMT
cache-control: public, max-age=31536000
etag: "004684fcaffa7679"
content-type: text/javascript; charset=UTF-8
age: 433613
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hbx.media.net/bidexchange.js?cid=8CU6Q6626&version=5.1&dn=www.news5cleveland.com
200 OK 0 B URL HTTP/2 hbx.media.net/bidexchange.js?cid=8CU6Q6626&version=5.1&dn=www.news5cleveland.com
IP
GET /bidexchange.js?cid=8CU6Q6626&version=5.1&dn=www.news5cleveland.com HTTP/1.1
Host: hbx.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.news5cleveland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-type: text/javascript; charset=utf-8
x-mnet-h: E
strict-transport-security: max-age=86400 ; includeSubDomains
timing-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Sat, 28 Jan 2023 19:07:56 GMT
date: Sat, 28 Jan 2023 18:37:56 GMT
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yU/r/4UPyB_fNoOt.js?_nc_x=Ij3Wp8lg5Kz
200 OK 0 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yU/r/4UPyB_fNoOt.js?_nc_x=Ij3Wp8lg5Kz
IP
GET /rsrc.php/v3/yU/r/4UPyB_fNoOt.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 19 Jan 2024 01:26:30 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: yqPq4rlYBqmSgEJZp/5j+A==
x-fb-debug: Vi+Kc7qATTGMoQI0QKj+/hU+Sct4EwlQ6C8qrqBGmup0DYrhGkmw078aT/04mE5af/IQlT39I48fLkU5ziJF+Q==
priority: u=3,i
content-length: 743
x-fb-trip-id: 1679558926
date: Sat, 28 Jan 2023 18:37:56 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
54.230.111.7
63.215.202.146
18.200.161.0
157.240.200.14
104.18.26.85
31.13.72.14
23.38.201.81
35.157.246.167
93.184.220.29