| getnewsfirst.com/ |  188.42.224.102 | 301 Moved Permanently | 162 B |
IP188.42.224.102:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET / HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 25 Nov 2022 08:50:42 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://getnewsfirst.com/
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha9f1d4d98705c281fed3b60343463200 db6f8aa98d2eda4e5473b116a222c3055568bb78 164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13600
Expires: Fri, 25 Nov 2022 12:37:22 GMT
Date: Fri, 25 Nov 2022 08:50:42 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashaf40a2fcf8debb90c3608002da6c907a 3c75d6c0b557a3bd8d5db50155b8d896e852c145 555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2208
Cache-Control: max-age=94637
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:42 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:07:59 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8c63b226725ca6e92e3ef586ac19e603 d21ae42a1927501e5293ff3564f52b49f6b0decc 141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5132
Expires: Fri, 25 Nov 2022 10:16:14 GMT
Date: Fri, 25 Nov 2022 08:50:42 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4d7e4eed097b9c4e5d509419f1cfc85a 290bb3d428a7c6330e2e3d73a952b16f820896c8 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 08:17:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1996
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: r0qlkpGmie8YJuecRxRiYlPsv8nD1P0+cJ0WPI4hut8UPlsVTXSAUxCjU0rdhFJTcznErKh0r+M=
x-amz-request-id: 6V6PK5DC5HXEA39C
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 08:43:46 GMT
age: 416
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashfc1b6f408c93524ba2750a086bfb051c 4cfb130298f40a1d7ab5f03e88642424af598d23 d4e36a091b2fc97f0e4a837ffa17e6ca72f6c1116eb339767af8e72650fbef0a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D4E36A091B2FC97F0E4A837FFA17E6CA72F6C1116EB339767AF8E72650FBEF0A"
Last-Modified: Fri, 25 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21553
Expires: Fri, 25 Nov 2022 14:49:55 GMT
Date: Fri, 25 Nov 2022 08:50:42 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 08:11:11 GMT
cache-control: public,max-age=3600
age: 2372
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/flexslider/2.7.1/flexslider.min.css |  104.17.25.14 | 200 OK | 1.0 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/flexslider/2.7.1/flexslider.min.css IP104.17.25.14:0
File typeASCII text, with very long lines (4397) Hash3d698b440270c18c9e1d943374d6086f 5c8fa228bba911adbe144550f1fe0e9f4c0dd92a bb31d0b612e7a711e871c33a45e57cdc85bd6a28c3bb7a09e3af140d21c6b1b3
GET /ajax/libs/flexslider/2.7.1/flexslider.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: text/css; charset=utf-8
content-length: 1027
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5e-115c"
last-modified: Mon, 04 May 2020 16:10:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 14815414
expires: Wed, 15 Nov 2023 08:50:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cAj0hz3nuhNPugt8jb%2FgQ7PCujeEVnGoJOSqsa97LVdX9uYs1%2BuqrKX7%2B7T%2BXsJE97TCyBq%2FqAa9LtbH%2F7Zn6Af8sMFVe7qcWjyyVVcfXELYwspNA3fXKJrUPByIgLB4ZAx3ok6C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9236ce9f8b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash2f1d3a3fc637cbe655e1e782639f7572 16a6333493e424b5c43432225f48dff674c7d309 c219ad015e4731a2103f73f74c1137ebfdc85393c9d3dbbcfec8163dc85f3b22
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6426
Cache-Control: max-age=154972
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Etag: "63802325-117"
Expires: Sun, 27 Nov 2022 03:53:35 GMT
Last-Modified: Fri, 25 Nov 2022 02:06:29 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
|
|
| getnewsfirst.com/assets/hardcore/js/main.js | 188.42.224.102 | 200 OK | 479 B |
URL HTTP/2getnewsfirst.com/assets/hardcore/js/main.js IP188.42.224.102:0
Hash2d961d8cd2831571b5a8df5e43a758cb fcb37995cf2ab685f89d1dc5d99a6cae572575ec 33ad4022d4c133876c016dbd5994939e917c91a1274db4761eef19231fcc8d0d
GET /assets/hardcore/js/main.js HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 479
last-modified: Fri, 12 Mar 2021 11:11:23 GMT
etag: "604b4c5b-1df"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/flexslider/2.7.1/jquery.flexslider.min.js | 104.17.25.14 | 200 OK | 5.8 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/flexslider/2.7.1/jquery.flexslider.min.js IP104.17.25.14:0
File typeASCII text, with very long lines (22853), with no line terminators Hash43a8584f5aa9274d388d8798fab2fbd2 f45efd98f564205a14ec220876e0dee81c710e4b c465ba38bee07d0152db8f8eba79c437e2951730f06c55493cde1970ba628fc0
GET /ajax/libs/flexslider/2.7.1/jquery.flexslider.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 5784
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5e-5945"
last-modified: Mon, 04 May 2020 16:10:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 14645790
expires: Wed, 15 Nov 2023 08:50:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PbXtG1c3sIR4fNUi7lZf6OVz1vTxNuSZMgHtyxurnp1w295WTIis9oBCKf2FQCZhlpfOH%2FKsUfWDbnW7WRkdYAUIA5GCYlNwrL5qje%2Bmx%2FUhme3LIh2fqD%2BjY97l1In91qdB41zF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f9236cfa13b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash2f1d3a3fc637cbe655e1e782639f7572 16a6333493e424b5c43432225f48dff674c7d309 c219ad015e4731a2103f73f74c1137ebfdc85393c9d3dbbcfec8163dc85f3b22
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6426
Cache-Control: max-age=154972
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Etag: "63802325-117"
Expires: Sun, 27 Nov 2022 03:53:35 GMT
Last-Modified: Fri, 25 Nov 2022 02:06:29 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfb6949e7abaa473393f7c604691de14f 599681bba3947709baa603bbae2dd7afd04059a4 36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4484
Cache-Control: max-age=91850
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:21:33 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
|
|
| getnewsfirst.com/assets/hardcore/js/modernizr-custom.js | 188.42.224.102 | 200 OK | 2.4 kB |
URL HTTP/2getnewsfirst.com/assets/hardcore/js/modernizr-custom.js IP188.42.224.102:0
Hash4f760ba17940efa8124dc47d6da01925 8a1f58fdbc750b3c9dd73b392f09c90eee298c02 c1ffbe2493775ce599fa09c629bd9b13520b5bcfa787f5d13de664c1aede9681
GET /assets/hardcore/js/modernizr-custom.js HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 12 Mar 2021 11:11:23 GMT
etag: W/"604b4c5b-11e1"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasha0111a2443450172e5d2b48d350a8f57 75e89d4cd001303e66a93880f96d6c47e7d665ab c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2c43454660e9762b6590c06c6bb8a11b 35eaf97ad92c303255833ad3fda4fd4e3bd4821f e588c0f690193ce5bacf990bf72a6952c53708623ebe9784d30af5311e74c00c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E588C0F690193CE5BACF990BF72A6952C53708623EBE9784D30AF5311E74C00C"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18343
Expires: Fri, 25 Nov 2022 13:56:26 GMT
Date: Fri, 25 Nov 2022 08:50:43 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashb44543de9922ec7d97f2e0be1865553e caef856450efd75de0cfae9402903b1f4bd6de4c d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 69.16.175.42 | 200 OK | 24 kB |
URL HTTP/2code.jquery.com/jquery-3.2.1.slim.min.js IP69.16.175.42:0
File typeASCII text, with very long lines (32012) Hash30f5157a965bc792a83e9bacfe265f03 8330886371fe27f3cbac509e0ac9712207574c66 4d12cab1f84ec2ac780bc8e0d865d9c61025be579c78d6532d76f0574d17fca0
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://getnewsfirst.com
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-encoding: gzip
content-length: 23856
content-type: application/javascript; charset=utf-8
last-modified: Fri, 12 Aug 2022 13:47:02 GMT
accept-ranges: bytes
server: nginx
etag: W/"62f659d6-10fdd"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669366243.dop223.sk1.t,1669366243.cds209.sk1.hn,1669366243.cds235.sk1.c
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-111647716-28 | 142.250.74.168 | 200 OK | 44 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-111647716-28 IP142.250.74.168:0
File typeASCII text, with very long lines (1921) Hash4cb5493e6f0d4aa816e9cf41da12f54e 8b4f697437f1a6642e579deb658b3e811802dc58 069bb261eb8da4ca73a5d7105d2a18997af18873dfce2186b457e114ca3e3652
GET /gtag/js?id=UA-111647716-28 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 08:50:43 GMT
expires: Fri, 25 Nov 2022 08:50:43 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43609
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasha0111a2443450172e5d2b48d350a8f57 75e89d4cd001303e66a93880f96d6c47e7d665ab c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashb44543de9922ec7d97f2e0be1865553e caef856450efd75de0cfae9402903b1f4bd6de4c d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| news.littlecdn.com/177x99/1564997282_5d47f6a2c0d28.jpeg | 172.67.10.98 | 200 OK | 4.3 kB |
URL HTTP/2news.littlecdn.com/177x99/1564997282_5d47f6a2c0d28.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 148x99, components 3\012- data Hash0a2d5b0d09a1d599a5d13f2a1990a5a5 58839ece4c92958e0d4e6b8eff26895fe3d02ed1 6e8f0ae7224c85dfa026e9db975e0e77211e841d4cc0fc8f1fd07dd38f774703
GET /177x99/1564997282_5d47f6a2c0d28.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 4339
last-modified: Mon, 05 Aug 2019 09:28:03 GMT
etag: W/"3d243a384b79a15bea09fc5c5df3cf97"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d5973b529-OSL
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashcca0e8b40a55c8c8ac9621472d5d4c3e 551ff861959724027aa149c86841468de25973f0 3d272bd497c5c34b650d46253891796afde46b4c43dbd6480593cc60a105779d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3D272BD497C5C34B650D46253891796AFDE46B4C43DBD6480593CC60A105779D"
Last-Modified: Thu, 24 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21597
Expires: Fri, 25 Nov 2022 14:50:40 GMT
Date: Fri, 25 Nov 2022 08:50:43 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe1c3f3a047e75e2614adcdd7736af9d1 b3cd14c9a77f7da73e682eaa6284b97aed040f06 ba62174474fb288e3ee8ba50bbd57d4df483d91a526ebe898068bdd9ba1f13cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BA62174474FB288E3EE8BA50BBD57D4DF483D91A526EBE898068BDD9BA1F13CD"
Last-Modified: Thu, 24 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 25 Nov 2022 14:50:43 GMT
Date: Fri, 25 Nov 2022 08:50:43 GMT
Connection: keep-alive
|
|
| news.littlecdn.com/1529485697_5b2a1981f23ab.png | 172.67.10.98 | 200 OK | 21 kB |
URL HTTP/2news.littlecdn.com/1529485697_5b2a1981f23ab.png IP172.67.10.98:0
File typePNG image data, 250 x 100, 8-bit/color RGBA, non-interlaced\012- data Hashab8842636abe89fc53070d1c830a16d6 9db432674d432285e9eead4ced628b2d49edec7f d7ac4e32c339afd3f7f5a6216688811fb41d01f694b40c49b8b9bc385a28a153
GET /1529485697_5b2a1981f23ab.png HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/octet-stream
content-length: 20965
last-modified: Wed, 20 Jun 2018 09:08:19 GMT
etag: "ab8842636abe89fc53070d1c830a16d6"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d5970b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/407x460/1567504997_5d6e3a65dc50a1.17555257.jpeg | 172.67.10.98 | 200 OK | 14 kB |
URL HTTP/2news.littlecdn.com/407x460/1567504997_5d6e3a65dc50a1.17555257.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 407x258, components 3\012- data Hash6138d2a3a017be7667ead754d2f832d6 5dbd31f396264605a0ae9d5d6646157927d11ae3 bafb67560f0ef64375e8e1f7e4c121b40465a1b1d6b29c4d5a3e00376dbcd07b
GET /407x460/1567504997_5d6e3a65dc50a1.17555257.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 13780
last-modified: Tue, 03 Sep 2019 10:03:19 GMT
etag: W/"113fabe4b5881316780003c1b3b9e3a9"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d596db529-OSL
X-Firefox-Spdy: h2
|
|
| news.breakingfeedz.com/notice.php?p=1611788&interstitial=1 | 139.45.197.239 | 200 OK | 8 B |
URL HTTP/2news.breakingfeedz.com/notice.php?p=1611788&interstitial=1 IP139.45.197.239:0
File typeASCII text, with no line terminators Hash3bbbac058fc4ed9e8078f0318d31d9fa fb3f78865eac1bdd3406f00b9cae5c6cdf6211b8 3938c63e8b782001c4b451b439634c1380b1e262d919e11ba7374862835d83e4
GET /notice.php?p=1611788&interstitial=1 HTTP/1.1
Host: news.breakingfeedz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/octet-stream
content-length: 8
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 35.167.231.108 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.167.231.108:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pJdbqvlQUSGT6AeKNYPEKg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nTC5WI1qel1acQQOxHulDoIktMg=
|
|
| news.littlecdn.com/600x360/1567505010_5d6e3a729f1eb6.77189433.png | 172.67.10.98 | 200 OK | 12 kB |
URL HTTP/2news.littlecdn.com/600x360/1567505010_5d6e3a729f1eb6.77189433.png IP172.67.10.98:0
File typePNG image data, 600 x 315, 8-bit/color RGBA, non-interlaced\012- data Hash2adb057756897cca9c180aca33da5313 84b614046e421b038c9c1c31f1d15935c04f261e 003c750dcae7b97b7a8e235ef18d2a73d9e97328990934abdcadba421ab46ceb
GET /600x360/1567505010_5d6e3a729f1eb6.77189433.png HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/png
content-length: 12113
last-modified: Tue, 03 Sep 2019 10:03:31 GMT
etag: W/"8325af14cbdaf2bf91096cbe84ff0474"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d597eb529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/177x99/1567504997_5d6e3a65dc50a1.17555257.jpeg | 172.67.10.98 | 200 OK | 4.1 kB |
URL HTTP/2news.littlecdn.com/177x99/1567504997_5d6e3a65dc50a1.17555257.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 156x99, components 3\012- data Hash688e88b40ef0047e5bd158853cd8ba63 224585ffcb4dbbfbcaf2327c4e89c57785115f66 934936fe4aaf6a7a6b275b62f6c0185dd9d21dbdaa99a18a26017edd91cb1dca
GET /177x99/1567504997_5d6e3a65dc50a1.17555257.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 4058
last-modified: Tue, 03 Sep 2019 10:03:19 GMT
etag: W/"113fabe4b5881316780003c1b3b9e3a9"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d5972b529-OSL
X-Firefox-Spdy: h2
|
|
| news.viralstrangers.com/ajs.php?zoneid=1688758&block_count=3&target_element=pa_native_1688758 | 139.45.195.9 | 200 OK | 8 B |
URL HTTP/2news.viralstrangers.com/ajs.php?zoneid=1688758&block_count=3&target_element=pa_native_1688758 IP139.45.195.9:0
File typeASCII text, with no line terminators Hash3bbbac058fc4ed9e8078f0318d31d9fa fb3f78865eac1bdd3406f00b9cae5c6cdf6211b8 3938c63e8b782001c4b451b439634c1380b1e262d919e11ba7374862835d83e4
GET /ajs.php?zoneid=1688758&block_count=3&target_element=pa_native_1688758 HTTP/1.1
Host: news.viralstrangers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/octet-stream
content-length: 8
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/177x99/1564993383_5d47e76783517.jpeg | 172.67.10.98 | 200 OK | 2.3 kB |
URL HTTP/2news.littlecdn.com/177x99/1564993383_5d47e76783517.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 148x99, components 3\012- data Hash420223fd12cd5959323a15500237bdcf ee84da4b4ced7148cb6e98ee7af7e86030d11b58 7a612f8f45fd4fcfcd27ed7588e6852575f4f85540653b959faa6407a3e696c5
GET /177x99/1564993383_5d47e76783517.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 2267
last-modified: Mon, 05 Aug 2019 08:23:04 GMT
etag: W/"8ffdeb3da8e4b50b0f70a6494b0d3f71"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d5977b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/100x60/1567505006_5d6e3a6eea9a31.27425008.jpeg | 172.67.10.98 | 200 OK | 2.1 kB |
URL HTTP/2news.littlecdn.com/100x60/1567505006_5d6e3a6eea9a31.27425008.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 89x60, components 3\012- data Hashe9a693bc613a58746b458808d7fbc392 46089579e6db4ea2af7a457282342b3272855472 6d8476f6a1b9ac795c353db7e6b8f850502331952fa8f84a98b72b5887fa21dd
GET /100x60/1567505006_5d6e3a6eea9a31.27425008.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 2098
last-modified: Tue, 03 Sep 2019 10:03:28 GMT
etag: W/"cbe2ac12417b41fd61d0fa190efb10dd"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236dda32b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564993383_5d47e76783517.jpeg | 172.67.10.98 | 200 OK | 11 kB |
URL HTTP/2news.littlecdn.com/600x360/1564993383_5d47e76783517.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 535x360, components 3\012- data Hash5fbf36c69b5b74e132df3c7875de586c 6ebed6d20aa0a1ec1fe5c738f4e73921feb10d0d dd0189fc7db2278af32093239cd71a4140cd253591dd9999d4ca33a46365fd6c
GET /600x360/1564993383_5d47e76783517.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 11066
last-modified: Mon, 05 Aug 2019 08:23:04 GMT
etag: W/"8ffdeb3da8e4b50b0f70a6494b0d3f71"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d698ab529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1567505006_5d6e3a6eea9a31.27425008.jpeg | 172.67.10.98 | 200 OK | 31 kB |
URL HTTP/2news.littlecdn.com/600x360/1567505006_5d6e3a6eea9a31.27425008.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 532x360, components 3\012- data Hash18a0a0dd702fd144066e45caaf13d075 82797062cf5038da2e7e669fa0247649d96730f1 e4daf7b046eaa91518588e84eb3543b11afa65d0bd7856685e0e7e4a72f08bb4
GET /600x360/1567505006_5d6e3a6eea9a31.27425008.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 30665
last-modified: Tue, 03 Sep 2019 10:03:28 GMT
etag: W/"cbe2ac12417b41fd61d0fa190efb10dd"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d5980b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/177x99/1564994702_5d47ec8e74008.jpeg | 172.67.10.98 | 200 OK | 4.0 kB |
URL HTTP/2news.littlecdn.com/177x99/1564994702_5d47ec8e74008.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 149x99, components 3\012- data Hash60e7667a6c88dd2218d86d28e3f572aa cbad7caa2d43542cfb0f82cd613a61073dec2717 1b469a6fd35c4356787801a8f7a2758d1eca62f29cb87b6cd852183e63e2c919
GET /177x99/1564994702_5d47ec8e74008.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 4012
last-modified: Mon, 05 Aug 2019 08:45:03 GMT
etag: W/"40a697625d9467670d74802a7677f151"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d5976b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564978203_5d47ac1baef59.png | 172.67.10.98 | 200 OK | 12 kB |
URL HTTP/2news.littlecdn.com/600x360/1564978203_5d47ac1baef59.png IP172.67.10.98:0
File typePNG image data, 600 x 315, 8-bit/color RGBA, non-interlaced\012- data Hash2adb057756897cca9c180aca33da5313 84b614046e421b038c9c1c31f1d15935c04f261e 003c750dcae7b97b7a8e235ef18d2a73d9e97328990934abdcadba421ab46ceb
GET /600x360/1564978203_5d47ac1baef59.png HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/png
content-length: 12113
last-modified: Mon, 05 Aug 2019 04:10:04 GMT
etag: W/"8325af14cbdaf2bf91096cbe84ff0474"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d99e1b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564981924_5d47baa435125.jpeg | 172.67.10.98 | 200 OK | 14 kB |
URL HTTP/2news.littlecdn.com/600x360/1564981924_5d47baa435125.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 540x360, components 3\012- data Hash36a85f4571e83568efee5361dbe2c5e1 c958b689757e2addbb94fb18dc853baeaf3f38fd bd2d7a7d5479fd3b04917c4203d5fd0ab42194ace466dc6f80b56d592306f795
GET /600x360/1564981924_5d47baa435125.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 13512
last-modified: Mon, 05 Aug 2019 05:12:05 GMT
etag: W/"21ff117645067c80f55f518fa95301e7"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d99dfb529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564994702_5d47ec8e74008.jpeg | 172.67.10.98 | 200 OK | 23 kB |
URL HTTP/2news.littlecdn.com/600x360/1564994702_5d47ec8e74008.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 541x360, components 3\012- data Hash6f30f50442c4d36e221e0ba867a30352 5e08658f7ef41ba7104b4a38fb7348cd3ce9f834 45eca5348a4eb819647162578b47c438cccc5a39800f0dbdebace05475978bc1
GET /600x360/1564994702_5d47ec8e74008.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 22676
last-modified: Mon, 05 Aug 2019 08:45:03 GMT
etag: W/"40a697625d9467670d74802a7677f151"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d6988b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564986604_5d47ccecc3a18.jpeg | 172.67.10.98 | 200 OK | 25 kB |
URL HTTP/2news.littlecdn.com/600x360/1564986604_5d47ccecc3a18.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 562x360, components 3\012- data Hashf0af830398449a07e4a75ad3bc684b14 b5ec74f507371f758bdf31e59f60bcf3fdd545bd 0896fc768018e14b3fbad10f00c8cb0ff3a6db2573ea9d5ed32b5ff510fe9b52
GET /600x360/1564986604_5d47ccecc3a18.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 25065
last-modified: Mon, 05 Aug 2019 06:30:05 GMT
etag: W/"fe60f0aa729ec513934b78f8d91077fd"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d79cab529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564997282_5d47f6a2c0d28.jpeg | 172.67.10.98 | 200 OK | 26 kB |
URL HTTP/2news.littlecdn.com/600x360/1564997282_5d47f6a2c0d28.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 538x360, components 3\012- data Hashcf0d9fa61e6037e86af8489d055cb222 e160a07ed0e97e907d26945f0f699e818b2d8701 dafaf24788f3080ee3f7c4539ba4d5b4885eba26c45fbe08f5b77d582ff4080c
GET /600x360/1564997282_5d47f6a2c0d28.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 26549
last-modified: Mon, 05 Aug 2019 09:28:03 GMT
etag: W/"3d243a384b79a15bea09fc5c5df3cf97"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d6985b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564974182_5d479c6682224.jpeg | 172.67.10.98 | 200 OK | 23 kB |
URL HTTP/2news.littlecdn.com/600x360/1564974182_5d479c6682224.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 540x360, components 3\012- data Hash396cb09c8f02d449af71cf11c045f4bd 573854dc3c86facd283904ed52897be552005e28 62c0547409cfffa543d019c17db241d2fd606e20335156dbd1ee758c3668c6b8
GET /600x360/1564974182_5d479c6682224.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 22720
last-modified: Mon, 05 Aug 2019 03:03:03 GMT
etag: W/"193e96d0bee890140b8bb6b1eea643b0"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236dba18b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/100x60/1567505010_5d6e3a729f1eb6.77189433.png | 172.67.10.98 | 200 OK | 1.3 kB |
URL HTTP/2news.littlecdn.com/100x60/1567505010_5d6e3a729f1eb6.77189433.png IP172.67.10.98:0
File typePNG image data, 100 x 52, 8-bit/color RGBA, non-interlaced\012- data Hash8dd02323b9d9307b670edc5de23c0e6d 602d9f409ccb9f13c7566b3f86d3cbe1b117c608 081ad3ff039dda26dcba68eb1155e0eb0680e1bfb470d8b70c36120fd8086fc7
GET /100x60/1567505010_5d6e3a729f1eb6.77189433.png HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/png
content-length: 1326
last-modified: Tue, 03 Sep 2019 10:03:31 GMT
etag: W/"8325af14cbdaf2bf91096cbe84ff0474"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236dca24b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1567504997_5d6e3a65dc50a1.17555257.jpeg | 172.67.10.98 | 200 OK | 22 kB |
URL HTTP/2news.littlecdn.com/600x360/1567504997_5d6e3a65dc50a1.17555257.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 566x360, components 3\012- data Hasha4c11fd4d16c993b8fb55715a563492c 870b8bd3af56962b16fb22211781fb5a01795230 72eb4c9111e5676bfe39e3a99e5740295edafb0ba9f127832bff70f5cbff82c8
GET /600x360/1567504997_5d6e3a65dc50a1.17555257.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 21622
last-modified: Tue, 03 Sep 2019 10:03:19 GMT
etag: W/"113fabe4b5881316780003c1b3b9e3a9"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d6984b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564989364_5d47d7b43259a.jpeg | 172.67.10.98 | 200 OK | 13 kB |
URL HTTP/2news.littlecdn.com/600x360/1564989364_5d47d7b43259a.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 483x360, components 3\012- data Hashd0e878f783777fc909f9927f6c25cfe0 c743b02df4b1fadabd68e540917f9bab5cf6afcf a9d0057411f44330ec539a66d16cc2a448d557a857df0ad5abc6104f3864ce9e
GET /600x360/1564989364_5d47d7b43259a.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 13291
last-modified: Mon, 05 Aug 2019 07:16:05 GMT
etag: W/"cfe9644c722b7625a7dae3833afdc1b3"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d69a6b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564977303_5d47a897d71e4.png | 172.67.10.98 | 200 OK | 12 kB |
URL HTTP/2news.littlecdn.com/600x360/1564977303_5d47a897d71e4.png IP172.67.10.98:0
File typePNG image data, 600 x 315, 8-bit/color RGBA, non-interlaced\012- data Hash2adb057756897cca9c180aca33da5313 84b614046e421b038c9c1c31f1d15935c04f261e 003c750dcae7b97b7a8e235ef18d2a73d9e97328990934abdcadba421ab46ceb
GET /600x360/1564977303_5d47a897d71e4.png HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/png
content-length: 12113
last-modified: Mon, 05 Aug 2019 03:55:05 GMT
etag: W/"8325af14cbdaf2bf91096cbe84ff0474"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236dba07b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/177x99/1564996744_5d47f488143de.jpeg | 172.67.10.98 | 200 OK | 5.6 kB |
URL HTTP/2news.littlecdn.com/177x99/1564996744_5d47f488143de.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 151x99, components 3\012- data Hash6fff6f2f92e202ee06a8da82d1e922ef 14c85960faae53fbde137d59fe403f5bca64e7cf 80b5e5c879aaadc51313279ebe8a2b465e2e7b189d33774a507d944dd0a1d599
GET /177x99/1564996744_5d47f488143de.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 5638
last-modified: Mon, 05 Aug 2019 09:19:05 GMT
etag: W/"10e417627eaed26b0ddae347c2dbc460"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d5974b529-OSL
X-Firefox-Spdy: h2
|
|
| getnewsfirst.com/js/common.js | 188.42.224.102 | 200 OK | 18 kB |
URL HTTP/2getnewsfirst.com/js/common.js IP188.42.224.102:0
Hashd025fe807b3746df0dc16a44b3ae02d9 096eeb8d304e693ff360057bf7f797d91ab7014f 719f3c7181335b6b112c0d5b45fe93a15705ff6931497898431ced1ae96814cf
GET /js/common.js HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 12 Mar 2021 11:14:09 GMT
etag: W/"604b4d01-50a"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| getnewsfirst.com/ | 188.42.224.102 | 200 OK | 0 B |
IP188.42.224.102:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Fri, 25 Nov 2022 08:50:43 GMT
set-cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; expires=Fri, 25-Nov-2022 10:50:43 GMT; Max-Age=7200; path=/
nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ; expires=Fri, 25-Nov-2022 10:50:43 GMT; Max-Age=7200; path=/; httponly
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/100x60/1567505005_5d6e3a6d28cfd8.00315677.jpeg | 172.67.10.98 | 200 OK | 2.1 kB |
URL HTTP/2news.littlecdn.com/100x60/1567505005_5d6e3a6d28cfd8.00315677.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 90x60, components 3\012- data Hash4aadd7a88a48aa81a5e756b484706483 8eb5d780eda73f4d2f23b816ac00c186760f6f4d c378c4c32f5c6befc19af0d7ac2acc66b1f2ce27baa6d193d50c764f14d2633c
GET /100x60/1567505005_5d6e3a6d28cfd8.00315677.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 2108
last-modified: Tue, 03 Sep 2019 10:03:26 GMT
etag: W/"d37f2d8364d169378bbdee6de9165d2f"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236dda3db529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564974543_5d479dcff2359.jpeg | 172.67.10.98 | 200 OK | 23 kB |
URL HTTP/2news.littlecdn.com/600x360/1564974543_5d479dcff2359.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 523x360, components 3\012- data Hash95bbea0120cd1cad5d96d8615f7e05ea 23906034ca4de9f67a9570efb9e30caf09e7bbd5 20d10fa7967579a81fff0b38dae68c62bcfa6bcd6cbf16f689e9bd5edefa83bd
GET /600x360/1564974543_5d479dcff2359.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 23298
last-modified: Mon, 05 Aug 2019 03:09:05 GMT
etag: W/"6ab4c6c5d43c4ab4cd19f40c2c83f430"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236dba08b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/177x99/1564993082_5d47e63ac798e.jpeg | 172.67.10.98 | 200 OK | 5.6 kB |
URL HTTP/2news.littlecdn.com/177x99/1564993082_5d47e63ac798e.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 151x99, components 3\012- data Hash6fff6f2f92e202ee06a8da82d1e922ef 14c85960faae53fbde137d59fe403f5bca64e7cf 80b5e5c879aaadc51313279ebe8a2b465e2e7b189d33774a507d944dd0a1d599
GET /177x99/1564993082_5d47e63ac798e.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 5638
last-modified: Mon, 05 Aug 2019 08:18:03 GMT
etag: W/"10e417627eaed26b0ddae347c2dbc460"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d5979b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/100x60/1567505012_5d6e3a74649595.44438282.jpeg | 172.67.10.98 | 200 OK | 2.8 kB |
URL HTTP/2news.littlecdn.com/100x60/1567505012_5d6e3a74649595.44438282.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 90x60, components 3\012- data Hash89d0f1ed397102fa71bf316e73d04000 b98b13676e06a7efc6041946a9ef84dd8fe163f6 3b6b555e83ce467fe2d3cbd385c9456977027d2a646f9e25cdbc0c6ee2cbc0d3
GET /100x60/1567505012_5d6e3a74649595.44438282.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 2819
last-modified: Tue, 03 Sep 2019 10:03:33 GMT
etag: W/"9278343b32612c702bf66466f4615ced"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236dca22b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/100x60/1567505014_5d6e3a769565f0.50858331.jpeg | 172.67.10.98 | 200 OK | 2.0 kB |
URL HTTP/2news.littlecdn.com/100x60/1567505014_5d6e3a769565f0.50858331.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 90x60, components 3\012- data Hash82d9a427d8a7bec1c80a1dc8bb451589 909a5790372d1b0177368c56408bf49e4a186cb7 6a4db7639c4cbc49b838249433f1c63d77723a8a3ef9feb4433c232e6fb8c9a0
GET /100x60/1567505014_5d6e3a769565f0.50858331.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 1960
last-modified: Tue, 03 Sep 2019 10:03:35 GMT
etag: W/"3c2525b7e7fa794a2583450c5aef4079"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236dca1bb529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1567505012_5d6e3a74649595.44438282.jpeg | 172.67.10.98 | 200 OK | 41 kB |
URL HTTP/2news.littlecdn.com/600x360/1567505012_5d6e3a74649595.44438282.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 540x360, components 3\012- data Hash242bc246e9db00766abb28901f53e457 c8fb19d769c74b1b896ef1643f3afd280a7c20f6 87998bffb5f9619f937c8f791e232b8b99dd69b0d58e067c92aa05b6ed39be5a
GET /600x360/1567505012_5d6e3a74649595.44438282.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 41039
last-modified: Tue, 03 Sep 2019 10:03:33 GMT
etag: W/"9278343b32612c702bf66466f4615ced"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d597db529-OSL
X-Firefox-Spdy: h2
|
|
| vaugroar.com/zone?pub=0&zone_id=1611787&is_mobile=false&domain=getnewsfirst.com&var=&ymid=&var_3= | 139.45.197.250 | 200 OK | 705 B |
URL HTTP/2vaugroar.com/zone?pub=0&zone_id=1611787&is_mobile=false&domain=getnewsfirst.com&var=&ymid=&var_3= IP139.45.197.250:0
File typeJSON data\012- , ASCII text, with very long lines (704) Hashd1abf2334c51c1618c0aee1502e34bd6 2817eeb04cdb6fa7eeccc6ade61842dde15b0661 a8a9de4d233712e90e4b9b3f2b411eb31e0e0f9a9edbabfeb83761725ed5b573
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /zone?pub=0&zone_id=1611787&is_mobile=false&domain=getnewsfirst.com&var=&ymid=&var_3= HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getnewsfirst.com/
Origin: https://getnewsfirst.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/json; charset=utf-8
content-length: 705
x-trace-id: 396c52fa272b722132b081a457ed7ec0
access-control-allow-origin: https://getnewsfirst.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564988583_5d47d4a734d58.jpeg | 172.67.10.98 | 200 OK | 31 kB |
URL HTTP/2news.littlecdn.com/600x360/1564988583_5d47d4a734d58.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 540x360, components 3\012- data Hash1a298a630085378ed4d7eb1786d2ef18 538e6bc4c4f5dec6115d5aca58b6d7fbfda2a595 47e3693cfed8ac95e5850bca3a8d7f6f49271f4d8d3e58a8f93ba06962127f75
GET /600x360/1564988583_5d47d4a734d58.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 31196
last-modified: Mon, 05 Aug 2019 07:03:04 GMT
etag: W/"270295ddff0d809e299faaaf331f668f"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d69a7b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1567505005_5d6e3a6d28cfd8.00315677.jpeg | 172.67.10.98 | 200 OK | 21 kB |
URL HTTP/2news.littlecdn.com/600x360/1567505005_5d6e3a6d28cfd8.00315677.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 541x360, components 3\012- data Hashc43044f7a329cd35c4a6c580121a5bc6 ad647953d59c2fd03e21d92d229f39fc8bdd0c4d 41e15ab79b8174e336a0753a33940ce4aafbd700025a4b2243b48b1315ca3686
GET /600x360/1567505005_5d6e3a6d28cfd8.00315677.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 21146
last-modified: Tue, 03 Sep 2019 10:03:26 GMT
etag: W/"d37f2d8364d169378bbdee6de9165d2f"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d5982b529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564971963_5d4793bb24a57.jpeg | 172.67.10.98 | 200 OK | 40 kB |
URL HTTP/2news.littlecdn.com/600x360/1564971963_5d4793bb24a57.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 540x360, components 3\012- data Hash5d940f9b5daae308ce8c8f9b7e54e730 23e92099cdfd1595f4c3528f4825c313c64abaff 24cd85f4eb98e7d5c5f075bd158b58daf9e9f004d4d5d06af1f2177cb27b97c4
GET /600x360/1564971963_5d4793bb24a57.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 40263
last-modified: Mon, 05 Aug 2019 02:26:04 GMT
etag: W/"24daa4a262ed55607ca17d5c20d8f4f7"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236dca1ab529-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash87de3dd2c7dce12b01a337d1554a222a 30e0bd68bbb78995aa8a0686ac02848fd5a7a699 533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash87de3dd2c7dce12b01a337d1554a222a 30e0bd68bbb78995aa8a0686ac02848fd5a7a699 533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://getnewsfirst.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 134195
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash87de3dd2c7dce12b01a337d1554a222a 30e0bd68bbb78995aa8a0686ac02848fd5a7a699 533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/rajdhani/v15/LDI2apCSOBg7S-QT7pa8FvOreec.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/rajdhani/v15/LDI2apCSOBg7S-QT7pa8FvOreec.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15688, version 1.0\012- data Hashd5448938a162ccb434b09f4572c0191f be9eae3d1d9f4fbd2208e0fd3c871b17b65b6516 5b7e4a6f97163c2636724d4de90304fc895653dcfe64c67a7a22f26331ca5c5f
GET /s/rajdhani/v15/LDI2apCSOBg7S-QT7pa8FvOreec.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://getnewsfirst.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15688
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 20:55:14 GMT
expires: Thu, 23 Nov 2023 20:55:14 GMT
cache-control: public, max-age=31536000
age: 129329
last-modified: Wed, 27 Apr 2022 15:41:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://getnewsfirst.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 136614
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564996744_5d47f488143de.jpeg | 172.67.10.98 | 200 OK | 53 kB |
URL HTTP/2news.littlecdn.com/600x360/1564996744_5d47f488143de.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 546x360, components 3\012- data Hash8ea97e0741d486b5a35f8c363aa17edf 824dea0bb81509f0bba0a12329eb52356e584bc2 874dfe232f5824912b474db678d41b7dc67627235cbe65e8781b85040ee61097
GET /600x360/1564996744_5d47f488143de.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 52895
last-modified: Mon, 05 Aug 2019 09:19:05 GMT
etag: W/"10e417627eaed26b0ddae347c2dbc460"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d6987b529-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash87de3dd2c7dce12b01a337d1554a222a 30e0bd68bbb78995aa8a0686ac02848fd5a7a699 533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| news.littlecdn.com/600x360/1567505014_5d6e3a769565f0.50858331.jpeg | 172.67.10.98 | 200 OK | 25 kB |
URL HTTP/2news.littlecdn.com/600x360/1567505014_5d6e3a769565f0.50858331.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 541x360, components 3\012- data Hash53c4ea1ad0f60a643ab8f60578dc2893 772417cee91b8bc3d5d28fe72ecf299d7ae39a55 f8b1f9aea960da70fb3fa47fc3c2d3abfd63fca59e33a1983c28d7efa9295524
GET /600x360/1567505014_5d6e3a769565f0.50858331.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 24876
last-modified: Tue, 03 Sep 2019 10:03:35 GMT
etag: W/"3c2525b7e7fa794a2583450c5aef4079"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d597bb529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/600x360/1564993082_5d47e63ac798e.jpeg | 172.67.10.98 | 200 OK | 53 kB |
URL HTTP/2news.littlecdn.com/600x360/1564993082_5d47e63ac798e.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 546x360, components 3\012- data Hash8ea97e0741d486b5a35f8c363aa17edf 824dea0bb81509f0bba0a12329eb52356e584bc2 874dfe232f5824912b474db678d41b7dc67627235cbe65e8781b85040ee61097
GET /600x360/1564993082_5d47e63ac798e.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: image/jpeg
content-length: 52895
last-modified: Mon, 05 Aug 2019 08:18:03 GMT
etag: W/"10e417627eaed26b0ddae347c2dbc460"
expires: Sat, 26 Nov 2022 08:50:43 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9236d698bb529-OSL
X-Firefox-Spdy: h2
|
|
| vaugroar.com/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
OPTIONS /custom HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://getnewsfirst.com/
Origin: https://getnewsfirst.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:44 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://getnewsfirst.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/750x350/1567505014_5d6e3a769565f0.50858331.jpeg | 172.67.10.98 | 200 OK | 24 kB |
URL HTTP/2news.littlecdn.com/750x350/1567505014_5d6e3a769565f0.50858331.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 526x350, components 3\012- data Hash1636ed9a3125b9f964af7480ad797684 c965b21dba45ab899ef46778cae165d7bbfa262e a8185a03300eb8394d02618561179f4cd52aaa1923423201b423c61f82071452
GET /750x350/1567505014_5d6e3a769565f0.50858331.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:44 GMT
content-type: image/jpeg
content-length: 23941
last-modified: Tue, 03 Sep 2019 10:03:35 GMT
etag: W/"3c2525b7e7fa794a2583450c5aef4079"
expires: Sat, 26 Nov 2022 08:50:44 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f923705d93b529-OSL
X-Firefox-Spdy: h2
|
|
| vaugroar.com/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:0
File typeJSON data\012- , ASCII text Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /custom HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getnewsfirst.com/
Content-Type: application/json
Origin: https://getnewsfirst.com
Content-Length: 369
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:44 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: db424e93f182a37d8f83ac5f4efd42d4
access-control-allow-origin: https://getnewsfirst.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/750x350/1567505012_5d6e3a74649595.44438282.jpeg | 172.67.10.98 | 200 OK | 39 kB |
URL HTTP/2news.littlecdn.com/750x350/1567505012_5d6e3a74649595.44438282.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 525x350, components 3\012- data Hashb8b494167a46403456c9276f4038f819 dfe5530024bf94529ca9400fa39e6e9dbcacd121 89fbadab3100ad811e28d015d758ec0becf33851052589a3712260f123f5b789
GET /750x350/1567505012_5d6e3a74649595.44438282.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:44 GMT
content-type: image/jpeg
content-length: 39238
last-modified: Tue, 03 Sep 2019 10:03:33 GMT
etag: W/"9278343b32612c702bf66466f4615ced"
expires: Sat, 26 Nov 2022 08:50:44 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f923714f4eb529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/750x350/1567505005_5d6e3a6d28cfd8.00315677.jpeg | 172.67.10.98 | 200 OK | 20 kB |
URL HTTP/2news.littlecdn.com/750x350/1567505005_5d6e3a6d28cfd8.00315677.jpeg IP172.67.10.98:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 526x350, components 3\012- data Hash9c871c3db3477f9de951c932fbbf6db9 e25820977682852fb13e341a89b4e30aedeaac7e cb990e922573f44de2d0ae542d28fccfd16a45d0749d0bff15543d7544c83f19
GET /750x350/1567505005_5d6e3a6d28cfd8.00315677.jpeg HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:44 GMT
content-type: image/jpeg
content-length: 20222
last-modified: Tue, 03 Sep 2019 10:03:26 GMT
etag: W/"d37f2d8364d169378bbdee6de9165d2f"
expires: Sat, 26 Nov 2022 08:50:44 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f923713f1db529-OSL
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/750x350/1567505010_5d6e3a729f1eb6.77189433.png | 172.67.10.98 | 200 OK | 70 kB |
URL HTTP/2news.littlecdn.com/750x350/1567505010_5d6e3a729f1eb6.77189433.png IP172.67.10.98:0
File typePNG image data, 667 x 350, 8-bit/color RGBA, non-interlaced\012- data Hashca6b65cee8770ca2a9f3c78db38a8e22 f80f53cc387d1bc642e54475e70d0eba4c8f49bf 34f200bf11ddbadac727cd1a59341f9ea1ed2c3e8fcaa3112605146a58cf0e39
GET /750x350/1567505010_5d6e3a729f1eb6.77189433.png HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:44 GMT
content-type: image/png
content-length: 70282
last-modified: Tue, 03 Sep 2019 10:03:31 GMT
etag: W/"8325af14cbdaf2bf91096cbe84ff0474"
expires: Sat, 26 Nov 2022 08:50:44 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f923714f55b529-OSL
X-Firefox-Spdy: h2
|
|
| getnewsfirst.com/assets/hardcore/css/flex.css | 188.42.224.102 | 200 OK | 31 kB |
URL HTTP/2getnewsfirst.com/assets/hardcore/css/flex.css IP188.42.224.102:0
Hash74cb637404f1b46f33dd2fbb8f683e47 868fa41c5c41c707091e80075537878b24ccc09b a81ae226cf58f5a3d06048d3676e70258317ab1a9e806b605bf09f76b3d5d9d0
GET /assets/hardcore/css/flex.css HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: text/css
last-modified: Fri, 12 Mar 2021 11:11:23 GMT
etag: W/"604b4c5b-445d"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 08:41:08 GMT
expires: Fri, 25 Nov 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 576
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| getnewsfirst.com/css/common.css | 188.42.224.102 | 200 OK | 819 B |
URL HTTP/2getnewsfirst.com/css/common.css IP188.42.224.102:0
Hashbafccbfb6a3d9fe5d9ed2ab2f3f0ebab c6b0dea51f0b8e44101cf9acf12ebadbfc5bebd4 ee477c721fb6bd556da48dcb7782f4bfee99fff103639a1d1fcda0b23c6c14c2
GET /css/common.css HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: text/css
last-modified: Fri, 12 Mar 2021 11:14:09 GMT
etag: W/"604b4d01-73a"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| vaugroar.com/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:0
File typeJSON data\012- , ASCII text Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /custom HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getnewsfirst.com/
Content-Type: application/json
Origin: https://getnewsfirst.com
Content-Length: 733
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:44 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: eff63450c3a619268e17f1b9ff6e6bd1
access-control-allow-origin: https://getnewsfirst.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashd3d2d21ac304813a16da64921ce18ba4 98b1762c675c61eeb18254986461e6b1074ebc92 af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-111647716-28&cid=834313573.1669366244&jid=1987003455&gjid=1179230050&_gid=1690088149.1669366244&_u=YEBAAUAAAAAAACAAI~&z=1844315413 | 142.251.1.154 | 200 OK | 4 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-111647716-28&cid=834313573.1669366244&jid=1987003455&gjid=1179230050&_gid=1690088149.1669366244&_u=YEBAAUAAAAAAACAAI~&z=1844315413 IP142.251.1.154:0
File typeASCII text, with no line terminators Hash48c0473b7821185d937e685216e2168b 3743e47f8a429a5e87b86cb582d78940733d9d2e 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-111647716-28&cid=834313573.1669366244&jid=1987003455&gjid=1179230050&_gid=1690088149.1669366244&_u=YEBAAUAAAAAAACAAI~&z=1844315413 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://getnewsfirst.com
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://getnewsfirst.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 08:50:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashd3d2d21ac304813a16da64921ce18ba4 98b1762c675c61eeb18254986461e6b1074ebc92 af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash163d4912a06d8358abc770dc0351d7b4 1e8dc04b95e704679ab729f81716466ea8a3e591 72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash76544babbcf6515110bd81aaee8e7e63 043497692868c67ac84cdfe70d0a484517abd1c2 a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-111647716-28&cid=834313573.1669366244&jid=1987003455&_u=YEBAAUAAAAAAACAAI~&z=1478835345 | 142.250.74.3 | 200 OK | 42 B |
URL HTTP/2www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-111647716-28&cid=834313573.1669366244&jid=1987003455&_u=YEBAAUAAAAAAACAAI~&z=1478835345 IP142.250.74.3:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-111647716-28&cid=834313573.1669366244&jid=1987003455&_u=YEBAAUAAAAAAACAAI~&z=1478835345 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 08:50:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-111647716-28&cid=834313573.1669366244&jid=1987003455&_u=YEBAAUAAAAAAACAAI~&z=1478835345 | 142.250.74.164 | 200 OK | 42 B |
URL HTTP/2www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-111647716-28&cid=834313573.1669366244&jid=1987003455&_u=YEBAAUAAAAAAACAAI~&z=1478835345 IP142.250.74.164:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-111647716-28&cid=834313573.1669366244&jid=1987003455&_u=YEBAAUAAAAAAACAAI~&z=1478835345 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 08:50:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| news.littlecdn.com/16x16/1529485692_5b2a197c6d640.png | 172.67.10.98 | 200 OK | 841 B |
URL HTTP/2news.littlecdn.com/16x16/1529485692_5b2a197c6d640.png IP172.67.10.98:0
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data Hash6ac11eaf9cddd2f5b0262181be31d789 bb73b808725d5bd7f14934b2c313afc464074493 a63e259d0377053ca1b8c28d87e966e8186d0bed5886070fdbe505f6eed408f6
GET /16x16/1529485692_5b2a197c6d640.png HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:44 GMT
content-type: image/png
content-length: 841
last-modified: Wed, 20 Jun 2018 09:08:13 GMT
etag: W/"95141feee9ca9b3b06f33ec2fb23348d"
expires: Sat, 26 Nov 2022 08:50:44 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f923737b2db529-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash163d4912a06d8358abc770dc0351d7b4 1e8dc04b95e704679ab729f81716466ea8a3e591 72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash65992aeb8efb9a0b8fd59687090733fe 526a2afccc93d32849185d153fafe44b72797df9 b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 08:50:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| news.littlecdn.com/180x180/1529485692_5b2a197c6d640.png | 172.67.10.98 | 200 OK | 73 kB |
URL HTTP/2news.littlecdn.com/180x180/1529485692_5b2a197c6d640.png IP172.67.10.98:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data Hash35c5fc0b4870aa02f70896e093b22583 a1f73564f15dbab4367003fb5160ad367960602a 7d20872b5f9241d4e272b9acd563469c96e48c1ce447eb83f03d55068dae0c06
GET /180x180/1529485692_5b2a197c6d640.png HTTP/1.1
Host: news.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:44 GMT
content-type: image/png
content-length: 73157
last-modified: Wed, 20 Jun 2018 09:08:13 GMT
etag: W/"95141feee9ca9b3b06f33ec2fb23348d"
expires: Sat, 26 Nov 2022 08:50:44 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f923737b29b529-OSL
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb75c00c21f5854618bc06d14b8d83c40 ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2208
Expires: Fri, 25 Nov 2022 09:27:32 GMT
Date: Fri, 25 Nov 2022 08:50:44 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb75c00c21f5854618bc06d14b8d83c40 ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2208
Expires: Fri, 25 Nov 2022 09:27:32 GMT
Date: Fri, 25 Nov 2022 08:50:44 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb75c00c21f5854618bc06d14b8d83c40 ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2208
Expires: Fri, 25 Nov 2022 09:27:32 GMT
Date: Fri, 25 Nov 2022 08:50:44 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb75c00c21f5854618bc06d14b8d83c40 ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2208
Expires: Fri, 25 Nov 2022 09:27:32 GMT
Date: Fri, 25 Nov 2022 08:50:44 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg | 34.120.237.76 | 200 OK | 7.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd43ec6824d4fdc4d31b8c245bf8c5849 81f85633fca39972d8e0bf9a4ec7cd999e54564f b0e521b23879af86102f46a9ec412faf6345df31a97a7b58880f63f81fdcd0c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7900
x-amzn-requestid: a9d184b1-3b4a-4ca6-9ad2-ce3aac10f422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB91H2IIAMFjGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38b-5732361f36c023c22c922ee9;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: nVe_gcpscsmf4QGPseIR2poHwzxp_mfWODrAz8Oy0ePkMgnIREhCag==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:07 GMT
etag: "81f85633fca39972d8e0bf9a4ec7cd999e54564f"
content-type: image/jpeg
age: 40538
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg | 34.120.237.76 | 200 OK | 4.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4006a9037ab5f28dca62b0aa7a704c41 74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b 556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 24197
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5863138af1ddbba34a7856242a7b3a06 2eba66ff6539388c48562503e8d11ff0e060350a d1543e1b803a07095148b743925eebbbf21f566a2df9b785a1a9d48c5604496c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8917
x-amzn-requestid: 10f3b269-9437-476d-ae4f-a0ac3fb78491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wEIwoAMF8uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-4cfeecf4553b26381ed11875;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6ibPrCdDNQqWzxiVYDsl87yUfTP8sUmu22GbhBdDHJruil0qxbw7Fw==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:00 GMT
etag: "2eba66ff6539388c48562503e8d11ff0e060350a"
content-type: image/jpeg
age: 40545
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg | 34.120.237.76 | 200 OK | 2.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash66d06d3cac1784e4ce6c8c89c300f10a 41ef94d198bbf98185eb332a3b6934c3c26c3afc 55312d1b43447e4f77d8e9e52451bb63a9868ba8122c9e16e0a20479d34367e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2351
x-amzn-requestid: 141bbf99-5d78-4b9c-a537-491718aee68a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b43YGE_SoAMFlbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d29a-00017cd344caea2b6408aeb3;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:09:14 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 1-8WM-7tNqakPDW9-K0GVbOKdotndEXj2QeJzw3cJol-g9TT5IVyOQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 16:45:53 GMT
age: 57892
etag: "41ef94d198bbf98185eb332a3b6934c3c26c3afc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg | 34.120.237.76 | 200 OK | 8.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc8f6118fc03f31862ff68fef8a2b9a7f 318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73 cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f4b5f150-a5dc-40bf-93b9-394c294a51cb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEmkRFSnIAMF5vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e8481-74454bee1a1ec6d506f3d75b;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 20:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZVv8iTGCYV-IiBJ6KwNSG1ZWSEwClaQopUejSqZq0S1wd782lRoyKA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:59:49 GMT
age: 35456
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg | 34.120.237.76 | 200 OK | 6.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashba7b9c131ab7e5998f25b069ba3860a0 0214fc0deecb1115766802f42cfd256e3c479490 717aa23c687ccebc1b5ebbfd88d0e4fe181fef038d308231842b2b1969f3976b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6130
x-amzn-requestid: 0ab34b27-2c6b-4a37-87ad-6fa56a265453
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wF7KIAMFjlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-4a3d24f93ceb37d37a5ce1ee;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SHmcFNiZ97RU02VeLiHLjFynYiSuaQP8T_XKG2UaAigWXG5sYhdVLQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:01 GMT
etag: "0214fc0deecb1115766802f42cfd256e3c479490"
content-type: image/jpeg
age: 40544
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| getnewsfirst.com/assets/hardcore/css/noflex.css | 188.42.224.102 | 200 OK | 0 B |
URL HTTP/2getnewsfirst.com/assets/hardcore/css/noflex.css IP188.42.224.102:0
GET /assets/hardcore/css/noflex.css HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: text/css
last-modified: Fri, 12 Mar 2021 11:11:23 GMT
etag: W/"604b4c5b-21b3"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| getnewsfirst.com/assets/hardcore/css/query.css | 188.42.224.102 | 200 OK | 0 B |
URL HTTP/2getnewsfirst.com/assets/hardcore/css/query.css IP188.42.224.102:0
GET /assets/hardcore/css/query.css HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: text/css
last-modified: Fri, 12 Mar 2021 11:11:23 GMT
etag: W/"604b4c5b-6a2"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| vaugroar.com/pfe/current/universal.min.js?v=3.1.405 | 139.45.197.250 | 200 OK | 0 B |
URL HTTP/2vaugroar.com/pfe/current/universal.min.js?v=3.1.405 IP139.45.197.250:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pfe/current/universal.min.js?v=3.1.405 HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getnewsfirst.com/
Origin: https://getnewsfirst.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-180b9"
access-control-allow-origin: https://getnewsfirst.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Rajdhani:400,700|Roboto:400,700&subset=cyrillic | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Rajdhani:400,700|Roboto:400,700&subset=cyrillic IP142.250.74.10:0
GET /css?family=Rajdhani:400,700|Roboto:400,700&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Nov 2022 08:50:43 GMT
date: Fri, 25 Nov 2022 08:50:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| vaugroar.com/ntfc.php?p=1611787 | 139.45.197.250 | 200 OK | 0 B |
URL HTTP/2vaugroar.com/ntfc.php?p=1611787 IP139.45.197.250:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /ntfc.php?p=1611787 HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-38a8"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/flexslider/2.7.1/fonts/flexslider-icon.woff | 104.17.25.14 | 200 OK | 0 B |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/flexslider/2.7.1/fonts/flexslider-icon.woff IP104.17.25.14:0
GET /ajax/libs/flexslider/2.7.1/fonts/flexslider-icon.woff HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://getnewsfirst.com
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: application/octet-stream; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: W/"5eb03e5e-4f4"
last-modified: Mon, 04 May 2020 16:10:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 160037
expires: Wed, 15 Nov 2023 08:50:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O9BYwnJJKA3xJoQU4oOZao5YxEVNlW91iemfZfXVpMSUI9oXTKkQhUjh1oQOt1lWtECiBF3sI7Nd411oTEYjWQLXBiNThuNOwEk7w4bFTZpknHSaVvOxpmwsOTorL030Gspa6GvO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f92370bd11b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| getnewsfirst.com/ | 188.42.224.102 | 200 OK | 0 B |
IP188.42.224.102:0
GET / HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Fri, 25 Nov 2022 08:50:43 GMT
set-cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; expires=Fri, 25-Nov-2022 10:50:43 GMT; Max-Age=7200; path=/
nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ; expires=Fri, 25-Nov-2022 10:50:43 GMT; Max-Age=7200; path=/; httponly
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| getnewsfirst.com/assets/hardcore/css/style.css | 188.42.224.102 | 200 OK | 0 B |
URL HTTP/2getnewsfirst.com/assets/hardcore/css/style.css IP188.42.224.102:0
GET /assets/hardcore/css/style.css HTTP/1.1
Host: getnewsfirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://getnewsfirst.com/
Cookie: XSRF-TOKEN=9nC1SZk8AQsJrOYtKbr3WYtvuz2b0Pm4qGY78rVt; nfst_session=lv9CVPx8TH5TKAoOub9bRCKiklumMdAB5WsV6RWZ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 08:50:43 GMT
content-type: text/css
last-modified: Fri, 12 Mar 2021 11:11:23 GMT
etag: W/"604b4c5b-4702"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|