Overview

URLnewspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
IP 66.29.140.247 (United States)
ASN#22612 NAMECHEAP-NET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-07 02:47:13 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (24)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (9) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3042 7977 23.36.77.32
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1518 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 386 44359 172.217.21.168
ocsp.sca1b.amazontrust.com (1) 1015 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 350 1004 143.204.42.165
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
ocsp.sectigo.com (5) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1700 4815 104.18.32.68
simplewebanalysis.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 395 410 52.28.211.11
trapexpansionmoss.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3009 32908 173.233.137.44
www.google.com (2) 7 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1036 1388 142.250.74.132
www.google.no (2) 25607 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1034 1388 142.250.74.163
cdn.cloudimagesb.com (1) 23099 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 402 144705 45.133.44.9
ocsp.pki.goog (14) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4802 9795 142.250.74.131
fonts.googleapis.com (1) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 406 1523 142.250.74.106
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 35.162.142.194
www.newspatrolling.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 625 11399 66.29.140.247
www.variousformatscontent.com (1) 186522 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 409 10518 192.243.61.227
hygieneretorted.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 450 467 173.233.137.60
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
newspatrolling.com (21) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 12248 338050 66.29.140.247
static.addtoany.com (7) 4091 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2937 72490 104.22.71.197
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 58372 34.120.237.76
www.google-analytics.com (2) 40 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2426 1276 142.250.74.110
stats.g.doubleclick.net (2) 96 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1218 1424 64.233.164.155

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-07 medium variousformatscontent.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 3 reports on IP: 66.29.140.247
Date UQ / IDS / BL URL IP
2022-12-07 02:47:13 UTC 0 - 0 - 1 newspatrolling.com/marking-its-10th-anniversa (...) 66.29.140.247
2022-09-13 06:49:13 UTC 0 - 0 - 5 newspatrolling.com/radixwebs-digital-marketin (...) 66.29.140.247
2022-08-30 05:48:01 UTC 0 - 0 - 7 newspatrolling.com/exercise-the-right-way-for (...) 66.29.140.247


Last 5 reports on ASN: NAMECHEAP-NET
Date UQ / IDS / BL URL IP
2023-06-05 23:30:21 UTC 0 - 0 - 2 26motor.net/wp-includes/auth/new/sf_rand_stri (...) 162.0.217.66
2023-06-05 23:25:46 UTC 4 - 0 - 0 ribbonkids.com/real/xo/sf_rand_string_lowerca (...) 162.213.255.9
2023-06-05 22:54:29 UTC 4 - 0 - 0 ribbonkids.com/real/xo/sf_rand_string_lowerca (...) 162.213.255.9
2023-06-05 22:47:32 UTC 4 - 0 - 0 ribbonkids.com/real/xo/sf_rand_string_lowerca (...) 162.213.255.9
2023-06-05 22:47:28 UTC 4 - 0 - 0 ribbonkids.com/real/xo/sf_rand_string_lowerca (...) 162.213.255.9


Last 3 reports on domain: newspatrolling.com
Date UQ / IDS / BL URL IP
2022-12-07 02:47:13 UTC 0 - 0 - 1 newspatrolling.com/marking-its-10th-anniversa (...) 66.29.140.247
2022-09-13 06:49:13 UTC 0 - 0 - 5 newspatrolling.com/radixwebs-digital-marketin (...) 66.29.140.247
2022-08-30 05:48:01 UTC 0 - 0 - 7 newspatrolling.com/exercise-the-right-way-for (...) 66.29.140.247


No other reports with similar screenshot

JavaScript

Executed Scripts (29)

Executed Evals (1)
#1 JavaScript::Eval (size: 2097) - SHA256: 72172ad395de7249266afc92852dbc6ebe57e5eed5b34d9118f35223dbcb0d25
               (function() {
                   var bn;
                   if (bn = document.getElementById('atLink-1ae910c6705c4018250d81512ff081bc')) {
                       var callback = function() {
                           (new Image()).src = '//trapexpansionmoss.com/clk.gif?landing_id=3569806&placement_id=16354852&sid=H4sIAAAAAAAC%2F1RTz4scRRuuzpd88PHxHT7JQSGHOeSg4M5WdVf1dBtEjDESjElIIjnXz9lye7qaqu7pyZ6CAQke4hz11vvOJosaxHhXZNaLBoSMB9mD%2B08IAS8iM1kYfaHqfZ%2F3qcPz1Fv10W5zhDA0%2FPDae27HFgXfZH3ce%2FmWLZVrQ%2B%2FKzR7BfXyud8uWKT3Xmyw3P36NYNbHr%2FTe0XLbbcaYYEww6V20Xhs32VyxYKtHOennuE%2FjPmEUJv6fODQRBB6BGh%2BhF8CqxamtHx%2BDlXMoR19f0GG7dtWrb4%2BagtfOw1jtv19ul64tYbQujY%2FAlPvHp8GFBUKfngBX7h87ADfeWzoAYRco%2BpWAKPePZYIYP3iuVBSgSxDqv9CO56CLA7B8DtLdBaueIgCp4MpVKEcPrzjf8tvPWb5kF%2Bjks9%2FBtgt08rfTUI6%2BOl%2FYSe%2BGK5raujLAxHRgJ3OwwzlUzQHUOxHY9gBk%2FSFY9TPafHYZytHe1VA4sOrwbCa5zAgbbOg4zjeoSQYbOY3Nhkokz1maJVSo1RVZOwdr5lDoKfAQQbNcNoLGRNBUEYzUYY%2Bz3GA8MMIkSUallEkiJctSxVRCM4OhkUsPU6irKchiCtLfgcrfgW07Bd98D2Hr8DssJdaKZzmmMiUpNRmnhlHBM5MrTrHItMhIoqWkMSYpMSSXKk4ZlgOBNUkwFdiIdCCoSIU2NBeExrFmSgqDk4EwODWSsDyhnLCcZ4xTkkouMmGIiLM0HUijNc5jpRmlKcfUiCTFAypiYgTjmdApkYzmOMZYpFnCjeAqYTTNOE8gqAhCjWCsOmg1gjYgaDmC1iJoawTtuHugihCH7qEqQiPIcY6Pc9LNXD3c5Q9cPdQl2q2O0P9Xc%2F%2Fj%2FlnY1oc9wnVOsEwHmEmKSRYzrDLCSGwMzoiQEGwHNpxYTWnHLtCLp4%2Bgsgt06n8lCH4AoTgAac8Ab04Bb2cJxsC3ZjHDsFN%2BU%2Bo2VLz2rihsOexLNwLlOqjqk1DfjnaLI%2FTSSk06uQ9aPkHHAdJ3UPkOPrA%2FIBgW92bXXYv2rrs2oMdXq9qO7A5fvtAbNa%2F1v794V99unVeXLoTp52%2FKJbEsH93Uob7MS2XLYUBfnrdKaX%2FReanRt5fCLS2uNWHrfOPLprp87a2Ll0aV1yFYV86B26f6J5B2gf7z8eurv3fms2dg%2FRx808GoWSu17gBkdQdCte4Fh8AXaywqBG3TzXws1s3CIij0GnPRQfgbFut6N9yDoY%2BA13ehHHUw9h2Miw54MYXQ%2FGtWV%2F7JG78kqwBRRDNReLQnCr%2Fk7WEvEzkzuUlZJgcDk8QpZgwrlRlhuMBUQB0W8pM%2F9%2F8CAAD%2F%2FwEAAP%2F%2FAyZ%2Btk4FAAA%3D&psid=';
                       };
                       if (bn.addEventListener) bn.addEventListener('click', callback, false);
                       else if (bn.attachEvent) bn.attachEvent('onclick', callback);
                       else bn.onclick = callback;
                   }
               })();

Executed Writes (1)
#1 JavaScript::Write (size: 126) - SHA256: 509308e56e5b93b8113f496471fd05bb7aac0e3bd47c82357aaf1b6f5069bd62
< script type = "text/javascript"
src = "http://www.variousformatscontent.com/1ae910c6705c4018250d81512ff081bc/invoke.js" > < /script>


HTTP Transactions (87)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4983
Expires: Wed, 07 Dec 2022 04:10:03 GMT
Date: Wed, 07 Dec 2022 02:47:00 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5094
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:47:00 GMT
Etag: "638f19f6-1d7"
Last-Modified: Wed, 07 Dec 2022 01:22:06 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11725
Expires: Wed, 07 Dec 2022 06:02:25 GMT
Date: Wed, 07 Dec 2022 02:47:00 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 02:18:44 GMT
cache-control: public,max-age=3600
age: 1696
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: xHmJNAaOMuSgStqAprDm0ZegbV/O2AOiiIDM8JQk66nDWoOHsafkrjlBL5+wTq76na65teJ4RWM=
x-amz-request-id: SRQWDRVSHX483DFN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 01:47:19 GMT
age: 3581
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Wed, 07 Dec 2022 02:47:00 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/ HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Wed, 07 Dec 2022 02:47:00 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
X-Pingback: http://newspatrolling.com/xmlrpc.php
Link: <https://newspatrolling.com/wp-json/>; rel="https://api.w.org/", <https://newspatrolling.com/wp-json/wp/v2/posts/28139>; rel="alternate"; type="application/json", <https://newspatrolling.com/?p=28139>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 22186
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9381), with CRLF, LF line terminators
Size:   22186
Md5:    04a00e57cd072c2d9712a41470bbca6d
Sha1:   b57bb4fdf1be8de55063a27b911c2ff986213562
Sha256: 855df217038216c41b090d80a6a7536e5a580134197287053b9e8e77526b9f6f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-51068973-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.217.21.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 02:47:00 GMT
expires: Wed, 07 Dec 2022 02:47:00 GMT
cache-control: private, max-age=900
last-modified: Wed, 07 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43596
Md5:    9062133c91297dd812bb9c480dd73df2
Sha1:   c44f1e4a0c18960df0a6c39e3bdfacb8c034679d
Sha256: 30b186bb6a430fb2b4f30a26579e71d6eab77fd21e083fcbb2cc2d848713bd86
                                        
                                            GET /menu/page.js HTTP/1.1 
Host: static.addtoany.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.22.71.197
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Wed, 07 Dec 2022 02:47:00 GMT
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
age: 67047
etag: W/"c04-5ee0ab04c6251"
last-modified: Tue, 22 Nov 2022 08:09:18 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7759ef243e2d0a23-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3076), with no line terminators
Size:   1934
Md5:    fa6e5d5983ab04e7900c2cf77a2a28ac
Sha1:   4278e05844046393e2a2309594d494f4d6487e17
Sha256: 12915682de23806bb993f8df08973cd1b34123fbd471e0df0f08ab7aef858285
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Droid+Sans:regular,bold HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 02:47:00 GMT
date: Wed, 07 Dec 2022 02:47:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 02:08:58 GMT
cache-control: public,max-age=3600
age: 2282
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5086
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:47:00 GMT
Etag: "638f062a-1d7"
Last-Modified: Wed, 07 Dec 2022 01:22:14 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:00 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 21:34:02 GMT
Expires: Sun, 11 Dec 2022 21:34:01 GMT
Etag: "542f1ec16ca5d14b63ac13cc33c3dfb1fae79dc6"
Cache-Control: max-age=412620,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759ef268ee60b06-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:00 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 21:34:02 GMT
Expires: Sun, 11 Dec 2022 21:34:01 GMT
Etag: "542f1ec16ca5d14b63ac13cc33c3dfb1fae79dc6"
Cache-Control: max-age=412620,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759ef268c64b4f4-OSL

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sPyKleujZHX/XRJgQLwEBg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.162.142.194
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: arZluxQSQ4/jQWN5NyO/2CRYcts=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 21:34:02 GMT
Expires: Sun, 11 Dec 2022 21:34:01 GMT
Etag: "542f1ec16ca5d14b63ac13cc33c3dfb1fae79dc6"
Cache-Control: max-age=412619,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759ef268f6fb4f9-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 21:34:02 GMT
Expires: Sun, 11 Dec 2022 21:34:01 GMT
Etag: "542f1ec16ca5d14b63ac13cc33c3dfb1fae79dc6"
Cache-Control: max-age=412619,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759ef268e94b518-OSL

                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Fri, 03 Dec 2021 19:05:59 GMT
ETag: "2bd8-5d24298f7c838-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 4169
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4169
Md5:    5629711d7fdd5b28441bac39b851299f
Sha1:   4e0bf2b7383097f7c352023a1b1b1b48a50356b6
Sha256: 44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 21:34:02 GMT
Expires: Sun, 11 Dec 2022 21:34:01 GMT
Etag: "542f1ec16ca5d14b63ac13cc33c3dfb1fae79dc6"
Cache-Control: max-age=412619,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759ef268eea0b06-OSL

                                        
                                            GET /wp-content/themes/sahifa/css/global.css?ver=1.1 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Tue, 18 Nov 2014 14:46:26 GMT
ETag: "55f-5082328dcf480-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 593
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   593
Md5:    1fbb6c27fe2c74b0a232549add35c35e
Sha1:   7815d9f8bfa21374230cdfe9d4ce6b939b371669
Sha256: f23cdf125b67686500440677a92818fe3f884fa9ac0793afff347ceb62ae4e99
                                        
                                            GET /wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Tue, 07 Dec 2021 17:58:20 GMT
ETag: "a99-5d2921e68bb56-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 652
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   652
Md5:    4e37be0c8c25be4f6179bcc153976542
Sha1:   91f476f1fad3fdccdc1a9f14203c92eb854d4331
Sha256: cd5c1f1dcaf44b74b63c4135a4c647fcae6c9d07a866f2c0bad7b7bf416c92bc
                                        
                                            GET /wp-content/themes/sahifa/style.css?v=1.1 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Wed, 10 May 2017 00:31:02 GMT
ETag: "20def-54f209641dd80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 25367
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (325), with CRLF line terminators
Size:   25367
Md5:    00e9722bce59feb0c3c3f708bf0aa1cf
Sha1:   5def35e8b1d374b2aa9f6b054c0fc8420d39d606
Sha256: 8843d0ddf35dabc96964748e257b9e078731dc4d02ea628ba1ab51192800e7db
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Wed, 16 Nov 2022 07:25:34 GMT
ETag: "172a9-5ed9160dd37b6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 12518
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (47826)
Size:   12518
Md5:    8fa87dd23394a22621248ec378d2af59
Sha1:   9305bc637a89b1700d7f56a19a80bd32b0feb2f7
Sha256: c162f7de24fa2d4e93e0da254ef287ff72f4a3e03f42443265097968351388dc
                                        
                                            GET /wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Wed, 27 Jul 2022 07:25:34 GMT
ETag: "81-5e4c452a07606-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 126
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   126
Md5:    ac7ecbcdc01fb980628e0ca076fd2c39
Sha1:   2df6d7adf64efc42e8f46243d5620c62879b59be
Sha256: 9f2cb415bb1b9656398091a9b2657b2dfe043c03a6526a9a12c6af51062e54c6
                                        
                                            GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Wed, 02 Nov 2022 07:25:39 GMT
ETag: "d9-5ec77bf617252-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 189
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   189
Md5:    5a18e16eb01cbaa862eb32e6b77bedb2
Sha1:   3abf9b913cc9f558f02cba7c9b822f8d1812cb96
Sha256: d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
                                        
                                            GET /wp-content/plugins/wp-automatic/js/main-front.js?ver=6.1.1 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Tue, 07 Dec 2021 17:58:20 GMT
ETag: "3f9-5d2921e68abb6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 381
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   381
Md5:    12eb5e9944774d723d7f904df78ce3eb
Sha1:   613234a194e8af7fa0f5075050d88bd50ab9ae7e
Sha256: 1648ddca27333bb1d731f1f00ca98d7e52d369ebb5b02431e1562d3deabac2d4
                                        
                                            GET /wp-content/themes/sahifa/css/style-yellow.css HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Mon, 05 May 2014 02:29:02 GMT
ETag: "395-4f89de4fa3780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 389
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   389
Md5:    91891d34ae5c7bd7a030a3c9c4105b0c
Sha1:   e880be3c046542a01fdce83f4340d2643156ef6b
Sha256: a4b5fd297639f68f909461fe4870357a3484315c626de23d10df8887927b6abf
                                        
                                            GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Wed, 27 Jul 2022 07:25:34 GMT
ETag: "5ef-5e4c452a07606-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 487
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1519), with no line terminators
Size:   487
Md5:    f49750e93d3f1fe51cd1cc2350e20af6
Sha1:   240ae051bb9b55a3937871753d40da640ca03137
Sha256: 9d693c8ed1d35aa67923da6ce3125c6e754ffcceeb2c99c44e84f1c3240ab086
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Wed, 25 May 2022 07:25:38 GMT
ETag: "48b9-5dfd0fadf7c42-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 5009
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5009
Md5:    e6624e0b978e6ddba476be41aaaa82df
Sha1:   822e920d8233072110ed7c8a7f379e5b13209b18
Sha256: dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
                                        
                                            GET /wp-content/themes/sahifa/js/tie-scripts.js?ver=6.1.1 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Mon, 05 May 2014 02:29:02 GMT
ETag: "10107-4f89de4fa3780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 17881
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (4811), with CRLF line terminators
Size:   17881
Md5:    438817b5cbdfaf650d45e4da38ca788d
Sha1:   e1ac51a4360f142bcf9fed960f264de6995734f2
Sha256: 652d47353fb3a951f4e78bcde7835b74d5b7c4601555f1b5de217121c4eacc68
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Wed, 02 Nov 2022 07:25:39 GMT
ETag: "15e54-5ec77bf5febb2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Content-Length: 30995
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30995
Md5:    1b5264c989379b828aff60f65a518a24
Sha1:   98641237f14ccb33ac114f54329a33bd0aa17eb7
Sha256: 6c8e7b78c6dbc13426810c905572db7589cf3e00264e30ce797fddb0b1092237
                                        
                                            GET /wp-content/uploads/2021/12/bansal-dhatu-udyog.jpg HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Sun, 05 Dec 2021 04:57:25 GMT
ETag: "2561-5d25ef9e7acd6"
Accept-Ranges: bytes
Content-Length: 9569
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 246x205, components 3\012- data
Size:   9569
Md5:    d23fb5b1097442f7aef84eb6d215fa82
Sha1:   a49ac1d59a3615a659ef2465d2d766d0d915ebb4
Sha256: 915106520958e9424a197396ce0173aca452ab6322e2363026b06feb78ed20be
                                        
                                            GET /wp-content/themes/sahifa/images/patterns/body-bg7.png HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://newspatrolling.com/wp-content/themes/sahifa/style.css?v=1.1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Mon, 05 May 2014 02:29:02 GMT
ETag: "6ed1-4f89de4fa3780"
Accept-Ranges: bytes
Content-Length: 28369
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 264 x 264, 8-bit/color RGBA, non-interlaced\012- data
Size:   28369
Md5:    acd642661699ba6a4dc1679e1bab76c1
Sha1:   34b1374dfa6cf72a6ea9d88269947d5f1935c8b3
Sha256: e683f9c1b269a39ad9e5c667ed956814581f565ce39b2c99106616cb932839f6
                                        
                                            GET /wp-content/themes/sahifa/images/stripe.png HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://newspatrolling.com/wp-content/themes/sahifa/style.css?v=1.1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Mon, 05 May 2014 02:29:02 GMT
ETag: "5d-4f89de4fa3780"
Accept-Ranges: bytes
Content-Length: 93
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 12 x 14, 8-bit/color RGBA, non-interlaced\012- data
Size:   93
Md5:    51386a2f66885faebd7ce34fceee3c7f
Sha1:   d428fb21cb1c35bb8d1a579df9aa7034c62f8e61
Sha256: 23c79bb552706be2ca97bdb259921e3269a5263326b147676c2f7909a45b58c9
                                        
                                            GET /wp-content/themes/sahifa/images/main-menu-bg.png HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://newspatrolling.com/wp-content/themes/sahifa/style.css?v=1.1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Mon, 05 May 2014 02:29:02 GMT
ETag: "54-4f89de4fa3780"
Accept-Ranges: bytes
Content-Length: 84
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1 x 52, 8-bit/color RGBA, non-interlaced\012- data
Size:   84
Md5:    ff98b2c206b4fd192c57c648dabc96a6
Sha1:   e11001c3755128e772548989be78b7aba9169f49
Sha256: 4bb61fb5365bcc5c1e20eba55942003c2d0c4b8dc9a8c228e3465305eb84694e
                                        
                                            GET /wp-content/uploads/2022/11/300X250.jpg HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Mon, 21 Nov 2022 10:58:11 GMT
ETag: "1c476-5edf8ee6874e9"
Accept-Ranges: bytes
Content-Length: 115830
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:11:21 15:32:03], progressive, precision 8, 300x250, components 3\012- data
Size:   115830
Md5:    2006cd1d1210493500ad428a1f26b1b4
Sha1:   47ca1b20e17301b6fe66499ae1f218cb264505e7
Sha256: ea6592eaa16b7a02015533505a480150eaea354cfe185762c240f591044e9dd0
                                        
                                            GET /wp-content/uploads/2022/11/iiff22-banner-300x250-1.jpg HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Wed, 07 Dec 2022 02:47:01 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Tue, 29 Nov 2022 09:57:17 GMT
ETag: "b5d9-5ee990362d0e3"
Accept-Ranges: bytes
Content-Length: 46553
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Size:   46553
Md5:    561953e3a4a92f125263e96b193b6545
Sha1:   78b0cb443efe807a20b119841e9e5d36cd368cd1
Sha256: 78fea6eda1e46506882b6b22f16be7414ad3d27d9005b1b559b96233e46f91c8
                                        
                                            GET /wp-content/uploads/2021/12/newspatrolling-logo.png HTTP/1.1 
Host: www.newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/marking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Wed, 07 Dec 2022 02:47:02 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Sat, 04 Dec 2021 14:18:25 GMT
ETag: "299d-5d252b260a5f6"
Accept-Ranges: bytes
Content-Length: 10653
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 200 x 99, 8-bit/color RGBA, non-interlaced\012- data
Size:   10653
Md5:    cc7735434cdf269ab5a3d4e6137c2bd4
Sha1:   7d9d66915f8a985df3c92507cca89608c3542454
Sha256: e09d0bea98897b73e5a0b44499b5b8cf28d352d68427109ad299629417d6bc93
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8908
Expires: Wed, 07 Dec 2022 05:15:30 GMT
Date: Wed, 07 Dec 2022 02:47:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8908
Expires: Wed, 07 Dec 2022 05:15:30 GMT
Date: Wed, 07 Dec 2022 02:47:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8908
Expires: Wed, 07 Dec 2022 05:15:30 GMT
Date: Wed, 07 Dec 2022 02:47:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8908
Expires: Wed, 07 Dec 2022 05:15:30 GMT
Date: Wed, 07 Dec 2022 02:47:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D3461ED6385D30123CE61BCC22D1C1C5896DCE4EF503E0128B2AE7209441AAD3"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12103
Expires: Wed, 07 Dec 2022 06:08:45 GMT
Date: Wed, 07 Dec 2022 02:47:02 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9891
x-amzn-requestid: f15dc6ba-901b-4ef6-8589-d8918fe84173
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csU8lF3MoAMF47g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6850-496d269b228065a365a67eea;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:53:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3SFFPJye5LvexbHVfPukXIdJ-BSkP5MCpesIJhqxtSNKamcRNr1lFA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 18:21:44 GMT
age: 30318
etag: "9ec84996b63362ad370ff67b0fd8136a343c1bbf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9891
Md5:    c2ae931d0f14a81013f782d43b8c7b85
Sha1:   9ec84996b63362ad370ff67b0fd8136a343c1bbf
Sha256: 9b4a2b3e5e2d2b4fac094135fed10a3040598f1208f6b2ec52d95d10aca66ed5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12259
x-amzn-requestid: db1b424e-af8a-4a6f-92dc-27ccf3256d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: coKPCHc9oAMFygg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638cbd93-56c293d73368cab66819d31e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 15:32:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1go6MAGUUThlH59lQ8FRciYwPrzYJbcTKlNPmzqxNWynDV7SHrwmTw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 05:47:40 GMT
age: 75562
etag: "f01497a3eef693b70b18885156f63c9c7305ed7e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12259
Md5:    0a317faf49d8e057d1da40f9441b6c30
Sha1:   f01497a3eef693b70b18885156f63c9c7305ed7e
Sha256: 5687e273eefa9ba3733fabe234e52bc7db87b4ec6244d12077c5816ae7961576
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7609
x-amzn-requestid: 02299a39-6804-49ae-b415-313b6e06b2ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfj24G39oAMF25Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63894cf8-5f578e3f211063bd125b645a;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 00:55:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uMTaiFjrcbJxWm4M7BuSHPu0BFUMp9UIpMvnvlLs_dajlM0_iObY2A==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:52 GMT
age: 17350
etag: "b3d22d146c6094cb539de40a72b9c5a140802ee5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7609
Md5:    0d0219e6bee2a28f003f396f872eecf0
Sha1:   b3d22d146c6094cb539de40a72b9c5a140802ee5
Sha256: 41c1b037e8e654c19f36b74cceccd1fc841cc9fb7de39ac552ab5089dc3e82db
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9613
x-amzn-requestid: 3542fd4f-74e3-450b-b7fc-04034d680bf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cslIEEDtIAMFfuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e8233-40eaebed627d374d0910e456;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 23:43:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2aI7z8gOkQiNDlj2tbsoWibfupjl25ZjoO_QRbfmXQKwO-yF455yXg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:18:37 GMT
age: 70105
etag: "3628390c62642dcc375b28f58c9b48180c4abd73"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9613
Md5:    b92721cbe24623f1713a5248d6a7c1b2
Sha1:   3628390c62642dcc375b28f58c9b48180c4abd73
Sha256: 37d0451c03bc7cf0253aba6d3204cbf38502692a0fbc751a3ead01b07e9a65d6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8906
x-amzn-requestid: 453c8d4f-205d-46ac-8d24-1c9849d71419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvmAyEMnoAMFZwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb6d1-7b5051335073a5d2339e02e1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:40:33 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2LpJmaGp8UzaZHqa9WtCTvFq0oQYOVNAdKBdYHURf2d2v5fh7j44uQ==
via: 1.1 e124ba8d7ba1d81e2fdc59ac89f11b70.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:06 GMT
age: 17516
etag: "62ef59be034071e667e3476ea0740077c86778c1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8906
Md5:    b89a7fe1080499e4f7171f962b57fec4
Sha1:   62ef59be034071e667e3476ea0740077c86778c1
Sha256: e17432ce6af0006ba36fd43e13c56c1bd1dd9b1d1bc250309bc2731ac8f52abb
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9367069b-64ab-4e4d-b8c9-fa115e0681a9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3744
x-amzn-requestid: 73eab74b-e50c-46d1-adde-3ef85fb772f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlj7FDiIAMFmsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb618-70ffb1925e3a9ef6081d1cd1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: F-LcglSz1NX1Q2t84r1dv0vQzONyYMhlGB6TdS6CeKf9I8Krk1mDUg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:41 GMT
etag: "84d060f66accd412503d52c385ee47cb35795c07"
age: 17481
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3744
Md5:    bdf4703f3372054a7aadce1cb0e11bd0
Sha1:   84d060f66accd412503d52c385ee47cb35795c07
Sha256: c5853b653ee328e567e2456be12450e04c1704ed64fb6234f008532e4b6c8363
                                        
                                            GET /menu/modules/core.9b4ec89f.js HTTP/1.1 
Host: static.addtoany.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             104.22.71.197
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Wed, 07 Dec 2022 02:47:01 GMT
cache-control: max-age=315360000, immutable
cf-bgj: minify
access-control-allow-origin: *
age: 1276370
etag: W/"117a5-5ee0ab045ab91"
last-modified: Tue, 22 Nov 2022 08:09:17 GMT
vary: Accept-Encoding
via: e3s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7759ef2a5f2d09b5-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   43706
Md5:    d6e798db17a82c50c58e3012a2ea4fd9
Sha1:   c9a2376e7bb10476c43e5a80ff8ab6beef77ca4c
Sha256: 4d8f0e7b95feabc927fb4007d660268c68a344935abc8cd4f6fb8bfdf791fbef
                                        
                                            GET /1ae910c6705c4018250d81512ff081bc/invoke.js HTTP/1.1 
Host: www.variousformatscontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.243.61.227
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 02:47:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e4df795443b6a80b04c0d0b12723ed3a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (26982), with no line terminators
Size:   9808
Md5:    9e6c7c1b1e78412be3bad79b39766e6a
Sha1:   0cfe8073a3b9453e1a5f256d33e720cbd7c4d44b
Sha256: e942923b964acaf0940ecd4b5fe2285a1cbd2a85ed036f4f9aa98a220cba2709

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             143.204.42.165
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=129108
Date: Wed, 07 Dec 2022 02:47:02 GMT
Etag: "638f4418-1d7"
Expires: Thu, 08 Dec 2022 14:38:50 GMT
Last-Modified: Tue, 06 Dec 2022 13:31:04 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3gmXzQ2ZA2R5mgCeoxSTWLjTgNFz9fhsfYiNhCVuUrKUIjmLMCzyxQ==
Age: 4066

                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             52.28.211.11
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Wed, 07 Dec 2022 02:47:02 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: http://newspatrolling.com
access-control-allow-credentials: true
set-cookie: uid_id2=8cac8157-e229-4f37-942f-d3ca956834bd:1:1; expires=Sat, 04 Dec 2032 02:47:02 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    c4de6b95909b62dccbe02b202e22d076
Sha1:   905f58dbff694bd1b59db788da8ad476f551289e
Sha256: 8ead38c4ef9426971e2054fd2a125230f54f7e847b3044217b86c4710bfe8941
                                        
                                            GET /menu/svg/icons/twitter.js HTTP/1.1 
Host: static.addtoany.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.22.71.197
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Wed, 07 Dec 2022 02:47:02 GMT
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 1276370
etag: W/"2b7-5edb43f86f378"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7759ef30fa8b09b5-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (695), with no line terminators
Size:   887
Md5:    d546bbfcee02c41e8d379d4c38d6c6b6
Sha1:   9257ce3fb40629b4413a7173570a91205aa15f66
Sha256: 1efa8f75b2eb5c33aaac1787249c21399db191924bf3fd8f06b963b1622c87f4
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /menu/svg/icons/a2a.js HTTP/1.1 
Host: static.addtoany.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.22.71.197
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Wed, 07 Dec 2022 02:47:02 GMT
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 1276370
etag: W/"b6-5edb43f58ee38"
last-modified: Fri, 18 Nov 2022 01:01:36 GMT
vary: Accept-Encoding
via: e1s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7759ef310a9209b5-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   20165
Md5:    e591585bd7fff6934ae440f2510e794e
Sha1:   d7bd4d585afc0e51838d2177dc491ca6d5eba85e
Sha256: 9479e77be7f827e9a0ff2e16263ee1d89a6c00402d8b4bd9363865ef31e28350
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?v=1&_v=j98&a=2055869631&t=pageview&_s=1&dl=http%3A%2F%2Fnewspatrolling.com%2Fmarking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony%2F&ul=en-us&de=UTF-8&dt=Marking%20its%2010th%20Anniversary%20and%20Inauguration%20of%20the%20Youth%20Committee%20Golden%20Bauhinia%20Women%20Entrepreneur%20Association%20Hosts%20the%204th%20Golden%20Bauhinia%20Women%20Entrepreneur%20Awards%20Presentation%20Ceremony%20-%20Newspatrolling.com&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAAABAAAAACAAI~&jid=1458302390&gjid=1032840242&cid=1998754634.1670381223&tid=UA-51068973-1&_gid=732368992.1670381223&_r=1&_slc=1&z=568950701 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.110
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: http://newspatrolling.com
date: Wed, 07 Dec 2022 02:47:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    9e92e190700c1af4539b40c2171320a9
Sha1:   209bcdb79e6067b51091ce8586d4b977f25b67d8
Sha256: aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
                                        
                                            POST /j/collect?v=1&_v=j98&a=2055869631&t=pageview&_s=1&dl=http%3A%2F%2Fnewspatrolling.com%2Fmarking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony%2F&ul=en-us&de=UTF-8&dt=Marking%20its%2010th%20Anniversary%20and%20Inauguration%20of%20the%20Youth%20Committee%20Golden%20Bauhinia%20Women%20Entrepreneur%20Association%20Hosts%20the%204th%20Golden%20Bauhinia%20Women%20Entrepreneur%20Awards%20Presentation%20Ceremony%20-%20Newspatrolling.com&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEDAAUABAAAAACAAI~&jid=444645576&gjid=1189770333&cid=1998754634.1670381223&tid=UA-51068973-1&_gid=732368992.1670381223&_r=1&gtm=2oubu0&z=1144734754 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.110
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: http://newspatrolling.com
date: Wed, 07 Dec 2022 02:47:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    cc7a1e792bca8ccb1946b7a07f6dbc03
Sha1:   11a2757082428311f587b7664fa9840376137f80
Sha256: de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /3e/5f/6b/3e5f6b97733f7c15f71a163a4112d13c.js HTTP/1.1 
Host: trapexpansionmoss.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             173.233.137.44
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 02:47:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 27d67a4101f453086529c253faed6ab8
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Size:   28770
Md5:    582798169b0e47262ca0e182d3778c84
Sha1:   8922a1bfe944e1d44aef2070855c150d8ba14897
Sha256: 811670c6995d1344646c094b8fbd4944af40ee63288edbd2c986519ad3b8f7bb
                                        
                                            GET /menu/svg/icons/whatsapp.js HTTP/1.1 
Host: static.addtoany.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.22.71.197
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Wed, 07 Dec 2022 02:47:02 GMT
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 1276370
etag: W/"471-5edb43f896478"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e1s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7759ef30fa8809b5-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1137), with no line terminators
Size:   621
Md5:    3136c750b00e09a2fd44f8abefc21787
Sha1:   f65137a957d34844e38b8cae52c620802c343790
Sha256: 1fa47b9e3dab25010d528f3443bcb37c9bbb9a2f6c3ac03491fcfdfdde3dd7a4
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-51068973-1&cid=1998754634.1670381223&jid=1458302390&gjid=1032840242&_gid=732368992.1670381223&_u=IEBAAAAAAAAAACAAI~&z=276951520 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             64.233.164.155
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: http://newspatrolling.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 07 Dec 2022 02:47:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-51068973-1&cid=1998754634.1670381223&jid=444645576&gjid=1189770333&_gid=732368992.1670381223&_u=YEDAAUABAAAAACAAI~&z=1076974762 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             64.233.164.155
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: http://newspatrolling.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 07 Dec 2022 02:47:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /watch.48075680693.js?key=1ae910c6705c4018250d81512ff081bc&kw=%5B%22marking%22%2C%22its%22%2C%2210th%22%2C%22anniversary%22%2C%22and%22%2C%22inauguration%22%2C%22of%22%2C%22the%22%2C%22youth%22%2C%22committee%22%2C%22golden%22%2C%22bauhinia%22%2C%22women%22%2C%22entrepreneur%22%2C%22association%22%2C%22hosts%22%2C%22the%22%2C%224th%22%2C%22golden%22%2C%22bauhinia%22%2C%22women%22%2C%22entrepreneur%22%2C%22awards%22%2C%22presentation%22%2C%22ceremony%22%2C%22-%22%2C%22newspatrolling%22%2C%22com%22%5D&refer=http%3A%2F%2Fnewspatrolling.com%2Fmarking-its-10th-anniversary-and-inauguration-of-the-youth-committee-golden-bauhinia-women-entrepreneur-association-hosts-the-4th-golden-bauhinia-women-entrepreneur-awards-presentation-ceremony%2F&tz=0&dev=e&res=12.1053&uuid=8cac8157-e229-4f37-942f-d3ca956834bd%3A1%3A1&shu=0cc0eda8904c6164f8a4f54ba8f9da40b8eb813ecc420161f19cd2650c7b0e1304b0fb67b4b6bef49b1422e5dcbf037bf06fc15934a159a85a416cab8bf1b28667cfee092de5446a04fb36074b21fb5a8be61c5490200b683afbad35468aa3&pst=1670381283&rmtc=t HTTP/1.1 
Host: trapexpansionmoss.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://newspatrolling.com
Referer: http://newspatrolling.com/
Connection: keep-alive
Cookie: u_pl=16354852; ain=eyJhbGciOiJIUzI1NiJ9.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.DHYc__KQor6IxGVSj2DgkhHYZtORTxZw_-Ds238bHeM
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             173.233.137.44
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 02:47:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://newspatrolling.com
Access-Control-Allow-Origin: http://newspatrolling.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=8cac8157-e229-4f37-942f-d3ca956834bd:1:1; expires=Wed, 14 Dec 2022 02:47:03 GMT; secure; SameSite=None iprc6e209388296958741a5bbb841d117445=3569806; expires=Wed, 07 Dec 2022 06:47:03 GMT; secure; SameSite=None pdhtkv=true; expires=Thu, 08 Dec 2022 02:47:03 GMT; secure; SameSite=None uncs=1; expires=Thu, 08 Dec 2022 02:47:03 GMT; secure; SameSite=None pdhtkv5=true; expires=Thu, 08 Dec 2022 02:47:03 GMT; secure; SameSite=None uncs5=1; expires=Thu, 08 Dec 2022 02:47:03 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3f9c3eb6a073d1eb32a140220efa7293
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (2635)
Size:   2105
Md5:    afb69154424996a130c4d899ac99b328
Sha1:   2dac07085c9f92cecd5b53026b9623f25ec69582
Sha256: 2d2ae80de9c643a8e5e5dad93f01e7036449ce2b302b984a7848b71fc69e75b9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B0C82753F01003C61FA71CF5542EAD1FE90F11A9863592B374A8D3C13DA4B306"
Last-Modified: Tue, 06 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2977
Expires: Wed, 07 Dec 2022 03:36:40 GMT
Date: Wed, 07 Dec 2022 02:47:03 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51068973-1&cid=1998754634.1670381223&jid=1458302390&_u=IEBAAAAAAAAAACAAI~&z=980179003 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.132
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:47:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51068973-1&cid=1998754634.1670381223&jid=1458302390&_u=IEBAAAAAAAAAACAAI~&z=980179003 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.163
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:47:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51068973-1&cid=1998754634.1670381223&jid=444645576&_u=YEDAAUABAAAAACAAI~&z=1264932026 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.163
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:47:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-51068973-1&cid=1998754634.1670381223&jid=444645576&_u=YEDAAUABAAAAACAAI~&z=1264932026 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://newspatrolling.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.132
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:47:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "546F530032E8C8CD6E51D1ADB173E194CEF6610EE425B44FA57BDD153AAAB079"
Last-Modified: Tue, 06 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15956
Expires: Wed, 07 Dec 2022 07:12:59 GMT
Date: Wed, 07 Dec 2022 02:47:03 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /menu/svg/icons/pinterest.js HTTP/1.1 
Host: static.addtoany.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.22.71.197
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Wed, 07 Dec 2022 02:47:02 GMT
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 1276370
etag: W/"323-5edb43f7a8f98"
last-modified: Fri, 18 Nov 2022 01:01:38 GMT
vary: Accept-Encoding
via: e3s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7759ef30fa8c09b5-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (803), with no line terminators
Size:   1051
Md5:    a452f9268fccf207c28f035d09de5de6
Sha1:   00f707df68fa08029eceaaa93276c4b751776187
Sha256: e3b558417744f31d41d70bf3c6cc82260afff9b6da6d3549bc86a5a0958a499b
                                        
                                            GET /cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png HTTP/1.1 
Host: cdn.cloudimagesb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             45.133.44.9
HTTP/2 200 OK
content-type: image/png
                                            
date: Wed, 07 Dec 2022 02:47:03 GMT
content-length: 144379
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:07:21 GMT
etag: "62e11c69-233fb"
expires: Fri, 09 Dec 2022 02:47:03 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   144379
Md5:    33c304429dc1a4408a96e6a74ffa2feb
Sha1:   c45fa8e65528d1bb2b46bf8a28af9eeaa1903d04
Sha256: dbed482e5948ead5587d30a22306a5b611305f704de940bd22c76daf90e0a314
                                        
                                            GET /pixel/purst?dl=0&th=0&sc=0&rs=3370&rd=3370&fd=708&bv=22.10.v.10&tmpl=136 HTTP/1.1 
Host: hygieneretorted.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://newspatrolling.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             173.233.137.60
HTTP/1.1 200 OK
                                            
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 02:47:03 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

                                        
                                            GET /menu/svg/icons/facebook.js HTTP/1.1 
Host: static.addtoany.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://newspatrolling.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.22.71.197
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Wed, 07 Dec 2022 02:47:02 GMT
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 1276370
etag: W/"13e-5edb43f5ee978"
last-modified: Fri, 18 Nov 2022 01:01:36 GMT
vary: Accept-Encoding
via: e3s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7759ef30fa8909b5-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /wp-content/themes/sahifa/fonts/BebasNeue-webfont.ttf HTTP/1.1 
Host: newspatrolling.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://newspatrolling.com/wp-content/themes/sahifa/style.css?v=1.1
Origin: http://newspatrolling.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             66.29.140.247
HTTP/1.1 200 OK
Content-Type: font/ttf
                                            
Date: Wed, 07 Dec 2022 02:47:02 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Expect-CT: max-age=30, enforce
Last-Modified: Mon, 05 May 2014 02:29:02 GMT
ETag: "a0a8-4f89de4fa3780"
Accept-Ranges: bytes
Content-Length: 41128
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: