r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6665
Expires: Tue, 06 Sep 2022 11:45:44 GMT
Date: Tue, 06 Sep 2022 09:54:39 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 09:12:29 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4Wu7jT6bCylxQZqeszjmlHBxwXyqPYnggG8fVoWogwokIuDiAEqgAg==
Age: 2530
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XcCDizzPG7z2KPuY0heApypWKgihDQmlLMGJKY_Mz38qTBAMl87ClA==
age: 31162
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 09:54:39 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
service-amazonpayment.com/
307 Temporary Redirect 20 B URL HTTP/1.1 service-amazonpayment.com/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET / HTTP/1.1
Host: service-amazonpayment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 307 Temporary Redirect
Date: Tue, 06 Sep 2022 09:54:39 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=d2664a02f490e6dc18880238983ac022; path=/
Location: https://thenewstribune.com
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 06 Sep 2022 09:38:18 GMT
Cache-Control: max-age=3600
Expires: Tue, 06 Sep 2022 10:33:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZEC0KKF6NXccGoRF_hmmKrVstqQ3g8I4XEMzi5K-8zd8th-m1tOzew==
Age: 982
ocsp.digicert.com/
200 OK 471 B IP
Hash e8952752ad4a452a575522a7eb737217
c5554fa2af05d7a7117032b0f99352de08988346
8c182bed7bbd843774a2136823b30a4cb707e2a5386f71d01640aa3558888bf7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3644
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:40 GMT
Last-Modified: Tue, 06 Sep 2022 08:53:56 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash beaa5e609c91182736e30242852626ff
bde231c1bde766f3197ee153a0c5bb108be7e155
a08d20c642f054949c30c9f00054cf5c4910eb4c96406f0e8626414335a18566
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "A08D20C642F054949C30C9F00054CF5C4910EB4C96406F0E8626414335A18566"
Last-Modified: Tue, 06 Sep 2022 06:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Tue, 06 Sep 2022 10:54:40 GMT
Date: Tue, 06 Sep 2022 09:54:40 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +E0CHpqouyoo2QpSuSy+fw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: E8YUpu6eWsLG7K+Ql5ptbWB//M4=
thenewstribune.com/
301 Moved Permanently 239 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 138acfc3515c42e27d6fbbad0b0e1cd3
13fa882a0563fd7c6019a503290697f9cdf48b3d
41dc0164bf3ea65d1ec2353d09096ab6607b794e1b5bb3bfeb4d569bcb25de20
GET / HTTP/1.1
Host: thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Sep 2022 09:54:40 GMT
Server: Apache
Location: https://www.thenewstribune.com/
Content-Length: 239
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.thenewstribune.com/olsoibyzn-/thenewstribunecore.js
200 OK 64 kB URL HTTP/2 www.thenewstribune.com/olsoibyzn-/thenewstribunecore.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 40222c029b3b0fb1bde719fe494ed082
1981d65059b16698d904c0c3e5d2f447cdfce034
aa8369a98d9e95f941a66cebd715a9fd01b8dbb05863d17531dbf2cbd106cc48
GET /olsoibyzn-/thenewstribunecore.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:49 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"3508c-5e79f4c459c40"
content-encoding: gzip
x-varnish: 563242666, 138874945 145689434
x-mi-in-market: 0
server: MI
mi-cache-age: 228
vary: Accept-Encoding
mi-cache: HIT
content-length: 63769
cache-control: max-age=91
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/webpack/mi-header.bundle-f1cf6d91883037775ac3.js
200 OK 3.3 kB URL HTTP/2 www.thenewstribune.com/wps/build/webpack/mi-header.bundle-f1cf6d91883037775ac3.js
IP
File type ASCII text, with very long lines (9638), with no line terminators
Hash 80a9ed3b6fa9cbcb68f97d53c900b841
5e976a25db6a0b50b59261b9d6aa429dee53d28b
a316b840805e1f35b088cacf54bd56764d94e92ed5700504d00c8943edb667e8
GET /wps/build/webpack/mi-header.bundle-f1cf6d91883037775ac3.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:35:35 GMT
etag: W/"25a6-182da5d7858"
content-type: application/javascript;charset=UTF-8
surrogate-control: varnish=ESI/2.1
content-encoding: gzip
x-varnish: 192868092, 176491880 56262944
x-mi-in-market: 0
server: MI
mi-cache-age: 96381
vary: Accept-Encoding
mi-cache: HIT
content-length: 3275
cache-control: max-age=211228
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/webpack/vendor.bundle-e8bf89b42a8198ff411c.js
200 OK 34 kB URL HTTP/2 www.thenewstribune.com/wps/build/webpack/vendor.bundle-e8bf89b42a8198ff411c.js
IP
File type ASCII text, with very long lines (53171), with CRLF, LF line terminators
Hash cf13b2d92edf4925bdd8e29ceaffac82
c54181b54f82cf20dd8c5d352c2afe4d9022fe0b
cbcc0768a74d5443acd425ee06d530a21ba2b4fd312b3a7f878acad83d470687
GET /wps/build/webpack/vendor.bundle-e8bf89b42a8198ff411c.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:35:35 GMT
etag: W/"18ca4-182da5d7858"
content-type: application/javascript;charset=UTF-8
surrogate-control: varnish=ESI/2.1
content-encoding: gzip
x-varnish: 222204840, 672360635 650613020
x-mi-in-market: 0
server: MI
mi-cache-age: 103992
vary: Accept-Encoding
mi-cache: HIT
content-length: 34371
cache-control: max-age=396140
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/webpack/css/mi-styles.25fedef8611f05c91573.css
200 OK 45 kB URL HTTP/2 www.thenewstribune.com/wps/build/webpack/css/mi-styles.25fedef8611f05c91573.css
IP
File type ASCII text, with very long lines (65221)
Hash 7d2dc5f93620139275f94552ab40275e
48e2e655f36e0e3e8f0ec04045195d444bfbd304
a58194a5ef834aa181cff2f32f9846541fe97425f9d5e9de7ffc92ba59fd623d
GET /wps/build/webpack/css/mi-styles.25fedef8611f05c91573.css HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:35:50 GMT
etag: W/"3396e-182da5db2f0"
content-type: text/css;charset=UTF-8
surrogate-control: varnish=ESI/2.1
content-encoding: gzip
x-varnish: 185678989, 662091086 507969631
x-mi-in-market: 0
server: MI
mi-cache-age: 330362
vary: Accept-Encoding
mi-cache: HIT
content-length: 45025
cache-control: max-age=435072
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/webpack/mastheadPage.bundle-cadb0343bfb937209d74.js
200 OK 44 kB URL HTTP/2 www.thenewstribune.com/wps/build/webpack/mastheadPage.bundle-cadb0343bfb937209d74.js
IP
File type Unicode text, UTF-8 text, with very long lines (28287)
Hash 7d3941558bb9b928fbec1e777534c5c8
30b79ab65714f0bcf8527b0e5bf8089d14253997
6b3f7d0e877ef153b935bd84bfc4c8138acb74b3b267cfca629b7e8d83ad462c
GET /wps/build/webpack/mastheadPage.bundle-cadb0343bfb937209d74.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:35:38 GMT
etag: W/"20ad8-182da5d8410"
content-type: application/javascript;charset=UTF-8
surrogate-control: varnish=ESI/2.1
x-varnish: 221287841, 741585568 603449152
content-encoding: gzip
x-mi-in-market: 0
server: MI
mi-cache-age: 321317
vary: Accept-Encoding
mi-cache: HIT
content-length: 44062
cache-control: max-age=596991
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.thenewstribune.com/wps/build/webpack/mi-footer.bundle-9e59a31b822d120051b7.js
200 OK 2.9 kB URL HTTP/2 www.thenewstribune.com/wps/build/webpack/mi-footer.bundle-9e59a31b822d120051b7.js
IP
File type ASCII text, with very long lines (8503), with no line terminators
Hash 2ee998bbab2ca6725a46aaad009893b6
7c71088af46b640173bf2bfe8fe3e0a3a1974908
526c4ee77db26acc9b390a1c95101e027ae3416f6c946d6b7d2911ce1a747c4c
GET /wps/build/webpack/mi-footer.bundle-9e59a31b822d120051b7.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:35:35 GMT
etag: W/"2137-182da5d7858"
content-type: application/javascript;charset=UTF-8
surrogate-control: varnish=ESI/2.1
x-varnish: 172174859, 745157305 590308223
content-encoding: gzip
x-mi-in-market: 0
server: MI
mi-cache-age: 433740
vary: Accept-Encoding
mi-cache: HIT
content-length: 2925
cache-control: max-age=597468
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/
200 OK 472 B IP
Hash 3df811ac19fde08f49ef246c29cef161
e1c8d54b357adaf32e80427028cc884fa35959e0
e2749178e0bf0c4045a96388a58029ddd92d13a866021737864cd68e11317292
GET / HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
mi-api: WPS
content-type: text/html;charset=utf-8
surrogate-control: varnish=ESI/2.1
last-modified: Tue, 06 Sep 2022 09:53:37 GMT
etag: W/"3190e-woYx6kDZP6V+71lgasy9FGyO7sA"
x-varnish: 214094862, 715782610 740866951
content-encoding: gzip
x-mi-in-market: 0
server: MI
mi-cache-age: 63
vary: Accept-Encoding
mi-cache: HIT
content-length: 24854
cache-control: max-age=173
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/webpack/vue.bundle-a7582cccbd6e83096783.js
200 OK 39 kB URL HTTP/2 www.thenewstribune.com/wps/build/webpack/vue.bundle-a7582cccbd6e83096783.js
IP
File type ASCII text, with very long lines (62813)
Hash 93b70a4022e0bf4e83cea7d0244ca929
d732aae11c823f1c9061f225c491a24f4b06df65
da54287119bcb83f3b0395c128f709efacf9f2def625434b3abbc6f37bdfb67c
GET /wps/build/webpack/vue.bundle-a7582cccbd6e83096783.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:36:20 GMT
etag: W/"1ad49-182da5e2820"
content-type: application/javascript;charset=UTF-8
surrogate-control: varnish=ESI/2.1
content-encoding: gzip
x-varnish: 199087808, 236097806 91448187
x-mi-in-market: 0
server: MI
mi-cache-age: 100374
vary: Accept-Encoding
mi-cache: HIT
content-length: 38877
cache-control: max-age=258592
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/webpack/videoStory.bundle-7dcb205b25781ef94755.js
200 OK 54 kB URL HTTP/2 www.thenewstribune.com/wps/build/webpack/videoStory.bundle-7dcb205b25781ef94755.js
IP
File type Unicode text, UTF-8 text, with very long lines (60757)
Hash bb9b8b6645e36e74cb8cbd1848aec962
c8a98b188794b4cdb0126923528b0ad06e321463
95d6ec192499c5777a0b19d1d1efb802811d57146f503d8b85e362a514402f90
GET /wps/build/webpack/videoStory.bundle-7dcb205b25781ef94755.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:36:20 GMT
etag: W/"2c0d4-182da5e2820"
content-type: application/javascript;charset=UTF-8
surrogate-control: varnish=ESI/2.1
content-encoding: gzip
x-varnish: 137220930, 638262609 492260348
x-mi-in-market: 0
server: MI
mi-cache-age: 259212
vary: Accept-Encoding
mi-cache: HIT
content-length: 53937
cache-control: max-age=258606
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js
200 OK 553 B URL HTTP/2 www.google.com/recaptcha/api.js
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 528455474b03fa8ad71a558347e43fe1
597b34487415fa60028f80afd7ab2cf27383ace5
af9ee6f9ce7bd44e5dbbfcab2a528e062f9dec4640a98a396170d46c494dafb5
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 06 Sep 2022 09:54:41 GMT
date: Tue, 06 Sep 2022 09:54:41 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/webpack/videojs.bundle-2507db78b9d62875077c.js
200 OK 155 kB URL HTTP/2 www.thenewstribune.com/wps/build/webpack/videojs.bundle-2507db78b9d62875077c.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 155 kB (154978 bytes)
Hash 838d282fdc37b6a4a37204e3fc0c7d40
fb2dca62348958aba86387fd9102436e4f84d81b
4d1b9307e455a8b8a57d5fc358261d1add14b2d0da50b1e50dd751c46b942e3f
GET /wps/build/webpack/videojs.bundle-2507db78b9d62875077c.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:36:20 GMT
etag: W/"8fd13-182da5e2820"
content-type: application/javascript;charset=UTF-8
surrogate-control: varnish=ESI/2.1
content-encoding: gzip
content-length: 154978
x-varnish: 191364678, 733810413 734070010
x-mi-in-market: 0
server: MI
mi-cache-age: 484364
vary: Accept-Encoding
mi-cache: HIT
cache-control: max-age=117550
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/webpack/footer.bundle-1f06f5f8ac3bfe589066.js
200 OK 2.6 kB URL HTTP/2 www.thenewstribune.com/wps/build/webpack/footer.bundle-1f06f5f8ac3bfe589066.js
IP
Hash b69d610b2fce91fddaa14c8b21029514
e8489e77c734b042fe4cfc4ead386754e84d6a26
56662fd92fc9c3b96a47c213e773a170939b2075abb223a68e4cc681a31c3258
GET /wps/build/webpack/footer.bundle-1f06f5f8ac3bfe589066.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:35:35 GMT
etag: W/"284c-182da5d7858"
content-type: application/javascript;charset=UTF-8
surrogate-control: varnish=ESI/2.1
content-encoding: gzip
x-varnish: 166869935, 607634281 534933612
x-mi-in-market: 0
server: MI
mi-cache-age: 107678
vary: Accept-Encoding
mi-cache: HIT
content-length: 2570
cache-control: max-age=258593
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.thenewstribune.com/olsoibyzn-/netdale.ae0b0ad69cf5d670787f.js
200 OK 22 kB URL HTTP/2 www.thenewstribune.com/olsoibyzn-/netdale.ae0b0ad69cf5d670787f.js
IP
File type Unicode text, UTF-8 text, with very long lines (65517), with no line terminators
Hash 13580e55f36f4ebac5e12ded9be7384f
8d51abdb96d3f0b7ef6ba01fc0574393fe5db32d
b765d847ac57e7a951c621ffcaa54e1734ff89fc46bfc16139ea54568a8fa187
GET /olsoibyzn-/netdale.ae0b0ad69cf5d670787f.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"13236-5e79f4c089340"
content-encoding: gzip
x-varnish: 142578803 123320079
x-mi-in-market: 0
server: MI
mi-cache-age: 284
vary: Accept-Encoding
mi-cache: HIT
content-length: 21478
cache-control: max-age=193556
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/pdp.gif?y=eyJkZXByIjoiY3JlYXRlVHJhbnNhY3Rpb25JZCJ9
200 OK 42 B URL HTTP/2 www.thenewstribune.com/olsoibyzn-/pdp.gif?y=eyJkZXByIjoiY3JlYXRlVHJhbnNhY3Rpb25JZCJ9
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /olsoibyzn-/pdp.gif?y=eyJkZXByIjoiY3JlYXRlVHJhbnNhY3Rpb25JZCJ9 HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 16:04:12 GMT
etag: "2a-5e7636a22d700"
content-length: 42
surrogate-control: varnish=ESI/2.1
content-type: image/gif
x-varnish: 959521570, 437386613 435154112
x-mi-in-market: 0
server: MI
mi-cache-age: 471
mi-cache: HIT
cache-control: max-age=543603
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/source/scripts/libs/identityModulev3.min.js
200 OK 11 kB URL HTTP/2 www.thenewstribune.com/wps/source/scripts/libs/identityModulev3.min.js
IP
File type ASCII text, with very long lines (36283), with no line terminators
Hash 18521f92d9c0238f708bc04b3e3eb544
8aadb751746ac731fd45837f0ed20ee3f104059b
4e95c2b691ddf5c8528b3a953bfd2ab7e2b16de2cb40786a3f8afe2be9cde845
GET /wps/source/scripts/libs/identityModulev3.min.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:32:31 GMT
etag: W/"8dbb-182da5aa998"
content-type: application/javascript;charset=UTF-8
surrogate-control: varnish=ESI/2.1
content-encoding: gzip
x-varnish: 202009829, 395709939 121745721
x-mi-in-market: 0
server: MI
mi-cache-age: 208445
vary: Accept-Encoding
mi-cache: HIT
content-length: 11142
cache-control: max-age=392213
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/images/thenewstribune/logo.svg
200 OK 4.1 kB URL HTTP/2 www.thenewstribune.com/wps/build/images/thenewstribune/logo.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (10256), with no line terminators
Hash a8fee897244f76f8695a4bf3d5cde2b7
b6ee5923c95e18cfeb993e2f3c67f900a459f916
84c475e70c2d5ed727a8af40744ba87b4fa430fab381053bf495f82eeaa95605
GET /wps/build/images/thenewstribune/logo.svg HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Wed, 24 Aug 2022 16:50:56 GMT
etag: W/"2810-182d0c39980"
content-type: image/svg+xml;charset=ISO-8859-1
surrogate-control: varnish=ESI/2.1
x-varnish: 118259916, 323609015 237934897
x-mi-in-market: 0
server: MI
mi-cache-age: 168053
mi-cache: HIT
vary: Accept-Encoding
content-encoding: gzip
content-length: 4088
cache-control: max-age=258632
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5ff53ce3208d3fb47bc0e7e035933787
d2dfbd0aef17defd8c11ac111c98d15194c390a8
4ba1f9d45567d4ae7a963cc99bae8b155ed3f40e35bcc946889c0030e5af3e84
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1345
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:41 GMT
Last-Modified: Tue, 06 Sep 2022 09:32:16 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
www.thenewstribune.com/wps/source/images/widgets/weather/wxicons-blk/wxicons-blk-33.svg
200 OK 335 B URL HTTP/2 www.thenewstribune.com/wps/source/images/widgets/weather/wxicons-blk/wxicons-blk-33.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (596), with no line terminators
Hash 7cc23a1bd2c3691c1e5c69c5fb4ba9ee
6a700136057c4787c189f450891822205852ed78
1a96c5057ec124cc89b73686c7e1384616ed601a090deb8120f79ebf24053170
GET /wps/source/images/widgets/weather/wxicons-blk/wxicons-blk-33.svg HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:32:30 GMT
etag: W/"254-182da5aa5b0"
content-type: image/svg+xml;charset=ISO-8859-1
surrogate-control: varnish=ESI/2.1
x-varnish: 233128207, 608570499 409191433
x-mi-in-market: 0
server: MI
mi-cache-age: 161119
mi-cache: HIT
vary: Accept-Encoding
content-encoding: gzip
content-length: 335
cache-control: max-age=586076
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/notoserif/v21/ga6Law1J5X9T9RW6j9bNdOwzfReecQ.woff2
200 OK 28 kB URL HTTP/2 fonts.gstatic.com/s/notoserif/v21/ga6Law1J5X9T9RW6j9bNdOwzfReecQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27456, version 1.0\012- data
Hash 80becb8b7638756b35eebf31518f8904
ba154f44545a98796887a9b5cfd84d765d3d0c05
a0a9ce1553fa74dad4d8cf55b7df7d012a3acdec01cd39d682fce0e5b52e99f2
GET /s/notoserif/v21/ga6Law1J5X9T9RW6j9bNdOwzfReecQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27456
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 21:05:13 GMT
expires: Tue, 05 Sep 2023 21:05:13 GMT
cache-control: public, max-age=31536000
age: 46168
last-modified: Mon, 09 May 2022 20:10:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notoserif/v21/ga6Iaw1J5X9T9RW6j9bNfFcWaA.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/notoserif/v21/ga6Iaw1J5X9T9RW6j9bNfFcWaA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23948, version 1.0\012- data
Hash aeb92e524ca62170347fa63974605767
1e10bfbd720481e42035a5469d7ce8fc51d34aab
25475d82cc976fb2c71b15b3e416c22bf636dd247bbb268d312e7c076ec5b6e4
GET /s/notoserif/v21/ga6Iaw1J5X9T9RW6j9bNfFcWaA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23948
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 21:05:04 GMT
expires: Tue, 05 Sep 2023 21:05:04 GMT
cache-control: public, max-age=31536000
age: 46177
last-modified: Mon, 09 May 2022 19:47:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7710
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 09:54:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7710
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 09:54:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F022243d2-ac74-4a81-b31f-104b203bf550.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F022243d2-ac74-4a81-b31f-104b203bf550.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7fe061740ad833cfe7ff0fe078d6810d
15d0fc3fdced758b5797361bae0fd53341e0581d
5409b6775bca5afd03901975c61c27f267efe2c8a8e739f05ebc52a938c5a368
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F022243d2-ac74-4a81-b31f-104b203bf550.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5459
x-amzn-requestid: a75bf8a5-dc96-4a88-9de5-b79d1d62ff21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XxB_bFMFoAMFkEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631049fc-2685c90962d8af5f4a7b5908;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 05:58:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rZh0s85w1Nt6qZdZybNBcQHEXMWQIJvtAyCbF4oWsYUOlIKuNS5Fpg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:15:34 GMT
age: 41947
etag: "15d0fc3fdced758b5797361bae0fd53341e0581d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7710
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 09:54:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc784000-5c7c-4aa9-8318-e4d0319d1a09.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc784000-5c7c-4aa9-8318-e4d0319d1a09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d404793e430ea237e75be9cb1e2bce4
059b34d1809abedd223f7beec75e7831673878be
f180b1cdeb9a794ba3211348673783508d021aeaed419d782374be1a92a4c8dc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc784000-5c7c-4aa9-8318-e4d0319d1a09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9300
x-amzn-requestid: dc833608-6b16-4baa-af21-d3885043556c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWshHVxIAMFlGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-1710086818614ab247bcaf58;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: sPkksSz3FIV3WcWpoY8E8UYKmUTE8LJ2lr5WO2JVNCGIuAvpPwYMYg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:56:40 GMT
age: 43081
etag: "059b34d1809abedd223f7beec75e7831673878be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7710
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 09:54:41 GMT
Connection: keep-alive
cf-images.us-east-1.prod.boltdns.net/v1/static/5615998024001/90966fe8-b713-418d-b157-3b5df5c9a1e2/97028d4d-2733-4340-8d0c-dee4d81ad08c/1280x720/match/image.jpg
200 OK 189 kB URL HTTP/1.1 cf-images.us-east-1.prod.boltdns.net/v1/static/5615998024001/90966fe8-b713-418d-b157-3b5df5c9a1e2/97028d4d-2733-4340-8d0c-dee4d81ad08c/1280x720/match/image.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=NIKON CORPORATION, model=NIKON D4S, orientation=upper-left, xresolution=150, yresolution=158, resolutionunit=2, software=Adobe Photoshop 22.3 (Macintosh), datetime=2021:10:25 21:48:35 DIY-Thermocam raw data\012- (Lepton 2.x), scale 0-25701, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 70641242697771835349574615040.000000, slope 172223922176.000000], baseline, precision 8, 612x720, components 3\012- data
Size 189 kB (188932 bytes)
Hash 61decb3b14608738530d2e7bb3d6c511
19cb761863c68ab15b67fed13fed73740100afa8
40419378a53b8af19fd6a96c60d30e8ba2605dfdb9855a01bab026bcee20f3a5
GET /v1/static/5615998024001/90966fe8-b713-418d-b157-3b5df5c9a1e2/97028d4d-2733-4340-8d0c-dee4d81ad08c/1280x720/match/image.jpg HTTP/1.1
Host: cf-images.us-east-1.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
Date: Sat, 03 Sep 2022 23:17:13 GMT
Expires: Sun, 03 Sep 2023 23:17:13 GMT
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: m-LK2jyAsYtiLEsf8YEEGw-ZJCIjim3gv0TU0oaQb7mNNS0xClTGRw==
Age: 211048
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec466c0d472e43c11d36bf6fce068205
720d3624a76d060b8e2699e9aa7a320e3efd4878
5553fc24713aae808f5ab81671551b0ae719435f3ced9f25df97d8edf6bfe86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12683
x-amzn-requestid: 6127e5b6-72f6-40df-b400-41a1f147f6da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8XmEe0IAMFQDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117430-2b27a2683d2d320172cef32e;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mj_IT5g7hGu2AunKK7mvierv5BQ8cAxhnbGaUNsL6hRNu6MRAzIBDw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 04:31:02 GMT
age: 19419
etag: "720d3624a76d060b8e2699e9aa7a320e3efd4878"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7710
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 09:54:41 GMT
Connection: keep-alive
cf-images.us-east-1.prod.boltdns.net/v1/static/5615998021001/caeb3ea1-f069-4527-92ba-7016853f8ec4/372f761e-678c-4da3-a74a-4986e9a6d508/1280x720/match/image.jpg
200 OK 296 kB URL HTTP/1.1 cf-images.us-east-1.prod.boltdns.net/v1/static/5615998021001/caeb3ea1-f069-4527-92ba-7016853f8ec4/372f761e-678c-4da3-a74a-4986e9a6d508/1280x720/match/image.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, height=1725, bps=206, PhotometricIntepretation=RGB, description=Scent tracking dog Hyper searches on Tilly Road south of Tumwater, Washington on Sept. 1, 2022. Olympia High School football pl, manufacturer=NIKON CORPORATION, model=NIKON D5, orientation=upper-left, width=2840], baseline, precision 8, 1229x720, components 3\012- data
Size 296 kB (296013 bytes)
Hash c640be39f78aa9563619a7728c701935
effa5ab2caab1ff18d2362da8678e01cd71dd6ef
422d340bf2cb012add52b9d675b671b7d271e71ed7b0215d3a41b130d3fa1ed3
GET /v1/static/5615998021001/caeb3ea1-f069-4527-92ba-7016853f8ec4/372f761e-678c-4da3-a74a-4986e9a6d508/1280x720/match/image.jpg HTTP/1.1
Host: cf-images.us-east-1.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
Date: Thu, 01 Sep 2022 18:44:56 GMT
Expires: Fri, 01 Sep 2023 18:44:56 GMT
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SRYmU6kCiHiZeWA-72T0NkGa2s1jFrb6C7eevsdONoH9OWdFGrMIig==
Age: 400185
www.thenewstribune.com/latest-news/7fcm4m/picture254983982/alternates/LANDSCAPE_768/Seattle%20Skyline%20space%20needle.jpg
200 OK 61 kB URL HTTP/2 www.thenewstribune.com/latest-news/7fcm4m/picture254983982/alternates/LANDSCAPE_768/Seattle%20Skyline%20space%20needle.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 768x431, components 3\012- data
Hash fbee125251dba4486e4c1c780c9f4efc
ef729261860057c84b38f98e0e6dbe7d2bcb16d7
e2816c0cb4bbf1d60375d8ff782012db9a9c6e44cc32a62a5a67f85826a4e80a
GET /latest-news/7fcm4m/picture254983982/alternates/LANDSCAPE_768/Seattle%20Skyline%20space%20needle.jpg HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 13 Oct 2021 20:33:27 GMT
etag: "fbee125251dba4486e4c1c780c9f4efc"
x-proxy-forwarding-type: BlackList
content-type: image/jpeg
content-length: 61226
surrogate-control: varnish=ESI/2.1
x-varnish: 671722544 436222325, 690565640 686135506
x-mi-in-market: 0
server: MI
mi-cache-age: 31585
mi-cache: HIT
cache-control: max-age=581383
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c23179b2131543088771e3fa84ff231
ae50ae4aecd962b698c19f2863857b51cea7fcec
660900ca69b1787a734c1dbe3d6b9b19656912b4bc4715964c4325edff57f008
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7855
x-amzn-requestid: d7c8054c-d7d3-4b76-815d-36c3a2e1f6a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYn6FwzoAMF40g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166e32-3ededbf27f83503978e0d775;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:46:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QFEoJOq9eyhQH3KTlAB_ctOvGWRfAkPMHiZUa34wae07KaezXFodBg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:57:14 GMT
age: 43047
etag: "ae50ae4aecd962b698c19f2863857b51cea7fcec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
edge.adobedc.net/ee/v1/identity/acquire?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=2313f4ff-42ce-4c6b-a372-d30d74b44660
200 OK 58 kB URL HTTP/2 edge.adobedc.net/ee/v1/identity/acquire?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=2313f4ff-42ce-4c6b-a372-d30d74b44660
IP
Hash 6c5bec45c4e1e3163bfdbb5f27d7b8d3
3cdbb8ba74abce562f418f908b9fb981653c15ac
62cc4fbbbe6013666e8e03210742eea2f8302c772b6ccb8b8f463fa92175f37e
POST /ee/v1/identity/acquire?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=2313f4ff-42ce-4c6b-a372-d30d74b44660 HTTP/1.1
Host: edge.adobedc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Content-Type: text/plain; charset=UTF-8
Origin: https://www.thenewstribune.com
Content-Length: 112
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-request-id: 2313f4ff-42ce-4c6b-a372-d30d74b44660
x-rate-limit-remaining: 599
vary: Origin
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID
date: Tue, 06 Sep 2022 09:54:41 GMT
x-konductor: 22.8.58:6cff4a96
x-adobe-edge: IRL1;6
server: jag
content-encoding: deflate
content-type: application/json;charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3fe4a321dcd6a94a637a528d74f9321a
3f3aad2cc71226b39549db1a9baa6837d4f1d897
a19b6749429e8ecaeac8fc0849abc4d891bfc628489762b1619a3ee3064536e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12573
x-amzn-requestid: 93ac3b01-e2e3-462b-93d4-8f1bf949a015
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAX-5E5JIAMFTJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d2b-7fa8ddcb4b17c5ff1c214b94;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qU3s1u1OYmhFyNM8dgd4R3mLfgN3VXlj7z0WGWFhmW-U00wuUld96w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:45:23 GMT
age: 43758
etag: "3f3aad2cc71226b39549db1a9baa6837d4f1d897"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.thenewstribune.com/latest-news/bhccgx/picture265085679/alternates/LANDSCAPE_768/40JanelleHatchetNails.jpg
200 OK 44 kB URL HTTP/2 www.thenewstribune.com/latest-news/bhccgx/picture265085679/alternates/LANDSCAPE_768/40JanelleHatchetNails.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 768x431, components 3\012- data
Hash 6efa20f3aa9d24ce6c58e9326f6f9274
9a2e634e8860d6dad8f9a91d068ab003896e09e0
1d44b5773863b301b1f3b98b8e3c09743da5eb6b08d222cd9423d4292179ad37
GET /latest-news/bhccgx/picture265085679/alternates/LANDSCAPE_768/40JanelleHatchetNails.jpg HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
etag: "6efa20f3aa9d24ce6c58e9326f6f9274"
last-modified: Tue, 30 Aug 2022 17:21:43 GMT
content-type: image/jpeg
content-length: 44166
surrogate-control: varnish=ESI/2.1
x-varnish: 674362308, 417250861 441681463
x-mi-in-market: 0
server: MI
mi-cache-age: 10
mi-cache: HIT
cache-control: max-age=439633
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/latest-news/f6u52q/picture265257941/alternates/LANDSCAPE_768/PuyallupCHC.JPG
200 OK 54 kB URL HTTP/2 www.thenewstribune.com/latest-news/f6u52q/picture265257941/alternates/LANDSCAPE_768/PuyallupCHC.JPG
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 768x431, components 3\012- data
Hash 60c78f7ebd39af6de0781a585206d822
569f1574cde9bc2d0900909421d2a59feae4abb8
0d362645c877d309a528928cc0bf0b874d0106717d9a80247b3d10c3afdb808a
GET /latest-news/f6u52q/picture265257941/alternates/LANDSCAPE_768/PuyallupCHC.JPG HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
etag: "60c78f7ebd39af6de0781a585206d822"
last-modified: Fri, 02 Sep 2022 19:35:09 GMT
content-type: image/jpeg
content-length: 53623
surrogate-control: varnish=ESI/2.1
x-varnish: 662774849 668141993
x-mi-in-market: 0
server: MI
mi-cache-age: 82
mi-cache: HIT
cache-control: max-age=439771
date: Tue, 06 Sep 2022 09:54:41 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/sponsored.feadb2f64e6fbfcaec0a.js
200 OK 485 B URL HTTP/2 www.thenewstribune.com/olsoibyzn-/sponsored.feadb2f64e6fbfcaec0a.js
IP
File type ASCII text, with very long lines (1073), with no line terminators
Hash cad3ca9e5a61124575f93ccb43c8dfa1
42ed2c015fff7241d0744bda308f91a78b4525c3
0fb4b05c93a408916fd723bf4d5d906746846ef33fab02c11f90bd664e3fa0a8
GET /olsoibyzn-/sponsored.feadb2f64e6fbfcaec0a.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"431-5e79f4c089340"
content-encoding: gzip
x-varnish: 142054335, 571020385 567352896
x-mi-in-market: 0
server: MI
mi-cache-age: 288
vary: Accept-Encoding
mi-cache: HIT
content-length: 485
cache-control: max-age=193636
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/video.6cb31a5015f9428d9b8b.js
200 OK 5.0 kB URL HTTP/2 www.thenewstribune.com/olsoibyzn-/video.6cb31a5015f9428d9b8b.js
IP
File type ASCII text, with very long lines (15160), with no line terminators
Hash 9107dfbea331536a94960c55236a8f64
95a63f5b3a832bbb606269eb1a79bbb63560f5a5
86e0c7d3ef6e85aea08565703861af33a33b16f26d3f8e5dcbb662157c1c7143
GET /olsoibyzn-/video.6cb31a5015f9428d9b8b.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"3b38-5e79f4c089340"
content-encoding: gzip
x-varnish: 139402326, 574162157 567584657
x-mi-in-market: 0
server: MI
mi-cache-age: 500
vary: Accept-Encoding
mi-cache: HIT
content-length: 4987
cache-control: max-age=193858
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/performance.a96051a26cde49fbb260.js
200 OK 2.6 kB URL HTTP/2 www.thenewstribune.com/olsoibyzn-/performance.a96051a26cde49fbb260.js
IP
File type ASCII text, with very long lines (7832), with no line terminators
Hash f2c91ae428e624bbce0be134c29254b7
a8170311ad1cee42c3e7e339e037cfb2f09e0743
2941e62f58a2db7455233eebd9eb7f1192a6b8c53be4a5b3351a3b585d3bf37e
GET /olsoibyzn-/performance.a96051a26cde49fbb260.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"1e98-5e79f4c089340"
content-encoding: gzip
x-varnish: 551518976 548870772
x-mi-in-market: 0
server: MI
mi-cache-age: 284
vary: Accept-Encoding
mi-cache: HIT
content-length: 2647
cache-control: max-age=193615
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5540d72831e7e7b9fc287f92c48d9f5e
ec19429fa76d9ad47a0578734b011b530b79ebbf
bc27a44853fd17cf51d6bba0db58a755c75a309d9b0cbcd454dfc9d62785f72f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8134
x-amzn-requestid: 1b2ece5c-784c-4c14-a760-c43d697b1abf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FSEE2CIAMFvgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144f40-2243fc211a76c7e404710c7c;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:09:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: f2bMA3sdC6qxijseKXb53WMncdjInfvh-lVvr0W69sgaHEHKCNvLMQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 07:25:52 GMT
age: 8930
etag: "ec19429fa76d9ad47a0578734b011b530b79ebbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/quarantine.1af46d1d1823501b11d8.js
200 OK 9.5 kB URL HTTP/2 www.thenewstribune.com/olsoibyzn-/quarantine.1af46d1d1823501b11d8.js
IP
File type ASCII text, with very long lines (25861), with no line terminators
Hash bb9a4e5e5cd1452abd08394052ee5dc2
f0594f4bf1529b2b51d72b5b8da34750aad6751b
20a2d9d596f5ef7a40eb0e218fe9ed60dac97560294273da96e08c75725310e1
GET /olsoibyzn-/quarantine.1af46d1d1823501b11d8.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"6505-5e79f4c089340"
content-encoding: gzip
x-varnish: 595684875 606638285
x-mi-in-market: 0
server: MI
mi-cache-age: 288
vary: Accept-Encoding
mi-cache: HIT
content-length: 9456
cache-control: max-age=193569
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/parsely.3b4b620eb4a21ad757cb.js
200 OK 614 B URL HTTP/2 www.thenewstribune.com/olsoibyzn-/parsely.3b4b620eb4a21ad757cb.js
IP
File type ASCII text, with very long lines (1207), with no line terminators
Hash bda767a195a4d775f68a2596310cae96
08f1ee2047438033854f3c1ebdeb65dd9aeffb62
8944424ce6878e4d05eb2ff10861b69a7f3548fc32da03339b08761a78d66be3
GET /olsoibyzn-/parsely.3b4b620eb4a21ad757cb.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"4b7-5e79f4c089340"
content-encoding: gzip
x-varnish: 149061915 141856050
x-mi-in-market: 0
server: MI
mi-cache-age: 288
vary: Accept-Encoding
mi-cache: HIT
content-length: 614
cache-control: max-age=193586
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.bellinghamherald.com/latest-news/5ohscm/picture265230826/alternates/LANDSCAPE_768/GettyImages-530303825%20(1).jpg
200 OK 40 kB URL HTTP/2 www.bellinghamherald.com/latest-news/5ohscm/picture265230826/alternates/LANDSCAPE_768/GettyImages-530303825%20(1).jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 768x431, components 3\012- data
Hash fbb5555392d31fd69e6238d629f64d3f
ff9367749d5ee5da64111c2bdc0d73b024419539
af2d74e0b87a3cbebc5636de84d5681919de1bb244b54ae33cfd776f6de74c59
GET /latest-news/5ohscm/picture265230826/alternates/LANDSCAPE_768/GettyImages-530303825%20(1).jpg HTTP/1.1
Host: www.bellinghamherald.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
etag: "fbb5555392d31fd69e6238d629f64d3f"
last-modified: Fri, 02 Sep 2022 02:01:44 GMT
content-type: image/jpeg
content-length: 40228
surrogate-control: varnish=ESI/2.1
x-varnish: 525111088 513881656
x-mi-in-market: 0
server: MI
mi-cache-age: 324
mi-cache: HIT
cache-control: max-age=526288
date: Tue, 06 Sep 2022 09:54:42 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.theolympian.com/news/local/ult5lt/picture90352162/alternates/LANDSCAPE_768/ballots
200 OK 48 kB URL HTTP/2 www.theolympian.com/news/local/ult5lt/picture90352162/alternates/LANDSCAPE_768/ballots
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 768x431, components 3\012- data
Hash 8f36b8edd93afa63928af19a4c90bdc1
aaf86c21385ce204611b3bc4ff5920d004f2b600
011047de79bbe45c282c7a5facf28f31f797790502c37c3d94b1cf5985981342
GET /news/local/ult5lt/picture90352162/alternates/LANDSCAPE_768/ballots HTTP/1.1
Host: www.theolympian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Tue, 19 Jul 2016 16:27:07 GMT
etag: "8f36b8edd93afa63928af19a4c90bdc1"
content-type: image/jpeg
content-length: 47631
surrogate-control: varnish=ESI/2.1
x-varnish: 709295111 716909803
x-mi-in-market: 0
server: MI
mi-cache-age: 1514
mi-cache: HIT
cache-control: max-age=527568
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
confiant-integrations.global.ssl.fastly.net/awMxVZLpNW6K6EG6WC5S8oR_a68/gpt_and_prebid/config.js
200 OK 29 kB URL HTTP/1.1 confiant-integrations.global.ssl.fastly.net/awMxVZLpNW6K6EG6WC5S8oR_a68/gpt_and_prebid/config.js
IP
File type C source, ASCII text, with very long lines (63747)
Hash c64c8c524e7e2b6c4eb192c416f7e462
295b3893d0ba5749501ac890c3f7cbf278ebac73
11b2d77888b9747cc4dbb3bbb5196357d5af42e35e288bd175c31e29ba55152c
GET /awMxVZLpNW6K6EG6WC5S8oR_a68/gpt_and_prebid/config.js HTTP/1.1
Host: confiant-integrations.global.ssl.fastly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 29233
x-amz-id-2: ldZESX8t435ccADES9s8+ApIxnMxxizVFxKgTejKIywF4/baXNGKOCncLauLiHKf3Nsiw1wwK4E=
x-amz-request-id: DPQ163D4NVXEAF9X
Last-Modified: Tue, 06 Sep 2022 08:50:59 GMT
ETag: "c64c8c524e7e2b6c4eb192c416f7e462"
Cache-Control: public, max-age=900, stale-while-revalidate=3600
Content-Encoding: gzip
Content-Type: text/javascript
Server: AmazonS3
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 09:54:42 GMT
Via: 1.1 varnish
Age: 215
X-Served-By: cache-bma1651-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1662458082.088686,VS0,VE1
s.ntv.io/serve/load.js
200 OK 139 kB IP
File type Unicode text, UTF-8 text, with very long lines (65442)
Size 139 kB (139382 bytes)
Hash 043263a289224254722e781a3f245e7a
b9734f37b7152d45ac1885ead6894f8cf3499f4c
7e0280f6781dd555b6ebe375c994918c9656562c20351562df7d3a64d0a1bed2
GET /serve/load.js HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: /NQMGAxQey2PAsCF/bSHagMc417Y2/JKTLl+gHzXZbTwe4TcaRr+74N4ombaRjqrYqiLTYpQXlw=
x-amz-request-id: ZZ2JEJEZKR6386E2
Last-Modified: Fri, 02 Sep 2022 14:27:37 GMT
ETag: "9624bb208d35ae785b11a575256bbe77"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 06 Sep 2022 09:54:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
confiant-integrations.global.ssl.fastly.net/gptprebidnative/202208101343/wrap.js
200 OK 66 kB URL HTTP/1.1 confiant-integrations.global.ssl.fastly.net/gptprebidnative/202208101343/wrap.js
IP
File type Unicode text, UTF-8 text, with very long lines (21744)
Hash 6dc02234ec68d77d35e4d6a9fe8b646f
06d3ffbba4b862df13b739a2fc92c9ec14a4af8c
f05a852b02ea02527859e6f232ab8ce7f6dbf5b1a41349d4350b7d7d10d84919
GET /gptprebidnative/202208101343/wrap.js HTTP/1.1
Host: confiant-integrations.global.ssl.fastly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 66315
x-amz-id-2: WzhlAso06ZgwQNhMkuRMHWuslMMKV1XS3uqOtvWJX9+I/IpsgnIzIGw8h/xmEmJqkCCby26Rrzw=
x-amz-request-id: VTVERK5YXQCVYNR9
Last-Modified: Thu, 11 Aug 2022 17:11:38 GMT
ETag: "6dc02234ec68d77d35e4d6a9fe8b646f"
Cache-Control: public, max-age=900, stale-while-revalidate=3600
Content-Encoding: gzip
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 09:54:42 GMT
Via: 1.1 varnish
Age: 469674
X-Served-By: cache-bma1651-BMA
X-Cache: HIT
X-Cache-Hits: 1199682
X-Timer: S1662458082.168111,VS0,VE0
js-sec.indexww.com/ht/p/185522-243508426708752.js
200 OK 13 kB URL HTTP/1.1 js-sec.indexww.com/ht/p/185522-243508426708752.js
IP
File type ASCII text, with very long lines (32000)
Hash de9fe81ed0e3406699f73f19a7102b71
ae5e4bb47b39141e8998430c23caecc8b960a2d6
b01ea196974381a8a936d5f4807a61e5096e0a51485edb34963890fbe2c3a002
GET /ht/p/185522-243508426708752.js HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 06 Sep 2022 09:51:47 GMT
ETag: "da13f7-9890-5e7ff25084fb4"
Accept-Ranges: bytes
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3462
Expires: Tue, 06 Sep 2022 10:52:24 GMT
Date: Tue, 06 Sep 2022 09:54:42 GMT
Content-Length: 13164
Connection: keep-alive
check.analytics.rlcdn.com/check/1405
200 OK 25 B URL HTTP/2 check.analytics.rlcdn.com/check/1405
IP
File type JSON data\012- , ASCII text
Hash 8860cedab39121e177a76650d5acad7a
a198c7f3ac02e3419931f24c397c1e4a99fd72b7
8a9ba7bbc88ec23d81a2d63845638a3b6603de473261872f301803cef84ef335
GET /check/1405 HTTP/1.1
Host: check.analytics.rlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 25
date: Tue, 06 Sep 2022 09:54:42 GMT
x-amzn-requestid: 26c8d946-7297-493a-8a92-28e1f48a883d
access-control-allow-origin: *
x-amz-apigw-id: YCDTYGdLDoEF5Pw=
x-amzn-trace-id: Root=1-631718e2-33bdbdf14c94c20d51aa6f85
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3zEh-BJIFScBtWKuI15i8te1eMD1pEmQs9YuQlWscBkD3YVZTv47xQ==
X-Firefox-Spdy: h2
sponsorship-lines.zeustechnology.com/mcclatchy/thenewstribune/lineItems.json
200 OK 96 B URL HTTP/2 sponsorship-lines.zeustechnology.com/mcclatchy/thenewstribune/lineItems.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 72e9abcb921cea396f85433c49168b1c
42eb166b76009c6f22ace047569828ce15613305
c44ee018a0d75c78cb7ed6f803dd455194b055131a0c20423e87905c39f7e8cf
GET /mcclatchy/thenewstribune/lineItems.json HTTP/1.1
Host: sponsorship-lines.zeustechnology.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 96
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT
last-modified: Fri, 02 Sep 2022 22:00:13 GMT
x-amz-version-id: 3RWo18wxhglqThH0hjh8JYCQMy28JgcN
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 09:54:42 GMT
cache-control: public, max-age=3600, immutable
etag: "72e9abcb921cea396f85433c49168b1c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2kyHYsC_bf7EQj9zSFQUwR1uwd5tYFjR5MAzDLY_PBmXRV01cIxgSQ==
age: 10
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2e011558d61bec96e09efdacf0456dad
3dd5eca7a2a41e111c38bbcb5d18c2d00fe71174
347c100f5aecf1bbbaf4f9e3e076716a55cba37df3ef3c905e2b1733faff5c34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2704
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:42 GMT
Last-Modified: Tue, 06 Sep 2022 09:09:38 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
www.everestjs.net/static/le/last-event-tag-latest.min.js
200 OK 2.7 kB URL HTTP/1.1 www.everestjs.net/static/le/last-event-tag-latest.min.js
IP
File type ASCII text, with very long lines (7027)
Hash c3a66e6f50b032dadb8cad25dc32492d
e80710faee38cff62d92bbc5d1f06606e9024a88
1c3799c14636066f1c903442bf67a335695dc440273e614daab754edbbf0828c
GET /static/le/last-event-tag-latest.min.js HTTP/1.1
Host: www.everestjs.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: abqLVqq3bOgjalN22yjSEbxcTyADzWJYhqt/70OMcv5HojTmGAXFd0RqmIUG7ejKBGcRWsLLXpc=
x-amz-request-id: 0397MTXPWTF197M2
Last-Modified: Wed, 16 Jun 2021 15:18:41 GMT
ETag: "d5991c18a0042eb33f92c6b5b44ffe8d"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 06 Sep 2022 09:54:42 GMT
Content-Length: 2663
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/fYfmQcvWVoM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/fYfmQcvWVoM
IP
Hash 3b68c039bb4d38ceb0f2db96e521b124
6aba58d6b3bbcf24044510902685ad9645bf3ea5
66a0a4486624f95427547c97ae70e4eb4826f79536e713a300f460a5247d98f9
POST /s/gts1d4/fYfmQcvWVoM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sb.scorecardresearch.com/b?c1=2&c2=6035363&cs_it=b3&cv=3.8.0.210223&ns__t=1662458076983&ns_c=UTF-8&ns_if=1&c7=https%3A%2F%2Fwww.thenewstribune.com%2F&c8=Tacoma%20WA%20Breaking%20News%2C%20Crime%20%26%20More%20%7C%20Tacoma%20News%20Tribune&c9=
204 No Content 0 B URL HTTP/2 sb.scorecardresearch.com/b?c1=2&c2=6035363&cs_it=b3&cv=3.8.0.210223&ns__t=1662458076983&ns_c=UTF-8&ns_if=1&c7=https%3A%2F%2Fwww.thenewstribune.com%2F&c8=Tacoma%20WA%20Breaking%20News%2C%20Crime%20%26%20More%20%7C%20Tacoma%20News%20Tribune&c9=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b?c1=2&c2=6035363&cs_it=b3&cv=3.8.0.210223&ns__t=1662458076983&ns_c=UTF-8&ns_if=1&c7=https%3A%2F%2Fwww.thenewstribune.com%2F&c8=Tacoma%20WA%20Breaking%20News%2C%20Crime%20%26%20More%20%7C%20Tacoma%20News%20Tribune&c9= HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 06 Sep 2022 09:54:42 GMT
set-cookie: UID=1E3f612195cddf0ec19070c1662458082; domain=.scorecardresearch.com; path=/; max-age=62208000
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fMXu1_5SdpF0eoX90jGcdTSkpPh6cD9768uW_xaCsDhz9-cRE5uJzw==
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Sans:400,700|Noto+Serif:400,700&display=swap&subset=latin-ext
200 OK 2.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Noto+Sans:400,700|Noto+Serif:400,700&display=swap&subset=latin-ext
IP
Hash 5f0804382bfc874bf947d1b21cc4d56a
f88f8accb4b66502ab5ab2eb1c781f1279906327
f919069fb7e885666e7fdd034d4200870c7c6e787b857155c0f175f250ab7324
GET /css?family=Noto+Sans:400,700|Noto+Serif:400,700&display=swap&subset=latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 09:54:41 GMT
date: Tue, 06 Sep 2022 09:54:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lasteventf-tm.everesttech.net/?_les_imsOrgId=3B6E35F15A82BBB00A495D91@AdobeOrg&_les_sdid=3C57B6180F3972C0-B4C6E8507AEAC3A2&_les_last_search_click=&_les_rsid=mccltallmcclatchy&_les_mid=66356523764492341210409454412545311053&_les_url=https%3A%2F%2Fwww.thenewstribune.com%2F
200 OK 0 B URL HTTP/2 lasteventf-tm.everesttech.net/?_les_imsOrgId=3B6E35F15A82BBB00A495D91@AdobeOrg&_les_sdid=3C57B6180F3972C0-B4C6E8507AEAC3A2&_les_last_search_click=&_les_rsid=mccltallmcclatchy&_les_mid=66356523764492341210409454412545311053&_les_url=https%3A%2F%2Fwww.thenewstribune.com%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?_les_imsOrgId=3B6E35F15A82BBB00A495D91@AdobeOrg&_les_sdid=3C57B6180F3972C0-B4C6E8507AEAC3A2&_les_last_search_click=&_les_rsid=mccltallmcclatchy&_les_mid=66356523764492341210409454412545311053&_les_url=https%3A%2F%2Fwww.thenewstribune.com%2F HTTP/1.1
Host: lasteventf-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:42 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458082.458056,VS0,VE0
content-type: text/plain
access-control-allow-credentials: true
access-control-allow-origin: https://www.thenewstribune.com
content-length: 0
X-Firefox-Spdy: h2
js.matheranalytics.com/static/ltm/ma12095/all/8/ml.br.js
200 OK 42 kB URL HTTP/2 js.matheranalytics.com/static/ltm/ma12095/all/8/ml.br.js
IP
File type ASCII text, with very long lines (32011)
Hash 014a97acdf06a1d13b98c864ad2adf46
0af995f87c0e3afbc71d110c6eb4e215c4ece71d
41b9578f713de3b71ed3749d4e45555ebc2b59217e34aaac3ed324a0a659ea87
GET /static/ltm/ma12095/all/8/ml.br.js HTTP/1.1
Host: js.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 42494
content-encoding: br
x-cache: HIT Wed, 02 Mar 2022 19:44:10 GMT
vary: Accept-Encoding
via: 1.1 google
date: Tue, 06 Sep 2022 03:26:16 GMT
age: 23306
last-modified: Wed, 02 Mar 2022 19:26:52 GMT
etag: "014a97acdf06a1d13b98c864ad2adf46"
content-type: application/x-javascript
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/fYfmQcvWVoM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/fYfmQcvWVoM
IP
Hash 3b68c039bb4d38ceb0f2db96e521b124
6aba58d6b3bbcf24044510902685ad9645bf3ea5
66a0a4486624f95427547c97ae70e4eb4826f79536e713a300f460a5247d98f9
POST /s/gts1d4/fYfmQcvWVoM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
match.adsrvr.org/track/rid?ttd_pid=casale&fmt=json&p=185522
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=casale&fmt=json&p=185522
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1e0e37b8861b2793628540185bae7eb6
0f4f36a77a32bb8d9a6b202cab31569138ac8e7c
5784c6b1616eceed2c6b75b91e111d50cd4073c7e90d2e8a1e4d0abc23c67930
GET /track/rid?ttd_pid=casale&fmt=json&p=185522 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:42 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Thu, 06 Oct 2022 09:54:42 GMT
vary: Origin
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 57e70a120d55be321b21969521a0a101
ca7ab53296c523ed183524190aa2b9f54e45e808
e6d79640180f4b73239add96c170730bad9b240ee96e91a00afa448ff26f3549
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 01:42:54 GMT
Expires: Sun, 11 Sep 2022 01:42:53 GMT
Etag: "ca7ab53296c523ed183524190aa2b9f54e45e808"
Cache-Control: max-age=401890,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746653268e5d1c12-OSL
api.rlcdn.com/api/identity?pid=2&rt=envelope
451 Unavailable For Legal Reasons 0 B URL HTTP/2 api.rlcdn.com/api/identity?pid=2&rt=envelope
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/identity?pid=2&rt=envelope HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 451 Unavailable For Legal Reasons
access-control-allow-credentials: true
access-control-allow-headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: https://www.thenewstribune.com
date: Tue, 06 Sep 2022 09:54:42 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
media.thenewstribune.com/static/images/logos/tacoma-puyallup-logo-color-2021-08.svg
200 OK 11 kB URL HTTP/2 media.thenewstribune.com/static/images/logos/tacoma-puyallup-logo-color-2021-08.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0b3c8f532e5a2549ff04722dca3b97a9
b597140ce51c2503ad0640e4160ff0f9add2d049
855b336540e9460f01d5d358d35d24748cbd20db695e0d41f6945cdbef07b7e8
GET /static/images/logos/tacoma-puyallup-logo-color-2021-08.svg HTTP/1.1
Host: media.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Thu, 02 Sep 2021 18:53:17 GMT
etag: "2ba5-5cb07b2251042"
accept-ranges: bytes
content-length: 11173
vary: Origin
content-type: image/svg+xml
date: Tue, 06 Sep 2022 09:54:42 GMT
x-n: S
X-Firefox-Spdy: h2
media.thenewstribune.com/static/images/logos/tacoma-gateway-logo-color-horizontal-2021-08.svg
200 OK 8.1 kB URL HTTP/2 media.thenewstribune.com/static/images/logos/tacoma-gateway-logo-color-horizontal-2021-08.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 883647e9d5acf3aee9f1333a6076bc07
0d910bd87bfc5a0f5549743234645566f7a5e780
a4561da777935fa07b41fbb1e3ade995d20c92560e803303f6f7e0d8fec27ff6
GET /static/images/logos/tacoma-gateway-logo-color-horizontal-2021-08.svg HTTP/1.1
Host: media.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Thu, 02 Sep 2021 18:53:17 GMT
etag: "1f97-5cb07b224fe46"
accept-ranges: bytes
content-length: 8087
vary: Origin
content-type: image/svg+xml
date: Tue, 06 Sep 2022 09:54:42 GMT
x-n: S
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/pdp.gif?k=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsImRvbUludGVyYWN0aXZlIjoyNTA0LCJyZXF1ZXN0U3RhcnQiOjE3NjJ9
200 OK 42 B URL HTTP/2 www.thenewstribune.com/olsoibyzn-/pdp.gif?k=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsImRvbUludGVyYWN0aXZlIjoyNTA0LCJyZXF1ZXN0U3RhcnQiOjE3NjJ9
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /olsoibyzn-/pdp.gif?k=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsImRvbUludGVyYWN0aXZlIjoyNTA0LCJyZXF1ZXN0U3RhcnQiOjE3NjJ9 HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
etag: "2a-5e79f4c089340"
content-length: 42
surrogate-control: varnish=ESI/2.1
content-type: image/gif
x-varnish: 754399517, 731722397 734334823
x-mi-in-market: 0
server: MI
mi-cache-age: 1171
mi-cache: HIT
cache-control: max-age=604793
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 57e70a120d55be321b21969521a0a101
ca7ab53296c523ed183524190aa2b9f54e45e808
e6d79640180f4b73239add96c170730bad9b240ee96e91a00afa448ff26f3549
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 01:42:54 GMT
Expires: Sun, 11 Sep 2022 01:42:53 GMT
Etag: "ca7ab53296c523ed183524190aa2b9f54e45e808"
Cache-Control: max-age=401890,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466532838141c12-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d5c8898519387c065438d7cba6e20507
b152cbf031c3071d6cf0dbe6cc0e787137bec0fa
360695a96cb472733471480480e50424b8b4688ec6371bf0d5c59a3348eb7691
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:42 GMT
Last-Modified: Tue, 06 Sep 2022 09:02:18 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tP9KziZ4pvNHzYX7VnGwMnq2m0oCdlQMlSMXx34bZECECuUhgVMPlA==
Age: 3144
www.thenewstribune.com/wps/build/images/thenewstribune/favicon-196.png
200 OK 1.1 kB URL HTTP/2 www.thenewstribune.com/wps/build/images/thenewstribune/favicon-196.png
IP
File type PNG image data, 196 x 196, 8-bit colormap, non-interlaced\012- data
Hash d16330dfeb1251e8891c058ba2575a03
4d36f14fbb26f56c16106b372de6ee00c26a8b1c
df966430d36d0f9a0c25cb72a40a5f24a4c82d3eebb4a9f51ad563d328487eaf
GET /wps/build/images/thenewstribune/favicon-196.png HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Cookie: adcloud={%22_les_v%22:%22y%2Cthenewstribune.com%2C1662459877%22}; _sp_id.757a=402e3b23a3d16010.1662458077.1.1662458077.1662458077; _sp_ses.757a=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:35:35 GMT
etag: W/"450-182da5d7858"
content-type: image/png;charset=ISO-8859-1
content-length: 1104
surrogate-control: varnish=ESI/2.1
x-varnish: 175733363, 590712833 513905409
x-mi-in-market: 0
server: MI
mi-cache-age: 113747
mi-cache: HIT
cache-control: max-age=214048
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js
200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js
IP
File type HTML document, ASCII text, with very long lines (579)
Size 158 kB (158056 bytes)
Hash d63a69f898e1d00cfc7c871744ded8c4
e166540eccb571c95c8c1135c2168cf5df306991
ed7892ca1498d6dfc0ff8b354ab8c409eed81b1fa77b427467815d0c7f45021c
GET /recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 21:31:14 GMT
expires: Sat, 02 Sep 2023 21:31:14 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:40:58 GMT
content-type: text/javascript
age: 303808
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.thenewstribune.com/wps/build/images/thenewstribune/favicon-16.png
200 OK 1.6 kB URL HTTP/2 www.thenewstribune.com/wps/build/images/thenewstribune/favicon-16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data
Hash 66cdc2f24cbee5d9b4b268520437a69a
045f7c7a31c61821e62234cb5c23cac201693a42
0c24bfdc7ea3654b6d20384b97578866cd10c4a1d61a706e4eaa0cc5bc79e9c0
GET /wps/build/images/thenewstribune/favicon-16.png HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Cookie: adcloud={%22_les_v%22:%22y%2Cthenewstribune.com%2C1662459877%22}; _sp_id.757a=402e3b23a3d16010.1662458077.1.1662458077.1662458077; _sp_ses.757a=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: BlackList
last-modified: Fri, 26 Aug 2022 13:35:35 GMT
etag: W/"617-182da5d7858"
content-type: image/png;charset=ISO-8859-1
content-length: 1559
surrogate-control: varnish=ESI/2.1
x-varnish: 203847331, 680442964 663595338
x-mi-in-market: 0
server: MI
mi-cache-age: 57487
mi-cache: HIT
cache-control: max-age=491095
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a51bd2f85bf9993a6f1970e60b224441
4ae2a55a4fa8ec9a0e46bebf2b22b46c190dff19
b42c6dec54520f73c994b89412f5c7da46547e9f30f7f2445ff992958c21442a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:42 GMT
Last-Modified: Tue, 06 Sep 2022 09:06:40 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mQcsuFr--VPQmMKuHS4wbffCjRBPN4YxFEiOHL310eKX10AfseQvkQ==
Age: 2882
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sync-tm.everesttech.net/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D88%26external_user_id%3D%24%7BTM_USER_ID%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D88%26external_user_id%3D%24%7BTM_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D88%26external_user_id%3D%24%7BTM_USER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~YxcY4gAL361AEQAK; Path=/; Domain=.everesttech.net; Expires=Wed, 06-Sep-2023 09:54:42 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D88%26external_user_id%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL361AEQAK
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:42 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.842116,VS0,VE91
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA%3D%26piggybackCookie%3D%24%7BUSER_ID%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA%3D%26piggybackCookie%3D%24%7BUSER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/b9pj45k4?redir=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA%3D%26piggybackCookie%3D%24%7BUSER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~YxcY4gAFJj7AMwBN; Path=/; Domain=.everesttech.net; Expires=Wed, 06-Sep-2023 09:54:42 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/b9pj45k4?redir=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA%3D%26piggybackCookie%3D%24%7BUSER_ID%7D&_test=YxcY4gAFJj7AMwBN
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:42 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.842043,VS0,VE92
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
idx.liadm.com/idex/ie/any
200 OK 54 B URL HTTP/2 idx.liadm.com/idex/ie/any
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b23ddef48023f8a2678b7c8258fe1ccf
fabd0ee147c2d189f54f58f101f766e8086d6ce5
34e62f363a314cf070d013b4e4fd08052d976eb4160a2e9d25f31849691c0d86
GET /idex/ie/any HTTP/1.1
Host: idx.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:42 GMT
content-type: application/json
content-length: 54
trace-id: 5251a3ca3a02c8c1
vary: Origin
set-cookie: lidid=d2541dcd-869e-4d47-98ed-fdb75e855e26; Max-Age=63072000; Expires=Thu, 05 Sep 2024 09:54:42 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
request-time: 2
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
dyv1bugovvq1g.cloudfront.net/11/www.thenewstribune.com/.js
200 OK 324 B URL HTTP/2 dyv1bugovvq1g.cloudfront.net/11/www.thenewstribune.com/.js
IP
File type ASCII text, with very long lines (1050), with no line terminators
Hash 614b8390019f8fc914e13442ce44a720
c62dae6a0b398eefe62052b97ddc4338b73ef50f
73199389fb725c6652843457db0dc9c06ecfd8b6a0d1fc58f37ffc0fa3bfa4cb
GET /11/www.thenewstribune.com/.js HTTP/1.1
Host: dyv1bugovvq1g.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 324
date: Tue, 06 Sep 2022 09:51:37 GMT
last-modified: Tue, 06 Sep 2022 09:51:32 GMT
etag: "614b8390019f8fc914e13442ce44a720"
cache-control: max-age=300
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -JZu0ceiHWcyORkLuO8Dw1QApEkX_zo6XFL7qVps7IQ1WGDtGSYeoQ==
age: 186
X-Firefox-Spdy: h2
sync-tm.everesttech.net/upi/pid/UH6TUt9n?redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D158%26code%3D%24%7BTM_USER_ID%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/UH6TUt9n?redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D158%26code%3D%24%7BTM_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/UH6TUt9n?redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D158%26code%3D%24%7BTM_USER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~YxcY4gAL4HhAEgAK; Path=/; Domain=.everesttech.net; Expires=Wed, 06-Sep-2023 09:54:42 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/UH6TUt9n?redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D158%26code%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL4HhAEgAK
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:42 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.842101,VS0,VE100
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sync-tm.everesttech.net/upi/pid/h0r58thg?redir=https%3A%2F%2Fsync.search.spotxchange.com%2Fpartner%3Fadv_id%3D6409%26uid%3D%24%7BUSER_ID%7D%26img%3D1
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/h0r58thg?redir=https%3A%2F%2Fsync.search.spotxchange.com%2Fpartner%3Fadv_id%3D6409%26uid%3D%24%7BUSER_ID%7D%26img%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/h0r58thg?redir=https%3A%2F%2Fsync.search.spotxchange.com%2Fpartner%3Fadv_id%3D6409%26uid%3D%24%7BUSER_ID%7D%26img%3D1 HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~YxcY4gAFJELAMgBN; Path=/; Domain=.everesttech.net; Expires=Wed, 06-Sep-2023 09:54:42 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/h0r58thg?redir=https%3A%2F%2Fsync.search.spotxchange.com%2Fpartner%3Fadv_id%3D6409%26uid%3D%24%7BUSER_ID%7D%26img%3D1&_test=YxcY4gAFJELAMgBN
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:42 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.842015,VS0,VE100
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
sync-tm.everesttech.net/upi/pid/r7ifn0SL?redir=https%3A%2F%2Fwww.facebook.com%2Ffr%2Fb.php%3Fp%3D1531105787105294%26e%3D%24%7BTM_USER_ID%7D%26t%3D2592000%26o%3D0
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/r7ifn0SL?redir=https%3A%2F%2Fwww.facebook.com%2Ffr%2Fb.php%3Fp%3D1531105787105294%26e%3D%24%7BTM_USER_ID%7D%26t%3D2592000%26o%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/r7ifn0SL?redir=https%3A%2F%2Fwww.facebook.com%2Ffr%2Fb.php%3Fp%3D1531105787105294%26e%3D%24%7BTM_USER_ID%7D%26t%3D2592000%26o%3D0 HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~YxcY4gAFJfPANQBN; Path=/; Domain=.everesttech.net; Expires=Wed, 06-Sep-2023 09:54:42 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/r7ifn0SL?redir=https%3A%2F%2Fwww.facebook.com%2Ffr%2Fb.php%3Fp%3D1531105787105294%26e%3D%24%7BTM_USER_ID%7D%26t%3D2592000%26o%3D0&_test=YxcY4gAFJfPANQBN
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:42 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.841988,VS0,VE100
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
ib.3lift.com/sync.js
200 OK 275 B IP
File type ASCII text, with no line terminators
Hash c81a3e648e8b1b2772b129cc4f0e4955
d459593eb8a04c709593d63a80846158f9079e75
c815be0139a92202ff8f262cc335f6ae103594bb1d92c1c479ed604adf384a16
GET /sync.js HTTP/1.1
Host: ib.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 275
date: Tue, 06 Sep 2022 09:45:17 GMT
cache-control: public, max-age=900
last-modified: Tue, 06 Sep 2022 09:45:17 GMT
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6d4ipeXih8xxbGHQ7QT91Tj9OZqZUseYUwARxqHytwits5uH63iMSw==
age: 565
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash fc719f4ea82948794b8beef40df2b7f4
c66ad9cac98a9b61d555f9039fd082588315d6c3
4b8a3cc78e3f596f500205ddf88a11aa7a76c1a21f718d921b323133c5e5e75f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3983
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:42 GMT
Last-Modified: Tue, 06 Sep 2022 08:48:19 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NjY4NTY3OTIzMTA4MTc5MjM4MjAzOTE5NDA1OTUzNDQ5NDY5Mzg=
302 Found 378 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NjY4NTY3OTIzMTA4MTc5MjM4MjAzOTE5NDA1OTUzNDQ5NDY5Mzg=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash bb1948a2b7f8e8cdb3ed5dfeacdf8ec8
85328d8465be838baff100fd32afa3b2772ee35d
388845125cbd3f5c063d8e2c2ec67dc4e50a24bf87cb88489de73db71da4eaab
GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NjY4NTY3OTIzMTA4MTc5MjM4MjAzOTE5NDA1OTUzNDQ5NDY5Mzg= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NjY4NTY3OTIzMTA4MTc5MjM4MjAzOTE5NDA1OTUzNDQ5NDY5Mzg=&google_tc=
date: Tue, 06 Sep 2022 09:54:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 378
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Sep-2022 10:09:42 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 2ae26f84a72db17bb80efc0fd3252b02
3f1d5bec612f998ea419c34d5efbe23f2af0ac1c
1427c058ad526c2b3074c3984b5d615bd78ffe6156612228ad5063845547564a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2557
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Last-Modified: Tue, 06 Sep 2022 09:12:06 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 314
geo.privacymanager.io/
200 OK 30 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c33fb7727ce1f2c66f8d6c6cedbb12b1
7273ce7651fd12a64db27321ad456dfc054d4d19
21b196f5566f8ec52ccd845bab462d53d96c014ed7a45e45f8a0d5551b8afdf7
GET / HTTP/1.1
Host: geo.privacymanager.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 30
date: Tue, 06 Sep 2022 01:22:38 GMT
x-amzn-requestid: 01988b28-6e6b-42b9-89c8-55eb17022c1f
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,X-Amz-Date,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: YA4SwEWSDoEFu2g=
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
x-amzn-trace-id: Root=1-6316a0de-7aa15dfa4e360f5f5e9c792b;Sampled=0
via: 1.1 8af5231b014ab5e8c35000dd4cf4b68c.cloudfront.net (CloudFront), 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA56-P3, OSL50-C1
x-amz-cf-id: 2t5V1Ocb4EqoPqjFT_ZCvxVWqCQhazZJLpW6ntTBW9s3j8-iKA7GVw==
age: 30725
X-Firefox-Spdy: h2
www.i.matheranalytics.com/i?e=pv&page=ml&dnt=1&sec=Homepage&prem=0&ptype=Home&tv=js-3.0.148&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=link&res=1280x1024&cd=24&cookie=1&f_es6=1&f_gears=2&tvltm=8&tvcfg=all&tid=10ebcd54-5b9e-4ebd-ae6f-c6a966ce38d6&pid=1b8540f8-03ac-49d5-adea-17ba2bea4063&dtm=1662458077152&qnm=_matherq&visible=1&tabid=6b59e8ec-635f-4a8f-a004-fed64f277c26&url=https%3A%2F%2Fwww.thenewstribune.com%2F&vp=0x0&ds=0x0&tofa=1662458077&vid=1&lvidt=1662458077&duid=402e3b23a3d16010&fp=1326250463&cid=ma12095&mrk=74930801&cx=eyJjYXRlZ29yeSI6eyJjYXRlZ29yaWVzIjpbWyJfSG9tZVBhZ2V8fHx8Il1dfSwicGVyZiI6eyJzdGFydCI6IjE2NjI0NTgwNzY3NTkiLCJyZWRpckNudCI6IjAiLCJuYXZUeXBlIjoibGluayIsImZldGNoUyI6IjAiLCJkb21haW5TIjoiMCIsImRvbWFpbkUiOiIwIiwiY29ublMiOiIwIiwiY29ubkUiOiIwIiwic3NsUyI6IjAiLCJyZXF1UyI6IjAiLCJyZXNwUyI6IjAiLCJyZXNwRSI6IjAiLCJkb21JbnRlciI6IjMiLCJkb21Mb2FkUyI6IjU4IiwiZG9tTG9hZEUiOiI1OCJ9fQ
200 OK 43 B URL HTTP/1.1 www.i.matheranalytics.com/i?e=pv&page=ml&dnt=1&sec=Homepage&prem=0&ptype=Home&tv=js-3.0.148&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=link&res=1280x1024&cd=24&cookie=1&f_es6=1&f_gears=2&tvltm=8&tvcfg=all&tid=10ebcd54-5b9e-4ebd-ae6f-c6a966ce38d6&pid=1b8540f8-03ac-49d5-adea-17ba2bea4063&dtm=1662458077152&qnm=_matherq&visible=1&tabid=6b59e8ec-635f-4a8f-a004-fed64f277c26&url=https%3A%2F%2Fwww.thenewstribune.com%2F&vp=0x0&ds=0x0&tofa=1662458077&vid=1&lvidt=1662458077&duid=402e3b23a3d16010&fp=1326250463&cid=ma12095&mrk=74930801&cx=eyJjYXRlZ29yeSI6eyJjYXRlZ29yaWVzIjpbWyJfSG9tZVBhZ2V8fHx8Il1dfSwicGVyZiI6eyJzdGFydCI6IjE2NjI0NTgwNzY3NTkiLCJyZWRpckNudCI6IjAiLCJuYXZUeXBlIjoibGluayIsImZldGNoUyI6IjAiLCJkb21haW5TIjoiMCIsImRvbWFpbkUiOiIwIiwiY29ublMiOiIwIiwiY29ubkUiOiIwIiwic3NsUyI6IjAiLCJyZXF1UyI6IjAiLCJyZXNwUyI6IjAiLCJyZXNwRSI6IjAiLCJkb21JbnRlciI6IjMiLCJkb21Mb2FkUyI6IjU4IiwiZG9tTG9hZEUiOiI1OCJ9fQ
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 24290d55bbf8c5c8712543cf56ebe357
90d0084e78e359a9dbc746642d836df93a0ca697
d6fbd6d46b0a1be6a3cdc49f712f83d661805a42fc37993340e2cc4493819adc
GET /i?e=pv&page=ml&dnt=1&sec=Homepage&prem=0&ptype=Home&tv=js-3.0.148&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=link&res=1280x1024&cd=24&cookie=1&f_es6=1&f_gears=2&tvltm=8&tvcfg=all&tid=10ebcd54-5b9e-4ebd-ae6f-c6a966ce38d6&pid=1b8540f8-03ac-49d5-adea-17ba2bea4063&dtm=1662458077152&qnm=_matherq&visible=1&tabid=6b59e8ec-635f-4a8f-a004-fed64f277c26&url=https%3A%2F%2Fwww.thenewstribune.com%2F&vp=0x0&ds=0x0&tofa=1662458077&vid=1&lvidt=1662458077&duid=402e3b23a3d16010&fp=1326250463&cid=ma12095&mrk=74930801&cx=eyJjYXRlZ29yeSI6eyJjYXRlZ29yaWVzIjpbWyJfSG9tZVBhZ2V8fHx8Il1dfSwicGVyZiI6eyJzdGFydCI6IjE2NjI0NTgwNzY3NTkiLCJyZWRpckNudCI6IjAiLCJuYXZUeXBlIjoibGluayIsImZldGNoUyI6IjAiLCJkb21haW5TIjoiMCIsImRvbWFpbkUiOiIwIiwiY29ublMiOiIwIiwiY29ubkUiOiIwIiwic3NsUyI6IjAiLCJyZXF1UyI6IjAiLCJyZXNwUyI6IjAiLCJyZXNwRSI6IjAiLCJkb21JbnRlciI6IjMiLCJkb21Mb2FkUyI6IjU4IiwiZG9tTG9hZEUiOiI1OCJ9fQ HTTP/1.1
Host: www.i.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 06 Sep 2022 09:54:42 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Content-Length: 43
Connection: keep-alive
image8.pubmatic.com/AdServer/ImgSync?p=161044&mpc=4&fp=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=161044&mpc=4&fp=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=161044&mpc=4&fp=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:42 GMT
content-length: 0
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (44995)
Hash fba8efa7c280577a5c1a1969fd66d5fa
c85e3ddb12f67b7bd8141b7d84f25c2d367ae9c4
517b6a8383e09ba2b78d681eb6460d51210652806b460accc548b9565e66faa2
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 28495
date: Tue, 06 Sep 2022 09:54:43 GMT
expires: Tue, 06 Sep 2022 09:54:43 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1325 / 736 of 1000 / last-modified: 1662453681"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sync-tm.everesttech.net/upi/pid/5w3jqr4k?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dg8f47s39e399f3fe%26google_push%26google_sc%26google_hm%3D%24%7BTM_USER_ID_BASE64ENC_URLENC%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/5w3jqr4k?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dg8f47s39e399f3fe%26google_push%26google_sc%26google_hm%3D%24%7BTM_USER_ID_BASE64ENC_URLENC%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/5w3jqr4k?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dg8f47s39e399f3fe%26google_push%26google_sc%26google_hm%3D%24%7BTM_USER_ID_BASE64ENC_URLENC%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~YxcY4gAL4DdDbQAK; Path=/; Domain=.everesttech.net; Expires=Wed, 06-Sep-2023 09:54:42 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/5w3jqr4k?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dg8f47s39e399f3fe%26google_push%26google_sc%26google_hm%3D%24%7BTM_USER_ID_BASE64ENC_URLENC%7D&_test=YxcY4gAL4DdDbQAK
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.842172,VS0,VE181
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~YxcY4gAL4DdDbwAK; Path=/; Domain=.everesttech.net; Expires=Wed, 06-Sep-2023 09:54:42 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL4DdDbwAK
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.842079,VS0,VE182
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 128 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2831)
Size 128 kB (128229 bytes)
Hash 22b1dc78ca782813e1a8fa729e4fa08a
834394b7f5c9dcfebd0a04a261cd44225e159187
308bb37c1a716e60a150024b6ce5d9e09492f890a63215dc0c23ac954b8abfe3
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 128229
date: Tue, 06 Sep 2022 09:54:42 GMT
expires: Tue, 06 Sep 2022 09:54:42 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sync-tm.everesttech.net/upi/pid/btu4jd3a?redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D7941%26nid%3D2243%26put%3D%24%7BUSER_ID%7D%26expires%3D90
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/btu4jd3a?redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D7941%26nid%3D2243%26put%3D%24%7BUSER_ID%7D%26expires%3D90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/btu4jd3a?redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D7941%26nid%3D2243%26put%3D%24%7BUSER_ID%7D%26expires%3D90 HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~YxcY4gAL3-RDfAAK; Path=/; Domain=.everesttech.net; Expires=Wed, 06-Sep-2023 09:54:42 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/btu4jd3a?redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D7941%26nid%3D2243%26put%3D%24%7BUSER_ID%7D%26expires%3D90&_test=YxcY4gAL3-RDfAAK
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.842138,VS0,VE184
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 65d0efac0f0b6efdfc920edd79a45945
a2306c212a64d0010bcd365f280bfe6b22e18ed5
2907a6afba8ee0f20df60dc10844402910971842e59bc460cd6922e22579e8dc
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:42 GMT
Last-Modified: Tue, 06 Sep 2022 09:09:25 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nzYP_oaXdQezPwk0oWw8kXiJFiRC97A98aNMbbIxhUZhjpL3CdSBxQ==
Age: 2718
sync-tm.everesttech.net/ct/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D88%26external_user_id%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL361AEQAK
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D88%26external_user_id%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL361AEQAK
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D88%26external_user_id%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL361AEQAK HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
age: 3070
x-served-by: cache-bma1654-BMA
x-cache: HIT
x-cache-hits: 6583
x-timer: S1662458083.035967,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
cdn.parsely.com/keys/thenewstribune.com/p.js
200 OK 24 kB URL HTTP/2 cdn.parsely.com/keys/thenewstribune.com/p.js
IP
Hash e2e2b17cb08ff7ca800cccc00c8d4d27
792c59421cf3d15262b6f3f763fb4698c4ccd4e0
24d21c4b9927d010c5ed2cab135dc6bd490445da9d65fc9d4798896ac35420db
GET /keys/thenewstribune.com/p.js HTTP/1.1
Host: cdn.parsely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Wed, 16 Feb 2022 18:59:58 GMT
pragma: public
content-encoding: gzip
date: Tue, 06 Sep 2022 00:40:32 GMT
expires: Wed, 07 Sep 2022 00:34:14 GMT
cache-control: max-age=86400, public
etag: W/"620d49ae-1070e"
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7zYWINGY3DqaQl-yMEVg4PaqZ9as_zAB-ZNnh9hAHflq8ObZWYP7qg==
age: 33628
X-Firefox-Spdy: h2
sync-tm.everesttech.net/ct/upi/pid/UH6TUt9n?redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D158%26code%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL4HhAEgAK
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/UH6TUt9n?redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D158%26code%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL4HhAEgAK
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/UH6TUt9n?redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D158%26code%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL4HhAEgAK HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
age: 3070
x-served-by: cache-bma1654-BMA
x-cache: HIT
x-cache-hits: 6585
x-timer: S1662458083.036376,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
sync-tm.everesttech.net/ct/upi/pid/h0r58thg?redir=https%3A%2F%2Fsync.search.spotxchange.com%2Fpartner%3Fadv_id%3D6409%26uid%3D%24%7BUSER_ID%7D%26img%3D1&_test=YxcY4gAFJELAMgBN
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/h0r58thg?redir=https%3A%2F%2Fsync.search.spotxchange.com%2Fpartner%3Fadv_id%3D6409%26uid%3D%24%7BUSER_ID%7D%26img%3D1&_test=YxcY4gAFJELAMgBN
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/h0r58thg?redir=https%3A%2F%2Fsync.search.spotxchange.com%2Fpartner%3Fadv_id%3D6409%26uid%3D%24%7BUSER_ID%7D%26img%3D1&_test=YxcY4gAFJELAMgBN HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
age: 3070
x-served-by: cache-bma1654-BMA
x-cache: HIT
x-cache-hits: 6586
x-timer: S1662458083.057592,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 19a966df2e10910a1cf338ecbaed8590
df2bcfd8be2f2768ad4ef6bbea08981cd66870e9
01c2458bb64444abff4f1711b83a03bae444f3292087df9149091cbd4db7e1a9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:43 GMT
Last-Modified: Tue, 06 Sep 2022 08:06:03 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jPI1HfpDuimicqvaw7PKKFMNc1v-9aEGufU90LpUn7VWUcetw5Kn5g==
Age: 6520
cm.everesttech.net/cm/dd?d_uuid=66856792310817923820391940595344946938
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=66856792310817923820391940595344946938
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=66856792310817923820391940595344946938 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 06 Sep 2022 09:54:43 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~YxcY4wAAAEiCNQOV; Domain=.everesttech.net; Expires=Wed, 06-Sep-2023 09:54:43 GMT; Path=/
everest_session_v2=YxcY4wAAAEiCNgOV; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=YxcY4wAAAEiCNQOV
Server: AMO-cookiemap/1.1
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.thenewstribune.com&pubid=10f892c4-b76d-4f37-b1fd-0ae5d74780b5
200 OK 845 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.thenewstribune.com&pubid=10f892c4-b76d-4f37-b1fd-0ae5d74780b5
IP
File type JSON data\012- , ASCII text, with very long lines (845), with no line terminators
Hash f22f2d96607d060ab7907bfe670bd922
371b4451a1bbb9b07e54dac30dce1ad95e7d2af0
3614f222b63a8a8b03111976b2bc575ad4d3ca3cabb6a52e26767aefd6c33dfd
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.thenewstribune.com&pubid=10f892c4-b76d-4f37-b1fd-0ae5d74780b5 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 845
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Tue, 06 Sep 2022 05:56:17 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: x0R4HOrokCR97dZIMq1_zjni1imAxxducVzJaA1HYLsXiCXKmHTYYg==
age: 14305
X-Firefox-Spdy: h2
sync-tm.everesttech.net/ct/upi/pid/r7ifn0SL?redir=https%3A%2F%2Fwww.facebook.com%2Ffr%2Fb.php%3Fp%3D1531105787105294%26e%3D%24%7BTM_USER_ID%7D%26t%3D2592000%26o%3D0&_test=YxcY4gAFJfPANQBN
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/r7ifn0SL?redir=https%3A%2F%2Fwww.facebook.com%2Ffr%2Fb.php%3Fp%3D1531105787105294%26e%3D%24%7BTM_USER_ID%7D%26t%3D2592000%26o%3D0&_test=YxcY4gAFJfPANQBN
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/r7ifn0SL?redir=https%3A%2F%2Fwww.facebook.com%2Ffr%2Fb.php%3Fp%3D1531105787105294%26e%3D%24%7BTM_USER_ID%7D%26t%3D2592000%26o%3D0&_test=YxcY4gAFJfPANQBN HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
age: 3070
x-served-by: cache-bma1654-BMA
x-cache: HIT
x-cache-hits: 6587
x-timer: S1662458083.123917,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NjY4NTY3OTIzMTA4MTc5MjM4MjAzOTE5NDA1OTUzNDQ5NDY5Mzg=&google_tc=
302 Found 288 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NjY4NTY3OTIzMTA4MTc5MjM4MjAzOTE5NDA1OTUzNDQ5NDY5Mzg=&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 8c9e39c84908e7af27b4edacdb706a1b
307d528d5710452c9034e4131aeba849bd41bbf3
a6db97f2f14716e6b979a1d44e3d764a74982c7bd04d0ee005a80137c08b995b
GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NjY4NTY3OTIzMTA4MTc5MjM4MjAzOTE5NDA1OTUzNDQ5NDY5Mzg=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://dpm.demdex.net/ibs:dpid=771&dpuuid=&google_error=3?gdpr=0&gdpr_consent=
date: Tue, 06 Sep 2022 09:54:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 288
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d156d0018991a7e50742408b69aea5cd
eae9abfdf1b50e89a1850428d0427c8f2efb1685
0822edaad47e9ed65c2cd4735d76866fb0c9ac609da11dd4409f17b021834a06
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0822EDAAD47E9ED65C2CD4735D76866FB0C9AC609DA11DD4409F17B021834A06"
Last-Modified: Sun, 04 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20740
Expires: Tue, 06 Sep 2022 15:40:23 GMT
Date: Tue, 06 Sep 2022 09:54:43 GMT
Connection: keep-alive
sync-tm.everesttech.net/ct/upi/pid/5w3jqr4k?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dg8f47s39e399f3fe%26google_push%26google_sc%26google_hm%3D%24%7BTM_USER_ID_BASE64ENC_URLENC%7D&_test=YxcY4gAL4DdDbQAK
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/5w3jqr4k?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dg8f47s39e399f3fe%26google_push%26google_sc%26google_hm%3D%24%7BTM_USER_ID_BASE64ENC_URLENC%7D&_test=YxcY4gAL4DdDbQAK
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/5w3jqr4k?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dg8f47s39e399f3fe%26google_push%26google_sc%26google_hm%3D%24%7BTM_USER_ID_BASE64ENC_URLENC%7D&_test=YxcY4gAL4DdDbQAK HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
age: 3070
x-served-by: cache-bma1654-BMA
x-cache: HIT
x-cache-hits: 6588
x-timer: S1662458083.186829,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
sync-tm.everesttech.net/ct/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL4DdDbwAK
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL4DdDbwAK
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D&_test=YxcY4gAL4DdDbwAK HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
age: 3070
x-served-by: cache-bma1654-BMA
x-cache: HIT
x-cache-hits: 6589
x-timer: S1662458083.187726,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fwww.thenewstribune.com%2F
200 OK 2.9 kB URL HTTP/2 jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fwww.thenewstribune.com%2F
IP
File type ASCII text, with very long lines (17482), with no line terminators
Hash fe52a6fd1977e035934f8cc945b7d863
0430f864679ee7f6042de19b74e5b7ad70b44057
5410e8144e8c776c2d8910db9c2703c5ff0f71ab8d3d706b0854637d49c655a7
GET /t?ntv_url=https%3A%2F%2Fwww.thenewstribune.com%2F HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:43 GMT
content-type: text/javascript;charset=UTF-8
content-length: 2936
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Wed, 06-Sep-2023 09:54:43 GMT; Path=/; Secure; SameSite=None;
content-encoding: gzip
X-Firefox-Spdy: h2
p1.parsely.com/plogger/?rand=1662458077654&plid=62780926&idsite=thenewstribune.com&url=https%3A%2F%2Fwww.thenewstribune.com%2F&urlref=&screen=1280x1024%7C1280x1002%7C24&data=%7B%22subscriber%22%3Afalse%7D&sid=1&surl=https%3A%2F%2Fwww.thenewstribune.com%2F&sref=&sts=1662458077644&slts=0&title=Tacoma+WA+Breaking+News%2C+Crime+%26+More+%7C+Tacoma+News+Tribune&date=Tue+Sep+06+2022+09%3A54%3A37+GMT%2B0000+(Coordinated+Universal+Time)&action=pageview&pvid=92069169&u=pid%3D1f3ac1beb84597773e70aac6420fa449
200 OK 43 B URL HTTP/1.1 p1.parsely.com/plogger/?rand=1662458077654&plid=62780926&idsite=thenewstribune.com&url=https%3A%2F%2Fwww.thenewstribune.com%2F&urlref=&screen=1280x1024%7C1280x1002%7C24&data=%7B%22subscriber%22%3Afalse%7D&sid=1&surl=https%3A%2F%2Fwww.thenewstribune.com%2F&sref=&sts=1662458077644&slts=0&title=Tacoma+WA+Breaking+News%2C+Crime+%26+More+%7C+Tacoma+News+Tribune&date=Tue+Sep+06+2022+09%3A54%3A37+GMT%2B0000+(Coordinated+Universal+Time)&action=pageview&pvid=92069169&u=pid%3D1f3ac1beb84597773e70aac6420fa449
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /plogger/?rand=1662458077654&plid=62780926&idsite=thenewstribune.com&url=https%3A%2F%2Fwww.thenewstribune.com%2F&urlref=&screen=1280x1024%7C1280x1002%7C24&data=%7B%22subscriber%22%3Afalse%7D&sid=1&surl=https%3A%2F%2Fwww.thenewstribune.com%2F&sref=&sts=1662458077644&slts=0&title=Tacoma+WA+Breaking+News%2C+Crime+%26+More+%7C+Tacoma+News+Tribune&date=Tue+Sep+06+2022+09%3A54%3A37+GMT%2B0000+(Coordinated+Universal+Time)&action=pageview&pvid=92069169&u=pid%3D1f3ac1beb84597773e70aac6420fa449 HTTP/1.1
Host: p1.parsely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 09:54:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Tuesday, 06-Sep-2022 09:54:43 GMT
Cache-Control: no-cache
ats.rlcdn.com/ats.js
200 OK 36 kB IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 234b2785697a497a7ff084011946d1a0
c6507e0e3ce318607a4bcddf0bdcec8d426921e9
fb8938004cd89b9792d1cfedc407f0e1499e6a0c0f0ff50cd28793ce0c11591f
GET /ats.js HTTP/1.1
Host: ats.rlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Tue, 17 May 2022 11:35:33 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: 57180e34d853b9e6be67670dae22a049fb237e6bca37c60f7ba138272a8487cc
x-amz-version-id: qhkEQKrW4Gg_gxbK41emvSsDXWYdvDMl
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:eu-west-1:469675294282:build/ATSLibrary-prod:598424ed-c6de-48e8-8068-45662e39c3ce
x-amz-meta-codebuild-content-md5: 58acf9e97c03c481f490be71338f7f57
server: AmazonS3
content-encoding: br
date: Tue, 06 Sep 2022 01:26:14 GMT
cache-control: must-revalidate,public,max-age=86400
etag: W/"148e21f812b555a13b2a9c6b616141f4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _qevZqIkHQgvYXSNN7PZCBcvLecAvWAwlDaRH6RK-6qoy0NjnMYFRQ==
age: 30509
X-Firefox-Spdy: h2
s.ntv.io/css/click-out-icon.css
200 OK 618 B URL HTTP/1.1 s.ntv.io/css/click-out-icon.css
IP
File type ASCII text, with very long lines (618), with no line terminators
Hash 43c31858c9aac81661d142577cb1fc68
8a736cfb2890869ccca3a08a0fee958db9065e49
8e41a8e6b02e146fe25fa71262a12a24c80ee7e0debfcae0757a4fe6c67de5a9
GET /css/click-out-icon.css HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: L+7Dni3Dair+fW/8ocWuYL/NaUFoV+hx3vOaVlgEpoT66xJpnMwjDXuX9530dIUTy5iPTf5TMMc=
x-amz-request-id: HJ96NMDZYRWSV0KK
Last-Modified: Wed, 13 Sep 2017 22:37:26 GMT
ETag: "43c31858c9aac81661d142577cb1fc68"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 618
Date: Tue, 06 Sep 2022 09:54:43 GMT
Connection: keep-alive
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=9998411&ntv_pl=1092954
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=9998411&ntv_pl=1092954
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_at=394&ntv_usid=9998411&ntv_pl=1092954 HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:43 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Wed, 06-Sep-2023 09:54:43 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311908838112
200 OK 0 B URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311908838112
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /playback/v1/accounts/5615998024001/videos/6311908838112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: accept
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-max-age: 86400
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1636-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1662458083.333385,VS0,VE0
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 0
X-Firefox-Spdy: h2
edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311830863112
200 OK 0 B URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311830863112
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /playback/v1/accounts/5615998024001/videos/6311830863112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: accept
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-max-age: 86400
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1636-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1662458083.344508,VS0,VE0
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 0
X-Firefox-Spdy: h2
edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311793359112
200 OK 0 B URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311793359112
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /playback/v1/accounts/5615998024001/videos/6311793359112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: accept
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-max-age: 86400
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1636-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1662458083.348706,VS0,VE0
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 0
X-Firefox-Spdy: h2
jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fwww.thenewstribune.com%2F
200 OK 2.9 kB URL HTTP/2 jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fwww.thenewstribune.com%2F
IP
File type ASCII text, with very long lines (17500), with no line terminators
Hash bb9bce662dc5710651e202a09cf6b87d
b9964bdba391999b1eebc493629240ac17aa684c
d0b056aa3e26f196dae7a84efb0d571c9db70307be51e4a35a9e0f2da24c4fa7
GET /t?ntv_url=https%3A%2F%2Fwww.thenewstribune.com%2F HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:43 GMT
content-type: text/javascript;charset=UTF-8
content-length: 2947
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Wed, 06-Sep-2023 09:54:43 GMT; Path=/; Secure; SameSite=None;
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f11d61919f16eb6478c41b8a94509721
c9a3b3e0ab89c7362517fd00c15c9f1c4eec5560
7e6a837c0a70792d0331cb78f09a8236ed287bc0dc6634716e271e212c432c2a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6465
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Last-Modified: Tue, 06 Sep 2022 08:06:58 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
s.ntv.io/font/click-out-icon.ttf?sjshwd
200 OK 1.1 kB URL HTTP/1.1 s.ntv.io/font/click-out-icon.ttf?sjshwd
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash f587575d5d6dc5e7dc296da77fb11396
126b3b2fba2568c14db1fa29bbd43a2c531fd68e
ee2214a948aa510978878e09453b21c85f1bcfe78a7c55412268ad85a5fb147d
GET /font/click-out-icon.ttf?sjshwd HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://s.ntv.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: i8nh5aPLPmXLN4QzOJ7GANgCoGDjXVmGrCY6WciZFBMk301tSFeukdbHgBxbAA8hvjeSCzmZ2oY=
x-amz-request-id: 7RCC3AM58BFB44M1
Last-Modified: Tue, 04 Oct 2016 00:20:40 GMT
ETag: "f587575d5d6dc5e7dc296da77fb11396"
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 1092
Date: Tue, 06 Sep 2022 09:54:43 GMT
Connection: keep-alive
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
ntvcld-a.akamaihd.net/image/upload/w_200,h_150,c_fit,f_auto/assets/D3A6E275F7824D14988C71DD95B648CF.jpg
200 OK 10 kB URL HTTP/1.1 ntvcld-a.akamaihd.net/image/upload/w_200,h_150,c_fit,f_auto/assets/D3A6E275F7824D14988C71DD95B648CF.jpg
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x150, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b292930bf6271f65260d7f484ffb8dcd
f73debdbb81bcb5f3cb000477a123d43469f2ec9
7a902c6c2244661636a7cc8d1914a2241734f9a84fa1087b492816bcdccdf4d6
GET /image/upload/w_200,h_150,c_fit,f_auto/assets/D3A6E275F7824D14988C71DD95B648CF.jpg HTTP/1.1
Host: ntvcld-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
ETag: "324d943527d5c1db17b156092dc5fb71"
Last-Modified: Thu, 01 Sep 2022 22:00:38 GMT
Server: Akamai Image Manager
X-Serial: 1388
X-Check-Cacheable: YES
Content-Length: 9976
Content-Type: image/webp
Cache-Control: private, no-transform, max-age=2203508
Expires: Sat, 01 Oct 2022 21:59:51 GMT
Date: Tue, 06 Sep 2022 09:54:43 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
ocsp.digicert.com/
200 OK 471 B IP
Hash f11d61919f16eb6478c41b8a94509721
c9a3b3e0ab89c7362517fd00c15c9f1c4eec5560
7e6a837c0a70792d0331cb78f09a8236ed287bc0dc6634716e271e212c432c2a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6465
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Last-Modified: Tue, 06 Sep 2022 08:06:58 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
dpm.demdex.net/ibs:dpid=411&dpuuid=YxcY4wAAAEiCNQOV
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=YxcY4wAAAEiCNQOV
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=YxcY4wAAAEiCNQOV HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v038-067ff8f8b.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YxcY4wAAAEiCNQOV
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=01730500669587624910288483430958964186; Max-Age=15552000; Expires=Sun, 05 Mar 2023 09:54:43 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: oaDcRnLsSD8=
Content-Length: 0
Connection: keep-alive
dpm.demdex.net/ibs:dpid=771&dpuuid=&google_error=3?gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=771&dpuuid=&google_error=3?gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=771&dpuuid=&google_error=3?gdpr=0&gdpr_consent= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v038-0d17c4202.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=771&dpuuid=&google_error=3
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=37075144264401733393886342910245805095; Max-Age=15552000; Expires=Sun, 05 Mar 2023 09:54:43 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Error: 300
X-TID: 3DkHPk1ySxM=
Content-Length: 0
Connection: keep-alive
edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311793359112
200 OK 7.4 kB URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311793359112
IP
File type JSON data\012- , ASCII text, with very long lines (7395)
Hash ae54b96c080db67be8d6464001828134
ad1de70ceeb7561e40c730633d85f02a9fabddb1
60d0ff7cda994b4c0c25a5cbce94adab96d9d4b6cc737f56bf5a5d9ca449baa9
GET /playback/v1/accounts/5615998024001/videos/6311793359112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json;pk=BCpkADawqM1wLoCFSLwIiCm7OVRi8nKw-7SLYxrVkjX4Oo0AgPpStoMJloK1GctDgzAwtzFhN1b36rVSJsCHx0xAVj8zX3aURNz-UuXqhAyz46a7byeXUZh9aVDNXab1WeYYnGWTAkat2yMs
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
account-status: APPROVED
bc-override-client-ip: 91.90.42.154
bcov-request-id: 138ce591-74d3-4b05-9486-e1bacaffd491
content-type: application/json; charset=UTF-8
policy-key-accountid: 5615998024001
policy-key-raw: BCpkADawqM1wLoCFSLwIiCm7OVRi8nKw-7SLYxrVkjX4Oo0AgPpStoMJloK1GctDgzAwtzFhN1b36rVSJsCHx0xAVj8zX3aURNz-UuXqhAyz46a7byeXUZh9aVDNXab1WeYYnGWTAkat2yMs
powered-by: BC
powered-from: eu-central-1c
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.360869,VS0,VE132
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 7396
X-Firefox-Spdy: h2
edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311908838112
200 OK 7.7 kB URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311908838112
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (7699)
Hash 1d77c55760137443efc5c26b242566a3
1417623560097996e134edb26343c710934d8a1e
cb0d5a6d9f87485e90e9b19128ddb1c1beab9b561f170d2540ac5dacdecc62cd
GET /playback/v1/accounts/5615998024001/videos/6311908838112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json;pk=BCpkADawqM1wLoCFSLwIiCm7OVRi8nKw-7SLYxrVkjX4Oo0AgPpStoMJloK1GctDgzAwtzFhN1b36rVSJsCHx0xAVj8zX3aURNz-UuXqhAyz46a7byeXUZh9aVDNXab1WeYYnGWTAkat2yMs
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
account-status: APPROVED
bc-override-client-ip: 91.90.42.154
bcov-request-id: c60bcb0c-ba81-4df3-a1d6-9a49b8304562
content-type: application/json; charset=UTF-8
policy-key-accountid: 5615998024001
policy-key-raw: BCpkADawqM1wLoCFSLwIiCm7OVRi8nKw-7SLYxrVkjX4Oo0AgPpStoMJloK1GctDgzAwtzFhN1b36rVSJsCHx0xAVj8zX3aURNz-UuXqhAyz46a7byeXUZh9aVDNXab1WeYYnGWTAkat2yMs
powered-by: BC
powered-from: eu-central-1b
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.352259,VS0,VE166
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 7702
X-Firefox-Spdy: h2
edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311830863112
200 OK 7.2 kB URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5615998024001/videos/6311830863112
IP
File type JSON data\012- , ASCII text, with very long lines (7164)
Hash dfda76bd120a66a519900c66cb3be84f
f5fb50e340ddbd1b5a7f18db9979ebdd7f434bb9
8afdc2718d65f43828f60c10b1ca3aeac79d2333eae41d71e9c29f931eafdeaf
GET /playback/v1/accounts/5615998024001/videos/6311830863112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json;pk=BCpkADawqM1wLoCFSLwIiCm7OVRi8nKw-7SLYxrVkjX4Oo0AgPpStoMJloK1GctDgzAwtzFhN1b36rVSJsCHx0xAVj8zX3aURNz-UuXqhAyz46a7byeXUZh9aVDNXab1WeYYnGWTAkat2yMs
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
account-status: APPROVED
bc-override-client-ip: 91.90.42.154
bcov-request-id: 2243ed67-e17e-42f3-90d3-6c91937434bb
content-type: application/json; charset=UTF-8
policy-key-accountid: 5615998024001
policy-key-raw: BCpkADawqM1wLoCFSLwIiCm7OVRi8nKw-7SLYxrVkjX4Oo0AgPpStoMJloK1GctDgzAwtzFhN1b36rVSJsCHx0xAVj8zX3aURNz-UuXqhAyz46a7byeXUZh9aVDNXab1WeYYnGWTAkat2yMs
powered-by: BC
powered-from: eu-central-1c
accept-ranges: bytes
date: Tue, 06 Sep 2022 09:54:43 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662458083.359821,VS0,VE160
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 7165
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 307434cce6fc5d00f8facb95487878cc
4e599760a57053b1c7ff95cf284ee429ef8506c0
10bd145c8d9ce9440344c7dd07d8a828ad1a93576443c8ede29aaf93f8a82547
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3864
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Last-Modified: Tue, 06 Sep 2022 08:50:19 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 2586d4a1f74a6064451bc4a98cde3f1f
92cc50cf99a9285b34736d5e743dadc4e59080b2
3d1a8f3793789dbae737638cf11d3894bec0038d46b083108ba4593f796123f2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6381
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Last-Modified: Tue, 06 Sep 2022 08:08:22 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
as-sec.casalemedia.com/headerstats?s=210842&u=https%3A%2F%2Fwww.thenewstribune.com%2F&v=3
200 OK 0 B URL HTTP/2 as-sec.casalemedia.com/headerstats?s=210842&u=https%3A%2F%2Fwww.thenewstribune.com%2F&v=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /headerstats?s=210842&u=https%3A%2F%2Fwww.thenewstribune.com%2F&v=3 HTTP/1.1
Host: as-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 355
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:43 GMT
content-length: 0
cf-ray: 7466532e1d87b4fa-OSL
access-control-allow-origin: https://www.thenewstribune.com
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3wNS2QQaSjS8NG5eNt0LC5SiF5M88jPH%2Bpvi%2BwpXKXlZ73GsMLTxLQr0JBF34AtoDTS46HfzYow8MjWZMzfxX18B5mryRqsC1Z5iIP2kNVTpvpCYfH%2BMPPOY5OwjHGCwCJ47Cgww5kE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mcclatchy-d.openx.net/w/1.0/arj?auid=545653717&aus=970x250,970x90,728x90&bc=hb_pb_wapo&be=1&ch=UTF-8&ju=https%3A%2F%2Fwww.thenewstribune.com%2F&res=1280x1024x24&tz=0&nocache=1662458078052
200 OK 79 B URL HTTP/2 mcclatchy-d.openx.net/w/1.0/arj?auid=545653717&aus=970x250,970x90,728x90&bc=hb_pb_wapo&be=1&ch=UTF-8&ju=https%3A%2F%2Fwww.thenewstribune.com%2F&res=1280x1024x24&tz=0&nocache=1662458078052
IP
File type JSON data\012- , ASCII text
Hash 4c8f06457d7d4ebf99e88b633e59c81c
ba58c574caefefaf14735062a5b58f94991773bb
7b7b471d43db7e14d399f61ace6ac19365f18b19b17348f19eaf0aeca8b4e625
GET /w/1.0/arj?auid=545653717&aus=970x250,970x90,728x90&bc=hb_pb_wapo&be=1&ch=UTF-8&ju=https%3A%2F%2Fwww.thenewstribune.com%2F&res=1280x1024x24&tz=0&nocache=1662458078052 HTTP/1.1
Host: mcclatchy-d.openx.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Tue, 06 Sep 2022 09:54:43 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 807694d9fc72d098fe9c89e1fad1a76e
7d47a52d046cc02c6a514d2599806d744ea9c826
61a35012931f43dd8489a956319dc6edbe9cc868233e317eab56e8c8278d7e88
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:43 GMT
Last-Modified: Tue, 06 Sep 2022 09:02:43 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MS7oK0CY-xtp_DF_2-TzuI3K5J46Nfns7lAOxsypzo_dafwDkhtKUg==
Age: 3120
cf-images.us-east-1.prod.boltdns.net/v1/static/5615998024001/dca5cffb-dc84-4a1b-b14b-d752b1aa9f0b/36a55343-b626-4317-bd4b-31aa2f4a4c83/1280x720/match/image.jpg
200 OK 256 kB URL HTTP/1.1 cf-images.us-east-1.prod.boltdns.net/v1/static/5615998024001/dca5cffb-dc84-4a1b-b14b-d752b1aa9f0b/36a55343-b626-4317-bd4b-31aa2f4a4c83/1280x720/match/image.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 256 kB (256441 bytes)
Hash 9fba06e8706d7b59f9168f3d51af60af
e909a4794ea18f2f0550d4645bb850f7ca5a66ed
20ede902cc4c0b4d9d60270c1bbda3f91bb9102261ed29ea0e9637b343b05dc2
GET /v1/static/5615998024001/dca5cffb-dc84-4a1b-b14b-d752b1aa9f0b/36a55343-b626-4317-bd4b-31aa2f4a4c83/1280x720/match/image.jpg HTTP/1.1
Host: cf-images.us-east-1.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
Date: Sat, 03 Sep 2022 09:03:03 GMT
Expires: Sun, 03 Sep 2023 09:03:03 GMT
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NvmURG4_kzVn9drqTyOP48Zmx-DyqmBlLSFRLyKwTxL0o_ypu0f4bA==
Age: 262299
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=6291&site_id=80342&tk_flint=custom&slots=1&size_id=2&alt_size_ids=55%2C57&zone_id=2125036&rp_floor=0.01&p_gpid=7675%2Fzeus_top-banner
200 OK 261 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=6291&site_id=80342&tk_flint=custom&slots=1&size_id=2&alt_size_ids=55%2C57&zone_id=2125036&rp_floor=0.01&p_gpid=7675%2Fzeus_top-banner
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e2e6273b82fbcc7756c729fd4a987dbe
816bb59ddd371a41f51a0cfbcb19afd9ddda8b68
b6316c4a25b2b554d79ef55838a8070eead931328b7888d3f27ee432419b4a75
GET /a/api/fastlane.json?account_id=6291&site_id=80342&tk_flint=custom&slots=1&size_id=2&alt_size_ids=55%2C57&zone_id=2125036&rp_floor=0.01&p_gpid=7675%2Fzeus_top-banner HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 06 Sep 2022 09:54:43 GMT
Content-Type: application/json
Content-Length: 261
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.thenewstribune.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L7Q0MAZL-Y-7JM2; Domain=.rubiconproject.com; Path=/; Expires=Wed, 06-Sep-2023 09:54:43 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrXF8yITP1Htu9DtVM30fCg8unlGhiymZ0g+1VRXxdW+AxZQy45HFhl2N+eASPutMtymPvo8pleP1KIdZEbP9yISu7VIh8VyH4=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 06-Sep-2023 09:54:43 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
status.geotrust.com/
200 OK 471 B IP
Hash 307434cce6fc5d00f8facb95487878cc
4e599760a57053b1c7ff95cf284ee429ef8506c0
10bd145c8d9ce9440344c7dd07d8a828ad1a93576443c8ede29aaf93f8a82547
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5656
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Last-Modified: Tue, 06 Sep 2022 08:20:27 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9c35f8026445767c68619b7b256dcc71
8a1c0f19361b6bfe588e7312838e0add8edfd467
86b93cc9a177f72392e3fe9b983570ea55e608bf127541eb38bce6820cdfcc45
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain;charset=UTF-8
Content-Length: 450
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 06 Sep 2022 09:54:43 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.thenewstribune.com
AN-X-Request-Uuid: 0869da1c-9bd1-486c-ad8a-876f67a5b2d4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
tlx.3lift.com/header/auction?lib=zeus&v=1&referrer=www.thenewstribune.com&debug=false
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=zeus&v=1&referrer=www.thenewstribune.com&debug=false
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=zeus&v=1&referrer=www.thenewstribune.com&debug=false HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 231
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:43 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-bitness,sec-ch-prefers-color-scheme,sec-ch-width,sec-ch-ect,user-agent,sec-ch-downlink,sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width,sec-ch-ua-platform,sec-ch-viewport-height,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ccc4fa4f7710c25311b3e8221a62560
d2159746ef08cd3ee3c35d4b4613a592f80ccfed
148688576cbf8b818e40e016478a6ee4d929358742304efbd8c6df09df9b5d7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
200 OK 13 kB URL HTTP/2 pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
IP
File type ASCII text, with very long lines (1977)
Hash 64bb7f59803ae6130d8f160e9b5caea8
e9f34d7bf416e6719b9a6da7e6d72804afdeecfd
dd71fb7acce37bb1b1c4a943d3e226ada9df7ab2b7ed93b9d0ed33c8d98c4f8d
GET /omsdk/releases/live/omweb-v1.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/omsdk-team-release-policy
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="omsdk-team-release-policy"
report-to: {"group":"omsdk-team-release-policy","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/omsdk-team-release-policy"}]}
content-length: 12926
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 09:39:34 GMT
expires: Tue, 06 Sep 2022 10:39:34 GMT
cache-control: public, max-age=3600
age: 909
last-modified: Tue, 19 Jul 2022 21:40:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.thenewstribune.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.thenewstribune.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.thenewstribune.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 09:54:43 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cf-images.us-east-1.prod.boltdns.net/v1/static/5615998024001/0c5d8c02-b968-43af-ac65-1629227aa019/79af6a02-eb32-4808-ace2-bcc8401f8d79/1280x720/match/image.jpg
200 OK 640 kB URL HTTP/1.1 cf-images.us-east-1.prod.boltdns.net/v1/static/5615998024001/0c5d8c02-b968-43af-ac65-1629227aa019/79af6a02-eb32-4808-ace2-bcc8401f8d79/1280x720/match/image.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, datetime=2022:09:05 10:32:49], baseline, precision 8, 1280x720, components 3\012- data
Size 640 kB (639650 bytes)
Hash c95ccd0ffd5bebaaf9fc446a67f46a1c
2bad4b9e66aa5f69ab9a0eaad45742e5f1c9980b
bbea9bd64373d8e88dcd59e102db6cc3bbf758d90c13af73380229136bd1192d
GET /v1/static/5615998024001/0c5d8c02-b968-43af-ac65-1629227aa019/79af6a02-eb32-4808-ace2-bcc8401f8d79/1280x720/match/image.jpg HTTP/1.1
Host: cf-images.us-east-1.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
Date: Mon, 05 Sep 2022 17:42:14 GMT
Expires: Tue, 05 Sep 2023 17:42:14 GMT
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vZuhva4fwS0iN90VbznrA3w-ZPa9xzPwzS9cAeFDqafK9Iq9dMu0tQ==
Age: 58349
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ccc4fa4f7710c25311b3e8221a62560
d2159746ef08cd3ee3c35d4b4613a592f80ccfed
148688576cbf8b818e40e016478a6ee4d929358742304efbd8c6df09df9b5d7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5146753abe311a52f036ce612e41b050
e1f20a46d138dbc1044bcc41327ffa78d17f6b41
cb6d101e159edbf46ee40c8b6547df6c70939208c764fa41f73ec84820f47e3a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:43 GMT
Last-Modified: Tue, 06 Sep 2022 08:33:16 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vd09JfXwDqk72hqElN_3t9x5zyvC6XzprHERAbqX-GzQB-uj9m-Thg==
Age: 4887
cf-images.us-east-1.prod.boltdns.net/v1/jit/5615998024001/357f1d6d-7472-4fb7-a0b9-9a4b1a8efa55/main/1280x720/49s307ms/match/image.jpg
200 OK 73 kB URL HTTP/1.1 cf-images.us-east-1.prod.boltdns.net/v1/jit/5615998024001/357f1d6d-7472-4fb7-a0b9-9a4b1a8efa55/main/1280x720/49s307ms/match/image.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.134.100", baseline, precision 8, 1280x720, components 3\012- data
Hash 1ad1ba7d6aaeee9f7318c313fa816749
856ac7587ddec5d14a8ac0b8e95bbb786f92951f
18a7f9b9b590f6aa1999bdd9c53e0ca95a5423ca51b31b0f8b14a7af88323712
GET /v1/jit/5615998024001/357f1d6d-7472-4fb7-a0b9-9a4b1a8efa55/main/1280x720/49s307ms/match/image.jpg HTTP/1.1
Host: cf-images.us-east-1.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
Date: Sat, 03 Sep 2022 17:47:27 GMT
Expires: Sun, 03 Sep 2023 17:47:27 GMT
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dXxTVSLPSqO8FLK0RMrXcdQMKaWmPK99h6ZDU7SqLrA8Mm_5WGSgTg==
Age: 230836
s3.amazonaws.com/cdn.jukeboxu.com/brightcove/nextgen/buttons/play-button.png
200 OK 8.8 kB URL HTTP/1.1 s3.amazonaws.com/cdn.jukeboxu.com/brightcove/nextgen/buttons/play-button.png
IP
File type PNG image data, 166 x 166, 8-bit colormap, non-interlaced\012- data
Hash 182516d4ba61695d505ca0bd246f63fb
027f7388893ffa3d429da97c175ae82269f78d9f
45f08f27c7337d189e8c31e635b5d0a0781b273131135cd77ee8b6f12366e7a2
GET /cdn.jukeboxu.com/brightcove/nextgen/buttons/play-button.png HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 2vyuIk32lmcW06OMK9Mnw3PGaCqs+GIf15AaVKCm+i/0AvOG44GsIAdYbFQ3/bBss1q58p9KnHc=
x-amz-request-id: NTQX3KAD8VTFHSM3
Date: Tue, 06 Sep 2022 09:54:44 GMT
Last-Modified: Wed, 22 Apr 2015 01:47:56 GMT
ETag: "182516d4ba61695d505ca0bd246f63fb"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 8810
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 000093879448e7264f3cfdfdc0ed2095
b86f277c0c33c130ec6bc096cff86af45c54cfca
f599310c9d41fa2301b9a224f0d0f564293d64df8fe3faa9e1bbbd89314d6b37
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "F599310C9D41FA2301B9A224F0D0F564293D64DF8FE3FAA9E1BBBD89314D6B37"
Last-Modified: Tue, 06 Sep 2022 01:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=3327
Expires: Tue, 06 Sep 2022 10:50:11 GMT
Date: Tue, 06 Sep 2022 09:54:44 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da4692f1529a23a6cfb04391e382c936
7befa8be966f1128ff3c25be47986e7fa7087de9
d8460cc7719813509b4e38be06b8d184306f9451695c3e1974c1d06e5c29039c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 000093879448e7264f3cfdfdc0ed2095
b86f277c0c33c130ec6bc096cff86af45c54cfca
f599310c9d41fa2301b9a224f0d0f564293d64df8fe3faa9e1bbbd89314d6b37
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "F599310C9D41FA2301B9A224F0D0F564293D64DF8FE3FAA9E1BBBD89314D6B37"
Last-Modified: Tue, 06 Sep 2022 01:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=3327
Expires: Tue, 06 Sep 2022 10:50:11 GMT
Date: Tue, 06 Sep 2022 09:54:44 GMT
Connection: keep-alive
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 000093879448e7264f3cfdfdc0ed2095
b86f277c0c33c130ec6bc096cff86af45c54cfca
f599310c9d41fa2301b9a224f0d0f564293d64df8fe3faa9e1bbbd89314d6b37
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "F599310C9D41FA2301B9A224F0D0F564293D64DF8FE3FAA9E1BBBD89314D6B37"
Last-Modified: Tue, 06 Sep 2022 01:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=3233
Expires: Tue, 06 Sep 2022 10:48:37 GMT
Date: Tue, 06 Sep 2022 09:54:44 GMT
Connection: keep-alive
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 000093879448e7264f3cfdfdc0ed2095
b86f277c0c33c130ec6bc096cff86af45c54cfca
f599310c9d41fa2301b9a224f0d0f564293d64df8fe3faa9e1bbbd89314d6b37
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "F599310C9D41FA2301B9A224F0D0F564293D64DF8FE3FAA9E1BBBD89314D6B37"
Last-Modified: Tue, 06 Sep 2022 01:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=3233
Expires: Tue, 06 Sep 2022 10:48:37 GMT
Date: Tue, 06 Sep 2022 09:54:44 GMT
Connection: keep-alive
www.thenewstribune.com/olsoibyzn-/pdp.gif?z=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsInBsYXllcnMiOlsidmlkZW8tZ2FsbGVyeSIsInZpZGVvLWdhbGxlcnkiLCJ2aWRlby1nYWxsZXJ5Il19
200 OK 42 B URL HTTP/2 www.thenewstribune.com/olsoibyzn-/pdp.gif?z=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsInBsYXllcnMiOlsidmlkZW8tZ2FsbGVyeSIsInZpZGVvLWdhbGxlcnkiLCJ2aWRlby1nYWxsZXJ5Il19
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /olsoibyzn-/pdp.gif?z=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsInBsYXllcnMiOlsidmlkZW8tZ2FsbGVyeSIsInZpZGVvLWdhbGxlcnkiLCJ2aWRlby1nYWxsZXJ5Il19 HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Cookie: adcloud={%22_les_v%22:%22y%2Cthenewstribune.com%2C1662459877%22}; _sp_id.757a=402e3b23a3d16010.1662458077.1.1662458077.1662458077; _sp_ses.757a=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
etag: "2a-5e79f4c089340"
content-length: 42
surrogate-control: varnish=ESI/2.1
content-type: image/gif
x-varnish: 754399517, 724251998 734334823
x-mi-in-market: 0
server: MI
mi-cache-age: 1173
mi-cache: HIT
cache-control: max-age=604772
date: Tue, 06 Sep 2022 09:54:44 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=www.thenewstribune.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.thenewstribune.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.thenewstribune.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 09:54:44 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da4692f1529a23a6cfb04391e382c936
7befa8be966f1128ff3c25be47986e7fa7087de9
d8460cc7719813509b4e38be06b8d184306f9451695c3e1974c1d06e5c29039c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c829769f4dcf065caa66f8ce8dbc3263.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
200 OK 3.1 kB URL HTTP/2 c829769f4dcf065caa66f8ce8dbc3263.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5835)
Hash 3fa5e95a358d660ddb3c45769ae1357f
5f6164fbaf8cfbccfd061b00ae48dedfc16bbcd9
d32f4b680031c0e11222eb17385aa9d3b11d2903b05bff34c3d4eb6292631137
GET /safeframe/1-0-38/html/container.html HTTP/1.1
Host: c829769f4dcf065caa66f8ce8dbc3263.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 3108
date: Tue, 06 Sep 2022 09:54:44 GMT
expires: Wed, 06 Sep 2023 09:54:44 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 02 Mar 2021 20:17:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311908838112
200 OK 0 B URL HTTP/1.1 publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311908838112
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /webapi-public/v2/publications/thenewstribune/related/6311908838112 HTTP/1.1
Host: publicapi.misitemgr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-forwarded-host
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Headers: X-Forwarded-Host
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://www.thenewstribune.com
Access-Control-Max-Age: 86400
Cache-Control: no-cache
Date: Tue, 06 Sep 2022 09:54:44 GMT
Vary: X-Forwarded-Host
Content-Length: 0
publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311793359112
200 OK 0 B URL HTTP/1.1 publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311793359112
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /webapi-public/v2/publications/thenewstribune/related/6311793359112 HTTP/1.1
Host: publicapi.misitemgr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-forwarded-host
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Headers: X-Forwarded-Host
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://www.thenewstribune.com
Access-Control-Max-Age: 86400
Cache-Control: no-cache
Date: Tue, 06 Sep 2022 09:54:44 GMT
Vary: X-Forwarded-Host
Content-Length: 0
publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311830863112
200 OK 0 B URL HTTP/1.1 publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311830863112
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /webapi-public/v2/publications/thenewstribune/related/6311830863112 HTTP/1.1
Host: publicapi.misitemgr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-forwarded-host
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Headers: X-Forwarded-Host
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://www.thenewstribune.com
Access-Control-Max-Age: 86400
Cache-Control: no-cache
Date: Tue, 06 Sep 2022 09:54:44 GMT
Vary: X-Forwarded-Host
Content-Length: 0
z.moatads.com/nativo483ETsY34/moatad.js?moatClientLevel1=43685&moatClientLevel2=184380&moatClientLevel3=512372&moatClientLevel4=5738289&moatClientSlicer1=8854&moatClientSlicer2=0&ntvDomSearch=ntv1092954-512372-16983
200 OK 106 kB URL HTTP/2 z.moatads.com/nativo483ETsY34/moatad.js?moatClientLevel1=43685&moatClientLevel2=184380&moatClientLevel3=512372&moatClientLevel4=5738289&moatClientSlicer1=8854&moatClientSlicer2=0&ntvDomSearch=ntv1092954-512372-16983
IP
File type ASCII text, with very long lines (1899)
Size 106 kB (106506 bytes)
Hash 550983daa6f8bbbf410643065c741db3
227d2d561bf11e40c40342f816da3bb56a2dd702
11f608afa8d56e9d711413eee38d31869efe10acfa22f1a0e990e621c87cfa60
GET /nativo483ETsY34/moatad.js?moatClientLevel1=43685&moatClientLevel2=184380&moatClientLevel3=512372&moatClientLevel4=5738289&moatClientSlicer1=8854&moatClientSlicer2=0&ntvDomSearch=ntv1092954-512372-16983 HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 5HHZV9Zgdv4crzfcPEh7MsinOVwm8rPvA7wWU6vufYB534nnlqa1UKUvlP6HGBf61DtlsjG52sA=
x-amz-request-id: Z41FNXT9Q6WA1GCC
last-modified: Mon, 29 Aug 2022 19:22:28 GMT
etag: "550983daa6f8bbbf410643065c741db3"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
content-length: 106506
vary: Accept-Encoding
cache-control: max-age=62285
date: Tue, 06 Sep 2022 09:54:45 GMT
X-Firefox-Spdy: h2
jadserve.postrelease.com/trk.gif?ntv_at=28&ntv_ui=17ffe164-cbe7-443a-9c53-c53f96fcf100&ntv_a=dNEHAMY9XAWq0QA&ntv_fl=aiKFO5BQmNlpJWOY5E-s2QR8pMh2mCVbW-xvMZq4kDQYOgut1QAEct9VN3Kqq6bHTeQl4Grq4gj0b3awMov_XlNzWkbJKgiAn4NoWu_EQKqWcmMFTVj8VB7X9XTTNUhHPXhBYWe9M_uP0LkAcs00vi8F_DZce5b_4HoOlIIdS-s=&ord=1043115669&ntv_ht=4xgXYwA&ntv_it
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_at=28&ntv_ui=17ffe164-cbe7-443a-9c53-c53f96fcf100&ntv_a=dNEHAMY9XAWq0QA&ntv_fl=aiKFO5BQmNlpJWOY5E-s2QR8pMh2mCVbW-xvMZq4kDQYOgut1QAEct9VN3Kqq6bHTeQl4Grq4gj0b3awMov_XlNzWkbJKgiAn4NoWu_EQKqWcmMFTVj8VB7X9XTTNUhHPXhBYWe9M_uP0LkAcs00vi8F_DZce5b_4HoOlIIdS-s=&ord=1043115669&ntv_ht=4xgXYwA&ntv_it
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_at=28&ntv_ui=17ffe164-cbe7-443a-9c53-c53f96fcf100&ntv_a=dNEHAMY9XAWq0QA&ntv_fl=aiKFO5BQmNlpJWOY5E-s2QR8pMh2mCVbW-xvMZq4kDQYOgut1QAEct9VN3Kqq6bHTeQl4Grq4gj0b3awMov_XlNzWkbJKgiAn4NoWu_EQKqWcmMFTVj8VB7X9XTTNUhHPXhBYWe9M_uP0LkAcs00vi8F_DZce5b_4HoOlIIdS-s=&ord=1043115669&ntv_ht=4xgXYwA&ntv_it HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Wed, 06-Sep-2023 09:54:45 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
jadserve.postrelease.com/trk.gif?ntv_at=46,302&ntv_ui=17ffe164-cbe7-443a-9c53-c53f96fcf100&ntv_a=dNEHAMY9XAWq0QA&ntv_fl=aiKFO5BQmNlpJWOY5E-s2QR8pMh2mCVbW-xvMZq4kDQYOgut1QAEct9VN3Kqq6bHTeQl4Grq4gj0b3awMov_XlNzWkbJKgiAn4NoWu_EQKqWcmMFTVj8VB7X9XTTNUhHPXhBYWe9M_uP0LkAcs00vi8F_DZce5b_4HoOlIIdS-s=&ord=261502266&ntv_ht=4xgXYwA&ntv_tad=16&ntv_it
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_at=46,302&ntv_ui=17ffe164-cbe7-443a-9c53-c53f96fcf100&ntv_a=dNEHAMY9XAWq0QA&ntv_fl=aiKFO5BQmNlpJWOY5E-s2QR8pMh2mCVbW-xvMZq4kDQYOgut1QAEct9VN3Kqq6bHTeQl4Grq4gj0b3awMov_XlNzWkbJKgiAn4NoWu_EQKqWcmMFTVj8VB7X9XTTNUhHPXhBYWe9M_uP0LkAcs00vi8F_DZce5b_4HoOlIIdS-s=&ord=261502266&ntv_ht=4xgXYwA&ntv_tad=16&ntv_it
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_at=46,302&ntv_ui=17ffe164-cbe7-443a-9c53-c53f96fcf100&ntv_a=dNEHAMY9XAWq0QA&ntv_fl=aiKFO5BQmNlpJWOY5E-s2QR8pMh2mCVbW-xvMZq4kDQYOgut1QAEct9VN3Kqq6bHTeQl4Grq4gj0b3awMov_XlNzWkbJKgiAn4NoWu_EQKqWcmMFTVj8VB7X9XTTNUhHPXhBYWe9M_uP0LkAcs00vi8F_DZce5b_4HoOlIIdS-s=&ord=261502266&ntv_ht=4xgXYwA&ntv_tad=16&ntv_it HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Wed, 06-Sep-2023 09:54:45 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YxcY4wAAAEiCNQOV
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YxcY4wAAAEiCNQOV
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YxcY4wAAAEiCNQOV HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v038-0b87c8cf8.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: Fw8i0eq6T+c=
Content-Length: 59
Connection: keep-alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=771&dpuuid=&google_error=3
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=771&dpuuid=&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=771&dpuuid=&google_error=3 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v038-0798724a6.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: eV3fN9KmSYQ=
Content-Length: 59
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s0.2mdn.net/instream/video/client.js
200 OK 17 kB URL HTTP/2 s0.2mdn.net/instream/video/client.js
IP
File type ASCII text, with very long lines (2156)
Hash 49295de6ccd23cf80b6418a2d209868f
42a955b4560bb22cb9b5b39577f7a691ea345018
d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
GET /instream/video/client.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Tue, 06 Sep 2022 09:54:45 GMT
expires: Tue, 06 Sep 2022 09:54:45 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.thenewstribune.com%2F&pid=C7eACceCCKOPQ&cb=0&ws=1280x939&v=22.8.252032&t=1000&slots=%5B%7B%22sd%22%3A%22zeus_overlay%22%2C%22s%22%3A%5B%221x1%22%5D%2C%22sn%22%3A%22%2F7675%2FTAC.site_thenewstribune%2F_HomePage%22%7D%2C%7B%22sd%22%3A%22zeus_top-banner%22%2C%22s%22%3A%5B%22970x250%22%2C%22970x90%22%2C%22728x90%22%5D%2C%22sn%22%3A%22%2F7675%2FTAC.site_thenewstribune%2F_HomePage%22%7D%5D&pubid=10f892c4-b76d-4f37-b1fd-0ae5d74780b5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 136 B URL HTTP/2 c.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.thenewstribune.com%2F&pid=C7eACceCCKOPQ&cb=0&ws=1280x939&v=22.8.252032&t=1000&slots=%5B%7B%22sd%22%3A%22zeus_overlay%22%2C%22s%22%3A%5B%221x1%22%5D%2C%22sn%22%3A%22%2F7675%2FTAC.site_thenewstribune%2F_HomePage%22%7D%2C%7B%22sd%22%3A%22zeus_top-banner%22%2C%22s%22%3A%5B%22970x250%22%2C%22970x90%22%2C%22728x90%22%5D%2C%22sn%22%3A%22%2F7675%2FTAC.site_thenewstribune%2F_HomePage%22%7D%5D&pubid=10f892c4-b76d-4f37-b1fd-0ae5d74780b5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash 4c30930b3a9d3eb8bb55eddc554c120c
c94cde605d271ea18f28b7aec0918e6b8e632d0e
f58b34dbd3fefd360d27484c4976b4bc00cdb31c24f6df97f24a57a75389ed92
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.thenewstribune.com%2F&pid=C7eACceCCKOPQ&cb=0&ws=1280x939&v=22.8.252032&t=1000&slots=%5B%7B%22sd%22%3A%22zeus_overlay%22%2C%22s%22%3A%5B%221x1%22%5D%2C%22sn%22%3A%22%2F7675%2FTAC.site_thenewstribune%2F_HomePage%22%7D%2C%7B%22sd%22%3A%22zeus_top-banner%22%2C%22s%22%3A%5B%22970x250%22%2C%22970x90%22%2C%22728x90%22%5D%2C%22sn%22%3A%22%2F7675%2FTAC.site_thenewstribune%2F_HomePage%22%7D%5D&pubid=10f892c4-b76d-4f37-b1fd-0ae5d74780b5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 136
server: Server
date: Tue, 06 Sep 2022 09:54:45 GMT
x-amz-rid: RJN3JPAPPN0DH6HK1S8R
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hT3tWaXPwhz7gh2O6nPTLcMESx7H-yOni4aR591YbYxFgzdeJCMiwQ==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 864a07faae4ded63e84db9bd102a4409
7fc479cda331388513510921310ff77a8ea80b29
c900b19663709ab416a584000e01062fa1841cb9ab4ac8f78121cd3177c3519d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5303
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:26:22 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bidder.criteo.com/cdb?ptv=128&profileId=184&cb=25695385661
200 OK 218 B URL HTTP/2 bidder.criteo.com/cdb?ptv=128&profileId=184&cb=25695385661
IP
File type JSON data\012- , ASCII text, with very long lines (321), with no line terminators
Hash e5df3285e929817430cce7567f089fc0
75d95684398664195917ed44185e20b0252b5b89
807c5d035d716205a585b8f0006518fee7c937fb2d8b8357e743db502588d0c9
POST /cdb?ptv=128&profileId=184&cb=25695385661 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 737
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://www.thenewstribune.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 218
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311908838112
200 OK 16 kB URL HTTP/1.1 publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311908838112
IP
File type JSON data\012- , Unicode text, UTF-8 text
Hash 18c872a5ddf98492be8bc3f493f91314
c42b6b137fb090b171715c55f79b9b686996eac0
e1cabc3ae22e794a063553908491ee67d574f3d13e5962ead341566e6680a30e
GET /webapi-public/v2/publications/thenewstribune/related/6311908838112 HTTP/1.1
Host: publicapi.misitemgr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
X-Forwarded-Host: www.thenewstribune.com
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.thenewstribune.com
Cache-Control: no-cache
Content-Type: application/json;charset=UTF-8
Date: Tue, 06 Sep 2022 09:54:45 GMT
Mi-Api: true
Vary: X-Forwarded-Host
Transfer-Encoding: chunked
publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311830863112
200 OK 18 kB URL HTTP/1.1 publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311830863112
IP
File type JSON data\012- , Unicode text, UTF-8 text
Hash bef78119f998fc1ac40f00fc464b2710
6c19bc1d306137ea5327fb485dba8dd8bcc714ba
7e5d656e4bed3d12b7f5c6b352709b631a0741b18c1929169c055fb33fa52075
GET /webapi-public/v2/publications/thenewstribune/related/6311830863112 HTTP/1.1
Host: publicapi.misitemgr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
X-Forwarded-Host: www.thenewstribune.com
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.thenewstribune.com
Cache-Control: no-cache
Content-Type: application/json;charset=UTF-8
Date: Tue, 06 Sep 2022 09:54:45 GMT
Mi-Api: true
Vary: X-Forwarded-Host
Transfer-Encoding: chunked
www.thenewstribune.com/olsoibyzn-/push.f8912e91d0210d19c574.js
200 OK 658 B URL HTTP/2 www.thenewstribune.com/olsoibyzn-/push.f8912e91d0210d19c574.js
IP
File type ASCII text, with very long lines (1475), with no line terminators
Hash 7aca675cedd7e823c617bf235b775cf6
2425d96197b537a3ea3e268203a3ee1b58e489be
7d80705de5dfaf445d141c1e5c303d22e66588f0f20cf32649524c40786fed00
GET /olsoibyzn-/push.f8912e91d0210d19c574.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Cookie: adcloud={%22_les_v%22:%22y%2Cthenewstribune.com%2C1662459877%22}; _sp_id.757a=402e3b23a3d16010.1662458077.1.1662458077.1662458077; _sp_ses.757a=*
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"5c3-5e79f4c089340"
content-encoding: gzip
x-varnish: 573834627 567058516
x-mi-in-market: 0
server: MI
mi-cache-age: 202
vary: Accept-Encoding
mi-cache: HIT
content-length: 658
cache-control: max-age=193663
date: Tue, 06 Sep 2022 09:54:45 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/chatbot.a48592f79a8125fdfc1f.js
200 OK 1.0 kB URL HTTP/2 www.thenewstribune.com/olsoibyzn-/chatbot.a48592f79a8125fdfc1f.js
IP
File type ASCII text, with very long lines (2361), with no line terminators
Hash 5908e632b885d8ba4363794992a4a7d7
68b4fbec69e69450293bda754d296ee9d59a80a2
2b4bbd19658bd2d0d4fe36fb3cf6d4eafc45959271a80c0491ac85f9bbc24b54
GET /olsoibyzn-/chatbot.a48592f79a8125fdfc1f.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Cookie: adcloud={%22_les_v%22:%22y%2Cthenewstribune.com%2C1662459877%22}; _sp_id.757a=402e3b23a3d16010.1662458077.1.1662458077.1662458077; _sp_ses.757a=*
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"939-5e79f4c089340"
content-encoding: gzip
x-varnish: 627229181 547529871
x-mi-in-market: 0
server: MI
mi-cache-age: 166334
vary: Accept-Encoding
mi-cache: HIT
content-length: 1026
cache-control: max-age=359712
date: Tue, 06 Sep 2022 09:54:45 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/pageLoad.89a31d5081bdaa9242df.js
200 OK 1.3 kB URL HTTP/2 www.thenewstribune.com/olsoibyzn-/pageLoad.89a31d5081bdaa9242df.js
IP
File type ASCII text, with very long lines (3480), with no line terminators
Hash b7024d58edbfab06579b3260a18ccade
bb9d128671631ba138e4553a187b8d8a6e9e2541
93e79e28936d9c27a5eacce8af8f0a7ecb61529b5da0dda7660c89ab4ee957e5
GET /olsoibyzn-/pageLoad.89a31d5081bdaa9242df.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Cookie: adcloud={%22_les_v%22:%22y%2Cthenewstribune.com%2C1662459877%22}; _sp_id.757a=402e3b23a3d16010.1662458077.1.1662458077.1662458077; _sp_ses.757a=*
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"d98-5e79f4c089340"
content-encoding: gzip
x-varnish: 551322413, 603073010 604281525
x-mi-in-market: 0
server: MI
mi-cache-age: 303
vary: Accept-Encoding
mi-cache: HIT
content-length: 1298
cache-control: max-age=193626
date: Tue, 06 Sep 2022 09:54:45 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/otkstick.3d015990d89752d78b2e.js
200 OK 438 B URL HTTP/2 www.thenewstribune.com/olsoibyzn-/otkstick.3d015990d89752d78b2e.js
IP
File type ASCII text, with very long lines (886), with no line terminators
Hash 2cfa21b502fb3d3ec26fe567b417d9d9
67ebfba5143196545a707ed8d38ee8df0c043f82
df131f892657b2e5b445570038e1c72f8152e43ecdcc6ef1c8b9172b61dec958
GET /olsoibyzn-/otkstick.3d015990d89752d78b2e.js HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Cookie: adcloud={%22_les_v%22:%22y%2Cthenewstribune.com%2C1662459877%22}; _sp_id.757a=402e3b23a3d16010.1662458077.1.1662458077.1662458077; _sp_ses.757a=*
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
surrogate-control: varnish=ESI/2.1
content-type: application/javascript
etag: W/"376-5e79f4c089340"
content-encoding: gzip
x-varnish: 562392757, 127679135 148668792
x-mi-in-market: 0
server: MI
mi-cache-age: 261
vary: Accept-Encoding
mi-cache: HIT
content-length: 438
cache-control: max-age=193519
date: Tue, 06 Sep 2022 09:54:45 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6257
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:10:29 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
cdn.keywee.co/dist/analytics.min.js
301 Moved Permanently 0 B URL HTTP/2 cdn.keywee.co/dist/analytics.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dist/analytics.min.js HTTP/1.1
Host: cdn.keywee.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-length: 0
date: Tue, 06 Sep 2022 09:53:12 GMT
location: /dist/analytics-1.5.12.min.js
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: repn89rZqy0JaAljqpS7AErpZrWtThPgjbpHlRlBfV8s097x4pU3Iw==
age: 94
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/VY1mjOh8Rpc
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/VY1mjOh8Rpc
IP
Hash b9c4efa51ee1c7d038ff0a51b8eca4a8
99665a146100297f93263878c0ba7bcf7f943e93
270c889ae693d94bb7da46841a4278d5319ee823c0c03acc92bd57e55fa19a10
POST /s/gts1d4/VY1mjOh8Rpc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 53e4933126779cbf269a5819d467ad4b
1c3c6b27a0660a44717be304d90834cf2f9cf3ce
ed5ad968f7d95b37c817e86b54062702bef60b1ffd3977248aad23072af06b87
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: JhPfLIaMZX2UH+lm5DEgsGwOcqxT5EXAmdLhtyug3h8RXrpAXf5xs3VwJ2cfnZdzHYxg138pRnnleaQ4SS4dMA==
priority: u=3,i
content-length: 26752
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 09:54:45 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ml314.com/tag.aspx?68
200 OK 32 kB IP
File type ASCII text, with very long lines (31861)
Hash fe36d3317b1b052708eb2260e253aa63
16a85329e1bbcf93af0e79eb76d6ee07a4f74c4a
27d7b573de36acef9ddbf975de05251f5219d2e4b8424288aae62aa57d5a6396
GET /tag.aspx?68 HTTP/1.1
Host: ml314.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsjQLkfZd86gsD58Ulv0uFgMruNu4QORU7jHb8ij-OrDw-PRQdCO7vtKTYL-j31PgfABnej0Pu6zxywk2p48aOYDQ
x-goog-generation: 1660081747697868
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 32025
x-goog-hash: crc32c=BjH7bw==, md5=/jbTMXsbBScI6yJg4lOqYw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
server: UploadServer
date: Tue, 06 Sep 2022 09:16:34 GMT
age: 2291
last-modified: Tue, 09 Aug 2022 21:49:07 GMT
etag: "fe36d3317b1b052708eb2260e253aa63"
content-type: application/javascript
content-length: 32025
cache-control: public,max-age=3600
x-cache-hit: hit
cache-id: ARN-e8c60de5
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 593fa4fb425a91a465731aca61610a82
738950d64e9aa746bb0cda210babaec709cd5c72
57ea163495d8e85795b2cb5cce83da0e3b7ca62c93315bdcf9943064b1fa0f21
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4292
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:43:13 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtag/js?id=AW-848620132
200 OK 46 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-848620132
IP
File type ASCII text, with very long lines (1615)
Hash 90389c5449ab5fe466d6380aacfeeb89
4e1fb7ae388c39aeec507c90bf803a18241df126
90f227632bacf28fcdd91aa019ebaee1daf4f381bc4139acc4e15cb219f1a01a
GET /gtag/js?id=AW-848620132 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Sep 2022 09:54:45 GMT
expires: Tue, 06 Sep 2022 09:54:45 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Sep 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46186
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-48278079-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-48278079-1
IP
File type ASCII text, with very long lines (1615)
Hash e28b95d15cd938e93abb301c94cba8ce
9af7c58e6f0ad0e4fd839ddcd5a5c14c3208dfc5
c245fb9d419be54cd7d8cae0dd6982ba6ef9baf3a4821e8620d1587cc0b88e35
GET /gtag/js?id=UA-48278079-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Sep 2022 09:54:45 GMT
expires: Tue, 06 Sep 2022 09:54:45 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Sep 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41849
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6257
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:10:29 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/s/gts1d4/VY1mjOh8Rpc
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/VY1mjOh8Rpc
IP
Hash b9c4efa51ee1c7d038ff0a51b8eca4a8
99665a146100297f93263878c0ba7bcf7f943e93
270c889ae693d94bb7da46841a4278d5319ee823c0c03acc92bd57e55fa19a10
POST /s/gts1d4/VY1mjOh8Rpc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.thenewstribune.com/olsoibyzn-/pdp.gif?a=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsIm5vdyI6MTY2MjQ1ODA3OTgzMiwibnMiOnRydWV9
200 OK 42 B URL HTTP/2 www.thenewstribune.com/olsoibyzn-/pdp.gif?a=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsIm5vdyI6MTY2MjQ1ODA3OTgzMiwibnMiOnRydWV9
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /olsoibyzn-/pdp.gif?a=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsIm5vdyI6MTY2MjQ1ODA3OTgzMiwibnMiOnRydWV9 HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Cookie: adcloud={%22_les_v%22:%22y%2Cthenewstribune.com%2C1662459877%22}; _sp_id.757a=402e3b23a3d16010.1662458077.1.1662458077.1662458077; _sp_ses.757a=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
etag: "2a-5e79f4c089340"
content-length: 42
surrogate-control: varnish=ESI/2.1
content-type: image/gif
x-varnish: 754399517, 719016613 734334823
x-mi-in-market: 0
server: MI
mi-cache-age: 1174
mi-cache: HIT
cache-control: max-age=604800
date: Tue, 06 Sep 2022 09:54:45 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thenewstribune.com/olsoibyzn-/pdp.gif?k=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsImdwdFJlcXVlc3RlZCI6MjkyOCwibG9hZEV2ZW50U3RhcnQiOjU5NDJ9
200 OK 42 B URL HTTP/2 www.thenewstribune.com/olsoibyzn-/pdp.gif?k=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsImdwdFJlcXVlc3RlZCI6MjkyOCwibG9hZEV2ZW50U3RhcnQiOjU5NDJ9
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /olsoibyzn-/pdp.gif?k=eyJpZCI6Im1pX2FzX3RudF82NjM1NjUyMzc2NDQ5MjM0MTIxMDQwOTQ1NDQxMjU0NTMxMTA1M18xXzBfMTY2MjQ1ODA3NjU3MSIsImdwdFJlcXVlc3RlZCI6MjkyOCwibG9hZEV2ZW50U3RhcnQiOjU5NDJ9 HTTP/1.1
Host: www.thenewstribune.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Cookie: adcloud={%22_les_v%22:%22y%2Cthenewstribune.com%2C1662459877%22}; _sp_id.757a=402e3b23a3d16010.1662458077.1.1662458077.1662458077; _sp_ses.757a=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 15:30:45 GMT
etag: "2a-5e79f4c089340"
content-length: 42
surrogate-control: varnish=ESI/2.1
content-type: image/gif
x-varnish: 629637218 627869422
x-mi-in-market: 0
server: MI
mi-cache-age: 1172
mi-cache: HIT
cache-control: max-age=604756
date: Tue, 06 Sep 2022 09:54:45 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 33c13786303304db2bd5ba28c638b7fe
76cbed8eb2e822045ea61a43e1f80988d336dbc0
a3de19c833b6ca1cb1894fd9adccbd005a5128228a1560a253323001127f4f48
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain;charset=UTF-8
Content-Length: 402
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 06 Sep 2022 09:54:45 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.thenewstribune.com
AN-X-Request-Uuid: 20646a84-556b-413e-b4b6-4d85eea0036c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.p-n.io/pushly-sdk.min.js?domain_key=Nv2FlxP0ilQCLgZJ8iLg2qZHnsOUBRevIweT
200 OK 50 kB URL HTTP/2 cdn.p-n.io/pushly-sdk.min.js?domain_key=Nv2FlxP0ilQCLgZJ8iLg2qZHnsOUBRevIweT
IP
Hash f7dc4ceff3c827a0b56021c1e5acc6c4
8ad565642818338ed275f3c76493db5c1c68f5c2
cf9c98e0bad03e605b9fc6f80fb393c08c3d73efa5186c31a2abcb024fca0536
GET /pushly-sdk.min.js?domain_key=Nv2FlxP0ilQCLgZJ8iLg2qZHnsOUBRevIweT HTTP/1.1
Host: cdn.p-n.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 01 Sep 2022 14:20:10 GMT
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Sep 2022 09:52:28 GMT
cache-control: max-age=900
etag: W/"26baf1184b5a288e02f08767d015110b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kiHDCSv13PrF7GA1l_GtI5fD-pPr9N2QFEiUdn0275oqyYrpLUhvcg==
age: 183
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=zeus_client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=zeus_client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=zeus_client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain;charset=UTF-8
Content-Length: 461
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www.thenewstribune.com
cache-control: no-cache, no-store, must-revalidate
date: Tue, 06 Sep 2022 09:54:45 GMT
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=zeus&v=1&referrer=www.thenewstribune.com&debug=false
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=zeus&v=1&referrer=www.thenewstribune.com&debug=false
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=zeus&v=1&referrer=www.thenewstribune.com&debug=false HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 203
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data,sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-arch,sec-ch-rtt,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-viewport-width
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=ym_n-Azerion_cnv_n-nativo_n-amobee
302 Found 0 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=ym_n-Azerion_cnv_n-nativo_n-amobee
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=ym_n-Azerion_cnv_n-nativo_n-amobee HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Tue, 06 Sep 2022 09:54:45 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: PTJE8R3WRS1TEY802QG4
Set-Cookie: ad-id=AxjWZCxXD0_VoBKcdEKY60I|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Apr-2023 09:54:45 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=ym_n-Azerion_cnv_n-nativo_n-amobee&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.digicert.com/
200 OK 312 B IP
Hash e632663997bd51d92fcd3c6bccf98779
ae0398e3c50ce117ee831fc70418d4cb63faaf26
9235d8f20ba8a74dcfe2ea02f72ec0a73749889a1815018a3940e0d65ef0a74c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5342
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:25:43 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 471 B IP
Hash 3d1cad9eb15aa87964dbd1c5d55b70b8
e6bf0624f388e84ae086cf6374b77ccf800a3a64
53ff7459e8a074f5d993eb9750cfbd3a7ac12c4e529cdeade00165fd55c097d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5533
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:22:32 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=gaGZ-l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdSTGs1WndBeDljUE4xME9janpuWEZ6NGZTU3NsOU5Wb3VMSUl5NkJ2Nlo; expires=Sun, 01 Oct 2023 09:54:45 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 291754
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=ym_n-Azerion_cnv_n-nativo_n-amobee&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=ym_n-Azerion_cnv_n-nativo_n-amobee&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=ym_n-Azerion_cnv_n-nativo_n-amobee&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Tue, 06 Sep 2022 09:54:45 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: NV6NASCZGJ7CD7J33SJW
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
secure-us.imrworldwide.com/cgi-bin/m?ci=us-203838h&cg=0&cc=1&si=https%3A//www.thenewstribune.com/&rp=&ts=compact&rnd=1662458079935
302 Found 0 B URL HTTP/2 secure-us.imrworldwide.com/cgi-bin/m?ci=us-203838h&cg=0&cc=1&si=https%3A//www.thenewstribune.com/&rp=&ts=compact&rnd=1662458079935
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/m?ci=us-203838h&cg=0&cc=1&si=https%3A//www.thenewstribune.com/&rp=&ts=compact&rnd=1662458079935 HTTP/1.1
Host: secure-us.imrworldwide.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 06 Sep 2022 09:54:45 GMT
content-length: 0
location: https://secure-us.imrworldwide.com/cgi-bin/m?ci=us-203838h&cg=0&cc=1&si=https%3A//www.thenewstribune.com/&rp=&ts=compact&rnd=1662458079935&ja=1
server: nginx
set-cookie: IMRID=eff9df00-2dc9-11ed-bcf9-43cf5cad69c2; Path=/;Secure;SameSite=None; Domain=imrworldwide.com; Expires=Sun, 01-Oct-2023 09:54:45 GMT; Max-Age=33696000
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
cache-control: no-cache
p3p: P3P policyref="http://secure-us.imrworldwide.com/w3c/p3p.xml", CP="NOI DSP COR NID PSA ADM OUR IND UNI NAV COM"
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9cf93a31f6df47dfb7ef12ef92b3262a
18c7cc0a3d05d0ef8264713d0b43f98ed96a82b8
692d672cd02dc3a7307fc538b5492f5f61c38485bdc2040d191ac289c3a12123
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:39:13 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LILb-Maq6AgORCkBpU7AzOaqDY3JheHaMVM63heAYCcK97TziZdQxw==
Age: 4532
ocsp.digicert.com/
200 OK 313 B IP
Hash 0e67c7a0ceeea97801466561b664c0ba
855912e814f1d41d610e62486162b5161f939f1d
cd3ae9d74bdacb116c513b2c07abf7ed96464ac2410ccccdc00e89d09ee2f46d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3378
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:58:27 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 313
ocsp.sectigo.com/
200 OK 472 B IP
Hash 5fd350dfc3d8df32e8fa14f2aef35a79
8ee12debf63b4fef31251a4659133018abf50299
100c7e362ffd77297276a0c71d7c661c3d8556f592a49e93344791fac75a1b8f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:45 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 09:46:08 GMT
Expires: Sun, 11 Sep 2022 09:46:07 GMT
Etag: "8ee12debf63b4fef31251a4659133018abf50299"
Cache-Control: max-age=430881,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466533a5b031c12-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 298844fbfeaba6b046f8c455ae07798f
1c639c336d6b939defc8b6211902cfa0f22827cd
0bd8acc160e1da018647e0b76f15b0b780f757eae193d8b2e34a49fc435037a0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:12:53 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iwVBl5ARyXPOpsRwlUUEGhSPaacJKoSDe7D7p3cCQnWWs5bf_BzG6Q==
Age: 6112
ocsp.digicert.com/
200 OK 313 B IP
Hash 0e67c7a0ceeea97801466561b664c0ba
855912e814f1d41d610e62486162b5161f939f1d
cd3ae9d74bdacb116c513b2c07abf7ed96464ac2410ccccdc00e89d09ee2f46d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3360
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:58:45 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 313
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 298844fbfeaba6b046f8c455ae07798f
1c639c336d6b939defc8b6211902cfa0f22827cd
0bd8acc160e1da018647e0b76f15b0b780f757eae193d8b2e34a49fc435037a0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:45 GMT
Last-Modified: Tue, 06 Sep 2022 08:17:33 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qfJx6gnMIUGmbV809Q95Ea3jCYnbQjb6TgmDFxw-7bxktzg-E0JyXA==
Age: 5832
tags.srv.stackadapt.com/events.js
200 OK 5.4 kB URL HTTP/1.1 tags.srv.stackadapt.com/events.js
IP
File type ASCII text, with very long lines (16677)
Hash 9b63a0c2498d58278bafeaeb740cc0a4
eae7ae225d919ceee7f09cf4f008118d73ea148b
c467f3ad610b69f8a424ff3c1b84515c9c56b0367a506c691f7ec363cf1a6abb
GET /events.js HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: max-age=5
Content-Encoding: gzip
Content-Type: text/javascript
Date: Tue, 06 Sep 2022 09:54:45 GMT
Set-Cookie: sa-user-id=s%3A0-a8d876cc-f998-40a5-57f8-ee84b2a7b38f.npXMIA2K4Fesszuzn4Qqtb06GmK3Hj2tyJR20tD9Mx0; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3AqNh2zPmYQKVX-O6Esqezj1taKpo.%2BHrlS361%2F3a2VnmxcxK2FTgmfYO6GodkHDBYogepuO4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 5397
Connection: keep-alive
api.ipify.org/?format=json
200 OK 21 B URL HTTP/1.1 api.ipify.org/?format=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7d69c71af0f191e9a72db6153f8018d1
f67c5f2887bc05654b47f76e9621e53a4091aed1
5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65
GET /?format=json HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
Access-Control-Allow-Origin: https://www.thenewstribune.com
Content-Type: application/json
Vary: Origin
Date: Tue, 06 Sep 2022 09:54:45 GMT
Content-Length: 21
Via: 1.1 vegur
sqs.us-east-1.amazonaws.com/397719490216/Test_oPS_Script_Loads?Action=SendMessage&MessageBody=cid%3D11%26bt%3DFirefox
200 OK 378 B URL HTTP/1.1 sqs.us-east-1.amazonaws.com/397719490216/Test_oPS_Script_Loads?Action=SendMessage&MessageBody=cid%3D11%26bt%3DFirefox
IP
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (378), with no line terminators
Hash 56822382b349ab8680afbc5e780154ec
caf9b995bee72450bab54ac86dc40f14ecaffe9b
146a0509ce312dca794aa4e4853353c9047f22c8383857a08331150aae09712a
POST /397719490216/Test_oPS_Script_Loads?Action=SendMessage&MessageBody=cid%3D11%26bt%3DFirefox HTTP/1.1
Host: sqs.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
x-amzn-RequestId: f28b69c1-fb24-5e45-a3e9-3250e0016468
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Date: Tue, 06 Sep 2022 09:54:45 GMT
Content-Type: text/xml
Content-Length: 378
sqs.us-east-1.amazonaws.com/397719490216/T-STICKY-INIT?Action=SendMessage&MessageBody=host%3Dwww.thenewstribune.com%26path%3D%2F
200 OK 378 B URL HTTP/1.1 sqs.us-east-1.amazonaws.com/397719490216/T-STICKY-INIT?Action=SendMessage&MessageBody=host%3Dwww.thenewstribune.com%26path%3D%2F
IP
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (378), with no line terminators
Hash 85ce16d3b98eb74ef8fdc3429401aeaa
e3650d294df98fed7394ea2eb6fdb128e97c58a6
3a1a3ef7539015b38335899aba920051f4f153dac224e69f2561d3e2baf8927b
POST /397719490216/T-STICKY-INIT?Action=SendMessage&MessageBody=host%3Dwww.thenewstribune.com%26path%3D%2F HTTP/1.1
Host: sqs.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amzn-RequestId: 63b53d54-49ac-5994-8a8a-66c552890fdf
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Date: Tue, 06 Sep 2022 09:54:45 GMT
Content-Type: text/xml
Content-Length: 378
ocsp.usertrust.com/
200 OK 472 B IP
Hash 22fa49425a2504cd00284e347fae08f1
510b648d59664845f3dc399f82eadb332d1a4c3f
eb72c614afec7bf254390c83f3fe23c826f2d6adfb6c1945bf63e87e5f5b4c8c
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:45 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 15:07:59 GMT
Expires: Sat, 10 Sep 2022 15:07:58 GMT
Etag: "510b648d59664845f3dc399f82eadb332d1a4c3f"
Cache-Control: max-age=602389,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 531
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7466533c7cf6b505-OSL
protected-by.clarium.io/pixel?tag=wt_YXdNeFZaTHBOVzZLNkVHNldDNVM4b1JfYTY4LzMwNzU1NDE4NjI6MXgx&v=5&s=v31gc93ib3l&id=eyJkZnAiOnsiYWQiOjUxNjg3Nzc0NjcsImMiOjEzODQwMzMxMDU5OCwibCI6NjEwMTk1ODQyNCwibyI6MzA3NTU0MTg2MiwiQSI6Ii83Njc1L1RBQy5zaXRlX3RoZW5ld3N0cmlidW5lL19Ib21lUGFnZSIsInkiOjAsImNvIjowLCJzIjoiemV1c19vdmVybGF5In19&sb=undefined&cb=6611256&h=www.thenewstribune.com&d=eyJ3aCI6IllYZE5lRlphVEhCT1Z6WkxOa1ZITmxkRE5WTTRiMUpmWVRZNEx6TXdOelUxTkRFNE5qSTZNWGd4Iiwid2QiOnsibyI6MzA3NTU0MTg2MiwidyI6IjEiLCJoIjoiMSJ9LCJ3ciI6Mn0=
200 OK 68 B URL HTTP/1.1 protected-by.clarium.io/pixel?tag=wt_YXdNeFZaTHBOVzZLNkVHNldDNVM4b1JfYTY4LzMwNzU1NDE4NjI6MXgx&v=5&s=v31gc93ib3l&id=eyJkZnAiOnsiYWQiOjUxNjg3Nzc0NjcsImMiOjEzODQwMzMxMDU5OCwibCI6NjEwMTk1ODQyNCwibyI6MzA3NTU0MTg2MiwiQSI6Ii83Njc1L1RBQy5zaXRlX3RoZW5ld3N0cmlidW5lL19Ib21lUGFnZSIsInkiOjAsImNvIjowLCJzIjoiemV1c19vdmVybGF5In19&sb=undefined&cb=6611256&h=www.thenewstribune.com&d=eyJ3aCI6IllYZE5lRlphVEhCT1Z6WkxOa1ZITmxkRE5WTTRiMUpmWVRZNEx6TXdOelUxTkRFNE5qSTZNWGd4Iiwid2QiOnsibyI6MzA3NTU0MTg2MiwidyI6IjEiLCJoIjoiMSJ9LCJ3ciI6Mn0=
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /pixel?tag=wt_YXdNeFZaTHBOVzZLNkVHNldDNVM4b1JfYTY4LzMwNzU1NDE4NjI6MXgx&v=5&s=v31gc93ib3l&id=eyJkZnAiOnsiYWQiOjUxNjg3Nzc0NjcsImMiOjEzODQwMzMxMDU5OCwibCI6NjEwMTk1ODQyNCwibyI6MzA3NTU0MTg2MiwiQSI6Ii83Njc1L1RBQy5zaXRlX3RoZW5ld3N0cmlidW5lL19Ib21lUGFnZSIsInkiOjAsImNvIjowLCJzIjoiemV1c19vdmVybGF5In19&sb=undefined&cb=6611256&h=www.thenewstribune.com&d=eyJ3aCI6IllYZE5lRlphVEhCT1Z6WkxOa1ZITmxkRE5WTTRiMUpmWVRZNEx6TXdOelUxTkRFNE5qSTZNWGd4Iiwid2QiOnsibyI6MzA3NTU0MTg2MiwidyI6IjEiLCJoIjoiMSJ9LCJ3ciI6Mn0= HTTP/1.1
Host: protected-by.clarium.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Content-Type: image/png
Date: Tue, 06 Sep 2022 09:54:45 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Server: nginx/1.14.0 (Ubuntu)
Content-Length: 68
Connection: keep-alive
bidder.criteo.com/csm/events
204 No Content 0 B URL HTTP/2 bidder.criteo.com/csm/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csm/events HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 373
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 06 Sep 2022 09:54:45 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://www.thenewstribune.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.keywee.co/config/3010.js
200 OK 233 B URL HTTP/2 cdn.keywee.co/config/3010.js
IP
File type ASCII text, with no line terminators
Hash 51f706873a22c9e9323bb2287a56f12f
1e4857dd5e3339d4abc89eb5af4d100dfd1d8b59
1b0e1674c02f640e5d5a68715fd543e1db29a641ef8dd1314eb6686eef3ef58a
GET /config/3010.js HTTP/1.1
Host: cdn.keywee.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 233
last-modified: Fri, 25 Feb 2022 21:45:07 GMT
server: AmazonS3
date: Mon, 05 Sep 2022 14:12:46 GMT
cache-control: max-age=86400
etag: "51f706873a22c9e9323bb2287a56f12f"
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ksEvu2Y-h4TUjn6DhTzV0MVPUZ-aA7IcrWBW7TOQQZjAdyDMRZU6RQ==
age: 70920
X-Firefox-Spdy: h2
protected-by.clarium.io/pixel?tag=wt_YXdNeFZaTHBOVzZLNkVHNldDNVM4b1JfYTY4LzMwMjMxOTI4MjY6NzI4eDkw&v=5&s=v31gc93ib7l&id=eyJkZnAiOnsiYWQiOjUwMTU3MTcyNDgsImMiOjEzODQwMjE3NzM5OCwibCI6NjA5NjE3NDY0MywibyI6MzAyMzE5MjgyNiwiQSI6Ii83Njc1L1RBQy5zaXRlX3RoZW5ld3N0cmlidW5lL19Ib21lUGFnZSIsInkiOjAsImNvIjowLCJzIjoiemV1c190b3AtYmFubmVyIn19&sb=undefined&cb=1284386&h=www.thenewstribune.com&d=eyJ3aCI6IllYZE5lRlphVEhCT1Z6WkxOa1ZITmxkRE5WTTRiMUpmWVRZNEx6TXdNak14T1RJNE1qWTZOekk0ZURrdyIsIndkIjp7Im8iOjMwMjMxOTI4MjYsInciOiI3MjgiLCJoIjoiOTAifSwid3IiOjJ9
200 OK 68 B URL HTTP/1.1 protected-by.clarium.io/pixel?tag=wt_YXdNeFZaTHBOVzZLNkVHNldDNVM4b1JfYTY4LzMwMjMxOTI4MjY6NzI4eDkw&v=5&s=v31gc93ib7l&id=eyJkZnAiOnsiYWQiOjUwMTU3MTcyNDgsImMiOjEzODQwMjE3NzM5OCwibCI6NjA5NjE3NDY0MywibyI6MzAyMzE5MjgyNiwiQSI6Ii83Njc1L1RBQy5zaXRlX3RoZW5ld3N0cmlidW5lL19Ib21lUGFnZSIsInkiOjAsImNvIjowLCJzIjoiemV1c190b3AtYmFubmVyIn19&sb=undefined&cb=1284386&h=www.thenewstribune.com&d=eyJ3aCI6IllYZE5lRlphVEhCT1Z6WkxOa1ZITmxkRE5WTTRiMUpmWVRZNEx6TXdNak14T1RJNE1qWTZOekk0ZURrdyIsIndkIjp7Im8iOjMwMjMxOTI4MjYsInciOiI3MjgiLCJoIjoiOTAifSwid3IiOjJ9
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /pixel?tag=wt_YXdNeFZaTHBOVzZLNkVHNldDNVM4b1JfYTY4LzMwMjMxOTI4MjY6NzI4eDkw&v=5&s=v31gc93ib7l&id=eyJkZnAiOnsiYWQiOjUwMTU3MTcyNDgsImMiOjEzODQwMjE3NzM5OCwibCI6NjA5NjE3NDY0MywibyI6MzAyMzE5MjgyNiwiQSI6Ii83Njc1L1RBQy5zaXRlX3RoZW5ld3N0cmlidW5lL19Ib21lUGFnZSIsInkiOjAsImNvIjowLCJzIjoiemV1c190b3AtYmFubmVyIn19&sb=undefined&cb=1284386&h=www.thenewstribune.com&d=eyJ3aCI6IllYZE5lRlphVEhCT1Z6WkxOa1ZITmxkRE5WTTRiMUpmWVRZNEx6TXdNak14T1RJNE1qWTZOekk0ZURrdyIsIndkIjp7Im8iOjMwMjMxOTI4MjYsInciOiI3MjgiLCJoIjoiOTAifSwid3IiOjJ9 HTTP/1.1
Host: protected-by.clarium.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Content-Type: image/png
Date: Tue, 06 Sep 2022 09:54:45 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Server: nginx/1.14.0 (Ubuntu)
Content-Length: 68
Connection: keep-alive
pxl.qccerttest.com/pixel?r=537018031;fpan=1;fpa=P0-701281659-1662458080531;pbc=;ns=1;ce=1;qjs=1;qv=087c24cc-20220902090643;ref=;cm=;gdpr=0;d=thenewstribune.com;dst=0;et=1662458080530;tzo=0;url=https%3A%2F%2Fwww.thenewstribune.com%2F;ogl=
200 OK 35 B URL HTTP/2 pxl.qccerttest.com/pixel?r=537018031;fpan=1;fpa=P0-701281659-1662458080531;pbc=;ns=1;ce=1;qjs=1;qv=087c24cc-20220902090643;ref=;cm=;gdpr=0;d=thenewstribune.com;dst=0;et=1662458080530;tzo=0;url=https%3A%2F%2Fwww.thenewstribune.com%2F;ogl=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel?r=537018031;fpan=1;fpa=P0-701281659-1662458080531;pbc=;ns=1;ce=1;qjs=1;qv=087c24cc-20220902090643;ref=;cm=;gdpr=0;d=thenewstribune.com;dst=0;et=1662458080530;tzo=0;url=https%3A%2F%2Fwww.thenewstribune.com%2F;ogl= HTTP/1.1
Host: pxl.qccerttest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 35
last-modified: Thu, 04 Aug 2022 16:01:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 02:29:19 GMT
etag: "55d25e9dc950d5db4d53a3b195c046c6"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jZzKxCECRNvd1rf0TfFGQa7115sD8svGokPexGb26PlWbMzKn3eQHw==
age: 26727
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 282e30bb1ff2decb700d84bebff341b5
17041adbfb3fd69fbf47f1a86e0816cdd2274a40
3a71f5e28f466482b547f62fbfa8cdc07f64a79fcf57ca56e0c854576ff7bbaa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20220831/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220831/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1621)
Hash a4c731f85862faf40d4fae51bf83fb0c
537ddcb9b854155e5f9136d0585dd54e26447baf
0826f7dfc1e4a221aba4cc7c381d0259c54f5fed8a9f50c0a247696f40af2d49
GET /pagead/js/r20220831/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9632
x-xss-protection: 0
date: Tue, 06 Sep 2022 09:42:46 GMT
expires: Tue, 20 Sep 2022 09:42:46 GMT
cache-control: public, max-age=1209600
etag: 2755732409155645664
content-type: text/javascript; charset=UTF-8
age: 719
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pixel.quantserve.com/pixel;r=1917664736;labels=TNT;rf=0;a=p-50B2Fi6bBqYto;url=https%3A%2F%2Fwww.thenewstribune.com%2F;uht=2;fpan=0;fpa=P0-701281659-1662458080531;pbc=;ns=1;ce=1;qjs=1;qv=087c24cc-20220902090643;cm=;gdpr=0;ref=;d=thenewstribune.com;dst=0;et=1662458080532;tzo=0;ogl=;ses=6ab04758-b9e0-4e31-b753-3396400d0dc4
200 OK 35 B URL HTTP/2 pixel.quantserve.com/pixel;r=1917664736;labels=TNT;rf=0;a=p-50B2Fi6bBqYto;url=https%3A%2F%2Fwww.thenewstribune.com%2F;uht=2;fpan=0;fpa=P0-701281659-1662458080531;pbc=;ns=1;ce=1;qjs=1;qv=087c24cc-20220902090643;cm=;gdpr=0;ref=;d=thenewstribune.com;dst=0;et=1662458080532;tzo=0;ogl=;ses=6ab04758-b9e0-4e31-b753-3396400d0dc4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel;r=1917664736;labels=TNT;rf=0;a=p-50B2Fi6bBqYto;url=https%3A%2F%2Fwww.thenewstribune.com%2F;uht=2;fpan=0;fpa=P0-701281659-1662458080531;pbc=;ns=1;ce=1;qjs=1;qv=087c24cc-20220902090643;cm=;gdpr=0;ref=;d=thenewstribune.com;dst=0;et=1662458080532;tzo=0;ogl=;ses=6ab04758-b9e0-4e31-b753-3396400d0dc4 HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=631718e5-ecb35-81aa4-fb414; expires=Sat, 07-Oct-2023 09:54:45 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1081709588515684&ev=PageView&dl=https%3A%2F%2Fwww.thenewstribune.com%2F&rl=&if=true&ts=1662458080602&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662458080601.211245358&it=1662458080160&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=1081709588515684&ev=PageView&dl=https%3A%2F%2Fwww.thenewstribune.com%2F&rl=&if=true&ts=1662458080602&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662458080601.211245358&it=1662458080160&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=1081709588515684&ev=PageView&dl=https%3A%2F%2Fwww.thenewstribune.com%2F&rl=&if=true&ts=1662458080602&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662458080601.211245358&it=1662458080160&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 09:54:46 GMT
expires: Tue, 06 Sep 2022 09:54:46 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.p-n.io/pushly-sdk.min.css?domain_key=Nv2FlxP0ilQCLgZJ8iLg2qZHnsOUBRevIweT
200 OK 2.2 kB URL HTTP/2 cdn.p-n.io/pushly-sdk.min.css?domain_key=Nv2FlxP0ilQCLgZJ8iLg2qZHnsOUBRevIweT
IP
Hash 6dc2e731e22d1f60741b6495ba7111aa
11520ef15f0b140670476bc319abce4612972485
be2e36143a0c57db25205022891515eb6210d00ca9a0cd1537b4493d78de1ca0
GET /pushly-sdk.min.css?domain_key=Nv2FlxP0ilQCLgZJ8iLg2qZHnsOUBRevIweT HTTP/1.1
Host: cdn.p-n.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 28 Jun 2022 18:34:08 GMT
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Sep 2022 04:36:12 GMT
cache-control: max-age=86400
etag: W/"f3cd76bbdf477b890d940ce319bd1d16"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nFnUekgcrAf5tKuCPp1NMAo__2qFP0wTdzI5qG7yo9uLdDTlCUM8mw==
age: 19114
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 71c9315e1d4362f28a7a3af87b582888
e6ada50160bdcb46ab7c7ef94a025b5c832471d9
9096189efaf1db927e6e7731b42766cbec49c11500ef6045a46c22d844af14b0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:46 GMT
Last-Modified: Tue, 06 Sep 2022 09:45:03 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: x67T-PRrpS-1kjOsxyUvZgIg10IVZbBPQIMtqsEyEvn67BxZ3WZ4rQ==
Age: 583
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Tue, 06 Sep 2022 08:41:12 GMT
expires: Tue, 06 Sep 2022 10:41:12 GMT
cache-control: public, max-age=7200
age: 4414
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
secure-us.imrworldwide.com/cgi-bin/m?ci=us-203838h&cg=0&cc=1&si=https%3A//www.thenewstribune.com/&rp=&ts=compact&rnd=1662458079935&ja=1
200 OK 44 B URL HTTP/2 secure-us.imrworldwide.com/cgi-bin/m?ci=us-203838h&cg=0&cc=1&si=https%3A//www.thenewstribune.com/&rp=&ts=compact&rnd=1662458079935&ja=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 354857de9229bae15647fbc6364a4b19
f23e9c4fadc2e01bf323e90e5c1459bb6cf4f917
5ecb58845a9ac30e4eb4b18eb0e7431ba1fb195ce035309735efaee67421c7a3
GET /cgi-bin/m?ci=us-203838h&cg=0&cc=1&si=https%3A//www.thenewstribune.com/&rp=&ts=compact&rnd=1662458079935&ja=1 HTTP/1.1
Host: secure-us.imrworldwide.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:46 GMT
content-type: image/gif
content-length: 44
server: nginx
set-cookie: IMRID=f040d310-2dc9-11ed-9442-67857098aeb2; Path=/;Secure;SameSite=None; Domain=imrworldwide.com; Expires=Sun, 01-Oct-2023 09:54:46 GMT; Max-Age=33696000
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
cache-control: no-cache
p3p: P3P policyref="http://secure-us.imrworldwide.com/w3c/p3p.xml", CP="NOI DSP COR NID PSA ADM OUR IND UNI NAV COM"
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/848620132/?random=1662458080653&cv=9&fst=1662458080653&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8v0&sendb=1&ig=0&data=event%3Dgtag.config&frm=1&url=https%3A%2F%2Fwww.thenewstribune.com%2F&tiba=ggaw&auid=725427830.1662458080&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/848620132/?random=1662458080653&cv=9&fst=1662458080653&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8v0&sendb=1&ig=0&data=event%3Dgtag.config&frm=1&url=https%3A%2F%2Fwww.thenewstribune.com%2F&tiba=ggaw&auid=725427830.1662458080&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2218), with no line terminators
Hash 86d974834dae1da1112d3789d2c8b343
5d8dcb160c9220d4af925eb9bbde16c755d3646c
9fe07130bdb6f7a5017fb6b64d60a08cc2e619dfe46064d6bd3d027ca98e3bc9
GET /pagead/viewthroughconversion/848620132/?random=1662458080653&cv=9&fst=1662458080653&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8v0&sendb=1&ig=0&data=event%3Dgtag.config&frm=1&url=https%3A%2F%2Fwww.thenewstribune.com%2F&tiba=ggaw&auid=725427830.1662458080&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Sep 2022 09:54:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1023
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Sep-2022 10:09:46 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 21 kB URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
File type JSON data\012- , ASCII text, with very long lines (60036)
Hash 407ad235757711b5df5fe56573f72b8f
a75e71dbb2997aa68b899174471f1527c8176395
5b58bd19e88bcaabcd931fd82d13fb05ea1776f52444c21a02fd10da69dd271c
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:44 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 88213
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn-prod.securiti.ai/consent/cookie_banner/0451dd58-47bb-4a6e-9e6f-7fbe4070b019/e1f7f95d-86a8-43ee-baa1-dbf966e10daa/en.json
200 OK 142 kB URL HTTP/2 cdn-prod.securiti.ai/consent/cookie_banner/0451dd58-47bb-4a6e-9e6f-7fbe4070b019/e1f7f95d-86a8-43ee-baa1-dbf966e10daa/en.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Size 142 kB (142302 bytes)
Hash 77a5060f94fd124c4b44a7ddd0ebe25e
f6371b7fbfe41bd6534a223cc4857338a206f623
fe0171e0d494eca0f078ac451d07b9b9244b70d2493a0eb01ef79a55d0e404e1
GET /consent/cookie_banner/0451dd58-47bb-4a6e-9e6f-7fbe4070b019/e1f7f95d-86a8-43ee-baa1-dbf966e10daa/en.json HTTP/1.1
Host: cdn-prod.securiti.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 0
last-modified: Fri, 22 Jul 2022 17:53:43 GMT
x-amz-version-id: c0KbMf8nP069BEsl9kSWkPTG_QU34XfF
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'
x-frame-options: DENY
content-encoding: gzip
date: Tue, 06 Sep 2022 06:49:47 GMT
cache-control: public,max-age=86400
etag: W/"b6c4aafa48fe3d2839a7667afee59d8b"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gLOHz7-t7MksLG5CeUToD2JWuPw25R1FGPlDViHsYRjGdPUzjMuZ9w==
age: 11099
X-Firefox-Spdy: h2
cdn.keywee.co/dist/sp-2.9.1.js
200 OK 26 kB URL HTTP/2 cdn.keywee.co/dist/sp-2.9.1.js
IP
Hash 3d0552f3def56c91b7b9d3a014f722a5
40f896d3ee8a74443d8ec4244502b7ad1516b776
991dd3da5ca5b4e419a74db3aefe32ce9d6de9c2957e89b3d79b587c6434e206
GET /dist/sp-2.9.1.js HTTP/1.1
Host: cdn.keywee.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Wed, 13 Jul 2022 03:32:47 GMT
cache-control: max-age=315360000
last-modified: Sun, 14 Oct 2018 12:37:03 GMT
etag: W/"e0e6c30dc2f18c8cee12448a4cbb07eb"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5wsQyJu38t4X6ceqtE5dSD0Yol5hPGsrel77hJE1uVnWNCeL1lQnzA==
age: 4774920
X-Firefox-Spdy: h2
media.p-n.io/domain_8798/images/OPtzMkPTPiHGfgQEpMJ4_mXcCGvQUs6kvX8PVPhknmE5n1hHtOVfG0d9p.png
200 OK 62 kB URL HTTP/2 media.p-n.io/domain_8798/images/OPtzMkPTPiHGfgQEpMJ4_mXcCGvQUs6kvX8PVPhknmE5n1hHtOVfG0d9p.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 76db613a9e7d60aba5d7aa4ca725bc52
1784447b15db88ab62cd0d56cded116ac7dbacda
3e7677b3bbcdba398c78cda6053d73cdeca7b6a9a49e84e95c80c782caa5b6e2
GET /domain_8798/images/OPtzMkPTPiHGfgQEpMJ4_mXcCGvQUs6kvX8PVPhknmE5n1hHtOVfG0d9p.png HTTP/1.1
Host: media.p-n.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 62432
last-modified: Mon, 05 Aug 2019 13:59:54 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:59:34 GMT
etag: "76db613a9e7d60aba5d7aa4ca725bc52"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gviWbtchx7hDSISocDtHe0Numqf9ykjXY9hcRs-dYyhHqYUHgwX2Uw==
age: 28513
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3271e6b562b52afac81678e0895a93e6
e23e62306f9ecf0f86b4a252c1987d994c44b052
65069deb60a5290e4e6aa01a1063754d9881718ee304e4d6924e53286269c74e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 09:54:46 GMT
Last-Modified: Tue, 06 Sep 2022 09:07:16 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7WbkkGOGLXnaKAjz32825VHUZSxHlKvFSXcnWX2-MZkcdiYJK5nKsQ==
Age: 2850
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e1336388cf579034dbc18680696da587
6d633baf8cf123d56a6da8bba402659ad4cb7c08
7d44c52a9037bd2cf2069acccacc49bf38f4c392fd92a6d4f1bfd4623cdcc49e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/848620132/?random=1662458080653&cv=9&fst=1662454800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8v0&sendb=1&data=event%3Dgtag.config&frm=1&url=https%3A%2F%2Fwww.thenewstribune.com%2F&tiba=ggaw&async=1&fmt=3&is_vtc=1&random=1392374959&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/848620132/?random=1662458080653&cv=9&fst=1662454800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8v0&sendb=1&data=event%3Dgtag.config&frm=1&url=https%3A%2F%2Fwww.thenewstribune.com%2F&tiba=ggaw&async=1&fmt=3&is_vtc=1&random=1392374959&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/848620132/?random=1662458080653&cv=9&fst=1662454800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa8v0&sendb=1&data=event%3Dgtag.config&frm=1&url=https%3A%2F%2Fwww.thenewstribune.com%2F&tiba=ggaw&async=1&fmt=3&is_vtc=1&random=1392374959&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Sep 2022 09:54:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
edge.quantserve.com/quant.js
200 OK 16 kB URL HTTP/2 edge.quantserve.com/quant.js
IP
File type ASCII text, with very long lines (26638)
Hash 96a50900afb495f8dfb0bfd306b342e0
6ca24b6b3c710102ed2a79c80d3bd392350beac6
f5edeaa6bfa8e99dde4e2f809ea5be394163f54945a22847c9811d71bbde3c90
GET /quant.js HTTP/1.1
Host: edge.quantserve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "3K3nn1ChiYCKxJYFUmbsHw=="
expires: Tue, 13 Sep 2022 09:54:45 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
app.securiti.ai/core/v1/utils/geo/location
200 OK 740 B URL HTTP/2 app.securiti.ai/core/v1/utils/geo/location
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (677), with no line terminators
Hash c7764c9d79fd1ab80a66c3ff09185bbf
36cee788aa5a820bdd6483e319d59ea1040761e1
a692fb518bdd5c8043c56b0a05e21411fed133a3c2182b2db81d6215de379dc4
GET /core/v1/utils/geo/location HTTP/1.1
Host: app.securiti.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:46 GMT
content-type: application/json; charset=utf-8
content-length: 740
access-control-allow-origin: https://www.thenewstribune.com
content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline';
set-cookie: _xsrf=dHVmWDV4dk8xZTV5dkJDS1NWTHltSGROejZzbURNaTQ=|1662458086229188592|3d10881287571763bc5c49fdfc20383eb5f67a74; Expires=Tue, 06 Sep 2022 10:54:46 UTC; Max-Age=3600; Path=/; Domain=app.securiti.ai; Secure; SameSite=lax
strict-transport-security: max-age=315360000
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjoiNjA5NjE3NDY0MyIsImVidXkiOiIzMDIzMTkyODI2IiwiZWFkdiI6IjUwMTU3MTcyNDgiLCJlY2lkIjoiMTM4NDAyMTc3Mzk4IiwiZWVudiI6ImoiLCJlcGlkIjoiMTQ0ODUzNzQiLCJlc2lkIjoiMTQ0ODUyNTQifQ&tv=js-3.0.148&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=link&res=1280x1024&cd=24&cookie=1&f_es6=1&f_gears=2&tvltm=8&tvcfg=all&tid=db709c36-ddc0-4979-a5fe-87450406056e&pid=1b8540f8-03ac-49d5-adea-17ba2bea4063&dtm=1662458080823&qnm=_matherq&visible=1&tabid=6b59e8ec-635f-4a8f-a004-fed64f277c26&url=https%3A%2F%2Fwww.thenewstribune.com%2F&vp=0x0&ds=0x0&tofa=1662458077&vid=1&lvidt=1662458077&duid=402e3b23a3d16010&fp=1326250463&cid=ma12095&mrk=74930801
200 OK 43 B URL HTTP/1.1 www.i.matheranalytics.com/i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjoiNjA5NjE3NDY0MyIsImVidXkiOiIzMDIzMTkyODI2IiwiZWFkdiI6IjUwMTU3MTcyNDgiLCJlY2lkIjoiMTM4NDAyMTc3Mzk4IiwiZWVudiI6ImoiLCJlcGlkIjoiMTQ0ODUzNzQiLCJlc2lkIjoiMTQ0ODUyNTQifQ&tv=js-3.0.148&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=link&res=1280x1024&cd=24&cookie=1&f_es6=1&f_gears=2&tvltm=8&tvcfg=all&tid=db709c36-ddc0-4979-a5fe-87450406056e&pid=1b8540f8-03ac-49d5-adea-17ba2bea4063&dtm=1662458080823&qnm=_matherq&visible=1&tabid=6b59e8ec-635f-4a8f-a004-fed64f277c26&url=https%3A%2F%2Fwww.thenewstribune.com%2F&vp=0x0&ds=0x0&tofa=1662458077&vid=1&lvidt=1662458077&duid=402e3b23a3d16010&fp=1326250463&cid=ma12095&mrk=74930801
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 24290d55bbf8c5c8712543cf56ebe357
90d0084e78e359a9dbc746642d836df93a0ca697
d6fbd6d46b0a1be6a3cdc49f712f83d661805a42fc37993340e2cc4493819adc
GET /i?e=ue&ue_na=Ad%20Impression&ue_px=eyJlYWlkIjoiNjA5NjE3NDY0MyIsImVidXkiOiIzMDIzMTkyODI2IiwiZWFkdiI6IjUwMTU3MTcyNDgiLCJlY2lkIjoiMTM4NDAyMTc3Mzk4IiwiZWVudiI6ImoiLCJlcGlkIjoiMTQ0ODUzNzQiLCJlc2lkIjoiMTQ0ODUyNTQifQ&tv=js-3.0.148&tna=Mather&aid=v1&p=web&tz=UTC&tzoff=0&lang=en-US&cs=UTF-8&navt=link&res=1280x1024&cd=24&cookie=1&f_es6=1&f_gears=2&tvltm=8&tvcfg=all&tid=db709c36-ddc0-4979-a5fe-87450406056e&pid=1b8540f8-03ac-49d5-adea-17ba2bea4063&dtm=1662458080823&qnm=_matherq&visible=1&tabid=6b59e8ec-635f-4a8f-a004-fed64f277c26&url=https%3A%2F%2Fwww.thenewstribune.com%2F&vp=0x0&ds=0x0&tofa=1662458077&vid=1&lvidt=1662458077&duid=402e3b23a3d16010&fp=1326250463&cid=ma12095&mrk=74930801 HTTP/1.1
Host: www.i.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 06 Sep 2022 09:54:46 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Content-Length: 43
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e1336388cf579034dbc18680696da587
6d633baf8cf123d56a6da8bba402659ad4cb7c08
7d44c52a9037bd2cf2069acccacc49bf38f4c392fd92a6d4f1bfd4623cdcc49e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-48278079-1&cid=542043930.1662458081&jid=259187401&gjid=1663199641&_gid=1237828185.1662458081&_u=YEBAAUAAAAAAAC~&z=922813008
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-48278079-1&cid=542043930.1662458081&jid=259187401&gjid=1663199641&_gid=1237828185.1662458081&_u=YEBAAUAAAAAAAC~&z=922813008
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-48278079-1&cid=542043930.1662458081&jid=259187401&gjid=1663199641&_gid=1237828185.1662458081&_u=YEBAAUAAAAAAAC~&z=922813008 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.thenewstribune.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 06 Sep 2022 09:54:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 282 B IP
Hash 48c00ef05a6a074f13f8fbbe09f27991
6d873446235a134477282b170466aac00424bdd4
8bc682dee43b9870c9b7f8e45098d13dff6672da7132972bc8d3afafee0c6c30
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:46 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 21:01:28 GMT
Expires: Sun, 11 Sep 2022 21:01:27 GMT
Etag: "6d873446235a134477282b170466aac00424bdd4"
Cache-Control: max-age=471400,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466533fbfee1c12-OSL
cache-ssl.celtra.com/api/creatives/52236aa7/compiled/web.js?v=11-2f610469c2&secure=1&cachedVariantChoices=W10-&isPurposePreview=0&eventMetadataExperiment=newMeta&inmobi=0
200 OK 202 kB URL HTTP/2 cache-ssl.celtra.com/api/creatives/52236aa7/compiled/web.js?v=11-2f610469c2&secure=1&cachedVariantChoices=W10-&isPurposePreview=0&eventMetadataExperiment=newMeta&inmobi=0
IP
File type ASCII text, with very long lines (63897)
Size 202 kB (201898 bytes)
Hash 88e9eeafa170a8309e9c87b99d28235a
f800ee353455a0786c1e4e6f69edbd8fa4ce2c40
1af0c2e2a02a2fddfaa36c15fb50db667ddc5d6772a23405692cc954b741b9b0
GET /api/creatives/52236aa7/compiled/web.js?v=11-2f610469c2&secure=1&cachedVariantChoices=W10-&isPurposePreview=0&eventMetadataExperiment=newMeta&inmobi=0 HTTP/1.1
Host: cache-ssl.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 201898
accept-ranges: bytes
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, Content-Disposition
cache-control: max-age=31556926
content-encoding: gzip
date: Tue, 06 Sep 2022 08:52:13 GMT
etag: "1af0c2e2a02a2fddfaa36c15fb50db667ddc5d6772a23405692cc954b741b9b0"
server: Apache
via: 1.1 varnish (Varnish/6.2), 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-varnish: 20545715 5308435
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Am3wxyvjNrTZasveutRod0qyQYTrfRYF66Ql1oIfFG74Yux8aWkd6A==
age: 3750
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 179 B IP
Hash 81909a2413159bcdbc3b102e5dcb5329
707370d7f1576e21c65ee7d4b50c64162eb80983
58c7417871e75516185f71226b1e0a464818737575ca1a736464ea60ebe6bc95
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=gaGZ-l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdSTGs1WndBeDljUE4xME9janpuWEZ6NGZTU3NsOU5Wb3VMSUl5NkJ2Nlo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:46 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=5LBQaF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdSTGs1WndBeDljUE4xME9janpuWEd3Qnh1UGlJOXJNOXVNYiUyRlE0TDJ3JTJG; expires=Sun, 01 Oct 2023 09:54:46 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 345409
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=publishertag&domain=thenewstribune.com&sn=FirefoxSyncframe&so=0&topUrl=www.thenewstribune.com&info=5LBQaF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdSTGs1WndBeDljUE4xME9janpuWEd3Qnh1UGlJOXJNOXVNYiUyRlE0TDJ3JTJG&idsd=1708072735,2100331197&cw=1&lsw=1
200 OK 319 B URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=thenewstribune.com&sn=FirefoxSyncframe&so=0&topUrl=www.thenewstribune.com&info=5LBQaF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdSTGs1WndBeDljUE4xME9janpuWEd3Qnh1UGlJOXJNOXVNYiUyRlE0TDJ3JTJG&idsd=1708072735,2100331197&cw=1&lsw=1
IP
File type JSON data\012- , ASCII text, with very long lines (391), with no line terminators
Hash 69e006887cebcd6470fa5fab2a1d1354
1f4b9fbb1d06a8fcf4c0dd8d64c8255f87611d63
0b9e82b2bfb32cb5779dd9b1be949ec18fc980ba8c8a8187a1d792329955797e
GET /sid/json?origin=publishertag&domain=thenewstribune.com&sn=FirefoxSyncframe&so=0&topUrl=www.thenewstribune.com&info=5LBQaF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdSTGs1WndBeDljUE4xME9janpuWEd3Qnh1UGlJOXJNOXVNYiUyRlE0TDJ3JTJG&idsd=1708072735,2100331197&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 876667
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
tags.srv.stackadapt.com/sa.jpeg
200 OK 651 B URL HTTP/1.1 tags.srv.stackadapt.com/sa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3\012- data
Hash 7f5244a10960a6ccaaf8c781b48e96ec
db54a5c08b1a5e91c667dd2d349dea4f91c45c12
fb54ba88681941996d788486d73207a476a3fdc9a5f5d03e9dce745f48ffd199
GET /sa.jpeg HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Content-Type: image/jpeg
Date: Tue, 06 Sep 2022 09:54:46 GMT
Content-Length: 651
Connection: keep-alive
bidder.criteo.com/cdb?ptv=128&profileId=184&cb=39552386329
200 OK 176 B URL HTTP/2 bidder.criteo.com/cdb?ptv=128&profileId=184&cb=39552386329
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash feb3788d4ed34f800a5ff5c4a7147a56
9bee6a87eabae4f242910a2dfc560ee9cc3de147
9e67de17b7c46e3ffbadf73737d6139de52e14d5bc0a4d191ab9bb0fcb5aa9ac
POST /cdb?ptv=128&profileId=184&cb=39552386329 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 610
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:46 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://www.thenewstribune.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 176
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
app.securiti.ai/privaci/v1/consent/cookie/singleupload
200 OK 67 B URL HTTP/2 app.securiti.ai/privaci/v1/consent/cookie/singleupload
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8c500223f938d12a244fad8381d114a9
576a48b5685f4ca9d6d0f9405531a503193366e8
f1e25328be62ee5aca4777d33ecfbaf64a502f80dac2008bd7197e236cac8dc7
POST /privaci/v1/consent/cookie/singleupload HTTP/1.1
Host: app.securiti.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
X-Auth-Token: c90cbd37-3516-4008-9325-c228a23488e5
Content-Length: 497
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:46 GMT
content-type: application/json; charset=utf-8
content-length: 67
access-control-allow-origin: https://www.thenewstribune.com
content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline';
strict-transport-security: max-age=315360000
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
tags.srv.stackadapt.com/saq_pxl?uid=XDbR9bgzYgamKCe5q8YQuw&is_js=true&landing_url=https%3A%2F%2Fwww.thenewstribune.com%2F&t=sapx&tip=2n89yhPVdd02GkQf0BevNLamOgaGgEhOp8oetbqfg0A&host=https://www.thenewstribune.com&sa-user-id-v2=s%253A0-a8d876cc-f998-40a5-57f8-ee84b2a7b38f%2524ip%252491.90.42.154.IcLliGzfUAkubV7WB%252FqYRP0pHATPbDZWghgBQBEbPqI&sa-user-id=s%253A0-a8d876cc-f998-40a5-57f8-ee84b2a7b38f.npXMIA2K4Fesszuzn4Qqtb06GmK3Hj2tyJR20tD9Mx0
200 OK 191 B URL HTTP/1.1 tags.srv.stackadapt.com/saq_pxl?uid=XDbR9bgzYgamKCe5q8YQuw&is_js=true&landing_url=https%3A%2F%2Fwww.thenewstribune.com%2F&t=sapx&tip=2n89yhPVdd02GkQf0BevNLamOgaGgEhOp8oetbqfg0A&host=https://www.thenewstribune.com&sa-user-id-v2=s%253A0-a8d876cc-f998-40a5-57f8-ee84b2a7b38f%2524ip%252491.90.42.154.IcLliGzfUAkubV7WB%252FqYRP0pHATPbDZWghgBQBEbPqI&sa-user-id=s%253A0-a8d876cc-f998-40a5-57f8-ee84b2a7b38f.npXMIA2K4Fesszuzn4Qqtb06GmK3Hj2tyJR20tD9Mx0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adfd4ef0a78a539eae40d4326875d14e
8e3763edfc4e8b37a4d316bdb336bf6168efce3f
a3d618169c0e44354712558cf4ab5ac5c5fcf443713a89c0eec0d1b2e9f2f763
GET /saq_pxl?uid=XDbR9bgzYgamKCe5q8YQuw&is_js=true&landing_url=https%3A%2F%2Fwww.thenewstribune.com%2F&t=sapx&tip=2n89yhPVdd02GkQf0BevNLamOgaGgEhOp8oetbqfg0A&host=https://www.thenewstribune.com&sa-user-id-v2=s%253A0-a8d876cc-f998-40a5-57f8-ee84b2a7b38f%2524ip%252491.90.42.154.IcLliGzfUAkubV7WB%252FqYRP0pHATPbDZWghgBQBEbPqI&sa-user-id=s%253A0-a8d876cc-f998-40a5-57f8-ee84b2a7b38f.npXMIA2K4Fesszuzn4Qqtb06GmK3Hj2tyJR20tD9Mx0 HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://www.thenewstribune.com
Content-Type: text/plain; charset=utf-8
Date: Tue, 06 Sep 2022 09:54:46 GMT
Content-Length: 191
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash cac4994333e81d7282196c5ebd505946
0eb46a874b01ccd9d05adc360ea8b07951c7785c
dc63da4fc6ba12a4c9f67de895edd4374f10ceaf288d0a8d1bfb6d9d563affa0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:46 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 15:43:23 GMT
Expires: Sat, 10 Sep 2022 15:43:22 GMT
Etag: "0eb46a874b01ccd9d05adc360ea8b07951c7785c"
Cache-Control: max-age=365915,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746653427ac01c12-OSL
c.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.thenewstribune.com%2F&pid=C7eACceCCKOPQ&cb=1&ws=1280x939&v=22.8.252032&t=1000&slots=%5B%7B%22sd%22%3A%22zeus_inline-card-1000%22%2C%22s%22%3A%5B%22970x90%22%5D%2C%22sn%22%3A%22%2F7675%2FTAC.site_thenewstribune%2F_HomePage%22%7D%5D&pubid=10f892c4-b76d-4f37-b1fd-0ae5d74780b5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 136 B URL HTTP/2 c.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.thenewstribune.com%2F&pid=C7eACceCCKOPQ&cb=1&ws=1280x939&v=22.8.252032&t=1000&slots=%5B%7B%22sd%22%3A%22zeus_inline-card-1000%22%2C%22s%22%3A%5B%22970x90%22%5D%2C%22sn%22%3A%22%2F7675%2FTAC.site_thenewstribune%2F_HomePage%22%7D%5D&pubid=10f892c4-b76d-4f37-b1fd-0ae5d74780b5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash 5414e4707c7b61f530327e871936b58b
50698a5849f3b1903aba6608bbe7839ed2ce505a
4cfbd342ef23e5b5e4ed3bde2de50104ca058c8d0e603bb59d57f310f390fadf
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.thenewstribune.com%2F&pid=C7eACceCCKOPQ&cb=1&ws=1280x939&v=22.8.252032&t=1000&slots=%5B%7B%22sd%22%3A%22zeus_inline-card-1000%22%2C%22s%22%3A%5B%22970x90%22%5D%2C%22sn%22%3A%22%2F7675%2FTAC.site_thenewstribune%2F_HomePage%22%7D%5D&pubid=10f892c4-b76d-4f37-b1fd-0ae5d74780b5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 136
server: Server
date: Tue, 06 Sep 2022 09:54:46 GMT
x-amz-rid: 11WYTAHWAEDVTM9B25TA
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
permissions-policy: interest-cohort=()
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wHtdwIhTyEmNEI6vKWOXo6qmjxvvlGNZ6m_LqUR5CdRoOct2rQqwSA==
X-Firefox-Spdy: h2
lptag.liveperson.net/tag/tag.js?site=2196236
200 OK 7.6 kB URL HTTP/2 lptag.liveperson.net/tag/tag.js?site=2196236
IP
File type ASCII text, with very long lines (21652), with no line terminators
Hash 6b675640425ec8551a433e26a377d954
7234f02cce1ccb2a4facf2b34b9185cfcf27299d
8c9716f14d2e964be7c93d3d8c28819cb35c529fce6206a79061cda509e05bfd
GET /tag/tag.js?site=2196236 HTTP/1.1
Host: lptag.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:46 GMT
content-type: application/javascript
content-length: 7567
last-modified: Thu, 03 Sep 2020 08:27:49 GMT
etag: "5f50a905-1d8f"
content-encoding: gzip
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
cache-control: public, max-age=630
x-content-type-options: nosniff
X-Firefox-Spdy: h2
track.celtra.com/json/eyJldmVudHMiOlt7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjAsImNsaWVudFRpbWVzdGFtcCI6MTY2MjQ1ODA4MS41MjQsIm5hbWUiOiJjb250YWluZXJCZWNhbWVWaWV3YWJsZSJ9XX0=?crc32c=1543169649
200 OK 35 B URL HTTP/1.1 track.celtra.com/json/eyJldmVudHMiOlt7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjAsImNsaWVudFRpbWVzdGFtcCI6MTY2MjQ1ODA4MS41MjQsIm5hbWUiOiJjb250YWluZXJCZWNhbWVWaWV3YWJsZSJ9XX0=?crc32c=1543169649
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /json/eyJldmVudHMiOlt7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjAsImNsaWVudFRpbWVzdGFtcCI6MTY2MjQ1ODA4MS41MjQsIm5hbWUiOiJjb250YWluZXJCZWNhbWVWaWV3YWJsZSJ9XX0=?crc32c=1543169649 HTTP/1.1
Host: track.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Tue, 06 Sep 2022 09:54:47 GMT
Expires: 0
Pragma: no-cache
Content-Length: 35
Connection: keep-alive
publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311793359112
200 OK 18 kB URL HTTP/1.1 publicapi.misitemgr.com/webapi-public/v2/publications/thenewstribune/related/6311793359112
IP
File type JSON data\012- , Unicode text, UTF-8 text
Hash 7db74c161e63e2bcd19a6a457f3d8b12
da45ce60cd3bf59c5ac2b322b146b2da79771c58
553dd1ef7f33ef0a5dc5df6fcc6725ea86175e94bed74bac83b8b68303de59c8
GET /webapi-public/v2/publications/thenewstribune/related/6311793359112 HTTP/1.1
Host: publicapi.misitemgr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
X-Forwarded-Host: www.thenewstribune.com
Origin: https://www.thenewstribune.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.thenewstribune.com
Cache-Control: no-cache
Content-Type: application/json;charset=UTF-8
Date: Tue, 06 Sep 2022 09:54:46 GMT
Mi-Api: true
Vary: X-Forwarded-Host
Transfer-Encoding: chunked
cache-ssl.celtra.com/api/videoThumb/78e34d8397af81f76899466c48964422d511d8a757529f107088b52785039dd2?position=50&transform=crush&resize=nullx800&quality=90&colorAccurate=true
200 OK 133 kB URL HTTP/2 cache-ssl.celtra.com/api/videoThumb/78e34d8397af81f76899466c48964422d511d8a757529f107088b52785039dd2?position=50&transform=crush&resize=nullx800&quality=90&colorAccurate=true
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1422x800, components 3\012- data
Size 133 kB (132629 bytes)
Hash f0de8c3a1e00e86cef17dc289951aec1
0af54fb0efea87a43ce1de3f55a95bd0f321debc
c0293669fcbe66b8db2d96f7d2f48110fae6f256928350adde8784eb2d17b338
GET /api/videoThumb/78e34d8397af81f76899466c48964422d511d8a757529f107088b52785039dd2?position=50&transform=crush&resize=nullx800&quality=90&colorAccurate=true HTTP/1.1
Host: cache-ssl.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 132629
accept-ranges: bytes
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, Content-Disposition
cache-control: max-age=31556926
date: Tue, 06 Sep 2022 09:06:00 GMT
etag: "c0293669fcbe66b8db2d96f7d2f48110fae6f256928350adde8784eb2d17b338"
server: Apache
via: 1.1 varnish (Varnish/6.2), 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-varnish: 12255731
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FyM45EKBdgbIDfwoulJa_4hafCX8n0SjsZH1Gz1wMjUpoONqgokWsQ==
age: 2926
X-Firefox-Spdy: h2
track.celtra.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?crc32c=662523225
200 OK 35 B URL HTTP/1.1 track.celtra.com/json/eyJldmVudHMiOlt7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjEsImNsaWVudFRpbWVzdGFtcCI6MTY2MjQ1ODA4MS41NSwic2NvcGUiOiJnbG9iYWwiLCJ1c2VyQWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsIm9yaWVudGF0aW9uIjowLCJ0b3Btb3N0UmVhY2hhYmxlV2luZG93Ijp7IndpZHRoIjoxMjgwLCJoZWlnaHQiOjg5OH0sImhvc3RXaW5kb3ciOnsid2lkdGgiOjAsImhlaWdodCI6MH0sIm5lc3RpbmciOnsiaWZyYW1lIjp0cnVlLCJmcmllbmRseUlmcmFtZSI6dHJ1ZSwiaWFiRnJpZW5kbHlJZnJhbWUiOnRydWUsImhvc3RpbGVJZnJhbWUiOmZhbHNlLCJpZnJhbWVEZXB0aCI6MX0sInBhZ2VWaXNpYmlsaXR5QXBpIjp0cnVlLCJyZXF1ZXN0QW5pbWF0aW9uRnJhbWUiOnRydWUsInRvcFdpbmRvd05hdGl2ZVJBRlN1cHBvcnRlZCI6dHJ1ZSwiYWxsb3dOb25OYXRpdmVSQUZGb3JWaWV3YWJsZVRpbWVVc2VkIjpmYWxzZSwiY2xpZW50VGltZVpvbmVPZmZzZXRJbk1pbnV0ZXMiOjAsInN1cHBvcnRzQ29udGFpbmVyVmlld2FiaWxpdHkiOnRydWUsInN1cHBvcnRzQ29udGFpbmVySW5pdGlhbFZpZXdhYmlsaXR5Ijp0cnVlLCJ0YWdQYXJlbnRXaWR0aCI6MCwidGFnUGFyZW50SGVpZ2h0IjowLCJhbXBEZXRlY3RlZCI6ZmFsc2UsImFtcE5lc3RpbmdMZXZlbCI6IiIsInNhZmVGcmFtZURldGVjdGVkIjpmYWxzZSwiZmV0Y2hTdXBwb3J0ZWQiOnRydWUsImFzYXBFbmFibGVkIjpudWxsLCJuYXRpdmVQcm9taXNlc1N1cHBvcnRlZCI6dHJ1ZSwiYmVhY29uU3VwcG9ydGVkIjp0cnVlLCJJbnRlcnNlY3Rpb25PYnNlcnZlclN1cHBvcnRlZCI6dHJ1ZSwiaXNNdXRhdGlvbk9ic2VydmVyU3VwcG9ydGVkIjp0cnVlLCJ3ZWJWaWV3IjpudWxsLCJpc1dpbmRvd09wZW5OYXRpdmUiOnRydWUsInByb3RvTG9hZGluZyI6eyJkYXRhTG9hZFN0YXR1cyI6InN1cHBvcnRlZCIsImJsb2JMb2FkU3RhdHVzIjoic3VwcG9ydGVkIn0sInRvcFdpbmRvd0xvY2F0aW9uIjoiaHR0cHM6Ly93d3cudGhlbmV3c3RyaWJ1bmUuY29tIiwidG9wV2luZG93TG9jYXRpb25MZW5ndGgiOjMwLCJuYW1lIjoiZW52aXJvbm1lbnRJbmZvIn0seyJzZXNzaW9uSWQiOiJzMTY2MjQ1ODA4NnhiNGNjYzNmNDBiY2E4Y3g5NjEyNDQ4NSIsImFjY291bnRJZCI6IjU5MGUxMzg0Iiwic3RyZWFtIjoiYWRFdmVudHMiLCJpbnN0YW50aWF0aW9uIjoiNzg5NDI3NjI1MzU0Mzg2MiIsImluZGV4IjoyLCJjbGllbnRUaW1lc3RhbXAiOjE2NjI0NTgwODEuODU0LCJuYW1lIjoiY3JlYXRpdmVMb2FkZWQiLCJ2aWV3YWJpbGl0eTAwTWVhc3VyYWJsZSI6dHJ1ZSwidmlld2FiaWxpdHk1MDFNZWFzdXJhYmxlIjp0cnVlLCJ2aWV3YWJsZVRpbWVNZWFzdXJhYmxlIjp0cnVlLCJjZG5WYXJpYW50Ijoibm9uZSJ9XX0=?crc32c=662523225
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET 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?crc32c=662523225 HTTP/1.1
Host: track.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Tue, 06 Sep 2022 09:54:47 GMT
Expires: 0
Pragma: no-cache
Content-Length: 35
Connection: keep-alive
cache-ssl.celtra.com/api/videoThumb/78e34d8397af81f76899466c48964422d511d8a757529f107088b52785039dd2?position=50&transform=crush&resize=nullx800&quality=90&colorAccurate=true
200 OK 133 kB URL HTTP/2 cache-ssl.celtra.com/api/videoThumb/78e34d8397af81f76899466c48964422d511d8a757529f107088b52785039dd2?position=50&transform=crush&resize=nullx800&quality=90&colorAccurate=true
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1422x800, components 3\012- data
Size 133 kB (132629 bytes)
Hash f0de8c3a1e00e86cef17dc289951aec1
0af54fb0efea87a43ce1de3f55a95bd0f321debc
c0293669fcbe66b8db2d96f7d2f48110fae6f256928350adde8784eb2d17b338
GET /api/videoThumb/78e34d8397af81f76899466c48964422d511d8a757529f107088b52785039dd2?position=50&transform=crush&resize=nullx800&quality=90&colorAccurate=true HTTP/1.1
Host: cache-ssl.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 132629
accept-ranges: bytes
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, Content-Disposition
cache-control: max-age=31556926
date: Tue, 06 Sep 2022 09:06:00 GMT
etag: "c0293669fcbe66b8db2d96f7d2f48110fae6f256928350adde8784eb2d17b338"
server: Apache
via: 1.1 varnish (Varnish/6.2), 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-varnish: 12255731
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OAnlcQXciSMXIEtT85b6rRbNd4JwXKraZtIJDycZdf5LQpqaBSKzYQ==
age: 2926
X-Firefox-Spdy: h2
track.celtra.com/json/eyJldmVudHMiOlt7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjMsImNsaWVudFRpbWVzdGFtcCI6MTY2MjQ1ODA4MS44NjgsIm5hbWUiOiJ2aWV3YWJsZTAwIiwiY3JpdGVyaW9uIjp7Im5hbWUiOiJDb3JlIiwicmF0aW8iOjAsInRpbWUiOjB9fSx7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjQsImNsaWVudFRpbWVzdGFtcCI6MTY2MjQ1ODA4MS44NjksInVuaXROYW1lIjoiYmFubmVyIiwidW5pdFZhcmlhbnRMb2NhbElkIjo2NTM3LCJzY3JlZW5Mb2NhbElkIjpudWxsLCJzY3JlZW5UaXRsZSI6bnVsbCwic2NyZWVuSXNNYXN0ZXIiOm51bGwsIm9iamVjdExvY2FsSWQiOm51bGwsIm9iamVjdE5hbWUiOm51bGwsIm9iamVjdENsYXp6IjpudWxsLCJpbml0aWF0aW9uVGltZXN0YW1wIjoxNjYyNDU4MDgxLjg2OSwibmFtZSI6InZpZXdTaG93biIsInZpZXdOYW1lIjoiNzY4IHggNDMyIiwiY2xhenoiOiJDcmVhdGl2ZVVuaXRWYXJpYW50IiwiZGVzaWduU2l6ZSI6eyJ3aWR0aCI6NzY4LCJoZWlnaHQiOjQzMn0sImF2YWlsYWJsZVNpemUiOnsid2lkdGgiOjEyNjgsImhlaWdodCI6NzE0fX0seyJzZXNzaW9uSWQiOiJzMTY2MjQ1ODA4NnhiNGNjYzNmNDBiY2E4Y3g5NjEyNDQ4NSIsImFjY291bnRJZCI6IjU5MGUxMzg0Iiwic3RyZWFtIjoiYWRFdmVudHMiLCJpbnN0YW50aWF0aW9uIjoiNzg5NDI3NjI1MzU0Mzg2MiIsImluZGV4Ijo1LCJjbGllbnRUaW1lc3RhbXAiOjE2NjI0NTgwODEuODkxLCJuYW1lIjoidmlld2FibGVBcmVhUmF0aW8iLCJyYXRpbyI6MX0seyJzZXNzaW9uSWQiOiJzMTY2MjQ1ODA4NnhiNGNjYzNmNDBiY2E4Y3g5NjEyNDQ4NSIsImFjY291bnRJZCI6IjU5MGUxMzg0Iiwic3RyZWFtIjoiYWRFdmVudHMiLCJpbnN0YW50aWF0aW9uIjoiNzg5NDI3NjI1MzU0Mzg2MiIsImluZGV4Ijo2LCJjbGllbnRUaW1lc3RhbXAiOjE2NjI0NTgwODEuODkxLCJuYW1lIjoibGFyZ2VzdFZpZXdhYmxlQXJlYVJhdGlvIiwicmF0aW8iOjF9LHsic2Vzc2lvbklkIjoiczE2NjI0NTgwODZ4YjRjY2MzZjQwYmNhOGN4OTYxMjQ0ODUiLCJhY2NvdW50SWQiOiI1OTBlMTM4NCIsInN0cmVhbSI6ImFkRXZlbnRzIiwiaW5zdGFudGlhdGlvbiI6Ijc4OTQyNzYyNTM1NDM4NjIiLCJpbmRleCI6NywiY2xpZW50VGltZXN0YW1wIjoxNjYyNDU4MDgxLjk0NSwidW5pdE5hbWUiOiJiYW5uZXIiLCJ1bml0VmFyaWFudExvY2FsSWQiOjY1MzcsInNjcmVlbkxvY2FsSWQiOjY1NDcsInNjcmVlblRpdGxlIjoiU3RhcnQiLCJzY3JlZW5Jc01hc3RlciI6ZmFsc2UsIm9iamVjdExvY2FsSWQiOm51bGwsIm9iamVjdE5hbWUiOm51bGwsIm9iamVjdENsYXp6IjpudWxsLCJpbml0aWF0aW9uVGltZXN0YW1wIjoxNjYyNDU4MDgxLjk0NCwibmFtZSI6InNjcmVlblNob3duIn0seyJzZXNzaW9uSWQiOiJzMTY2MjQ1ODA4NnhiNGNjYzNmNDBiY2E4Y3g5NjEyNDQ4NSIsImFjY291bnRJZCI6IjU5MGUxMzg0Iiwic3RyZWFtIjoiYWRFdmVudHMiLCJpbnN0YW50aWF0aW9uIjoiNzg5NDI3NjI1MzU0Mzg2MiIsImluZGV4Ijo4LCJjbGllbnRUaW1lc3RhbXAiOjE2NjI0NTgwODEuOTQ1LCJuYW1lIjoiY3JlYXRpdmVSZW5kZXJlZCJ9LHsic2Vzc2lvbklkIjoiczE2NjI0NTgwODZ4YjRjY2MzZjQwYmNhOGN4OTYxMjQ0ODUiLCJhY2NvdW50SWQiOiI1OTBlMTM4NCIsInN0cmVhbSI6ImFkRXZlbnRzIiwiaW5zdGFudGlhdGlvbiI6Ijc4OTQyNzYyNTM1NDM4NjIiLCJpbmRleCI6OSwiY2xpZW50VGltZXN0YW1wIjoxNjYyNDU4MDgxLjk1OSwidW5pdE5hbWUiOiJiYW5uZXIiLCJ1bml0VmFyaWFudExvY2FsSWQiOjY1MzcsInNjcmVlbkxvY2FsSWQiOjY1NDcsInNjcmVlblRpdGxlIjoiU3RhcnQiLCJzY3JlZW5Jc01hc3RlciI6ZmFsc2UsIm9iamVjdExvY2FsSWQiOjY1NTMsIm9iamVjdE5hbWUiOiJ2aWRlbyIsIm9iamVjdENsYXp6IjoiVmlkZW8iLCJpbml0aWF0aW9uVGltZXN0YW1wIjoxNjYyNDU4MDgxLjk0OSwibmFtZSI6InZpZGVvTXV0ZWQifSx7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjEwLCJjbGllbnRUaW1lc3RhbXAiOjE2NjI0NTgwODEuOTYxLCJ1bml0TmFtZSI6ImJhbm5lciIsInVuaXRWYXJpYW50TG9jYWxJZCI6NjUzNywic2NyZWVuTG9jYWxJZCI6NjU0Nywic2NyZWVuVGl0bGUiOiJTdGFydCIsInNjcmVlbklzTWFzdGVyIjpmYWxzZSwib2JqZWN0TG9jYWxJZCI6NjU1Mywib2JqZWN0TmFtZSI6InZpZGVvIiwib2JqZWN0Q2xhenoiOiJWaWRlbyIsImluaXRpYXRpb25UaW1lc3RhbXAiOjE2NjI0NTgwODEuOTQ5LCJuYW1lIjoidmlkZW9QbGF5QXR0ZW1wdGVkIiwiZmlsZW5hbWUiOiI3MzYzODkubXA0IiwidHJhY2thYmxlIjp0cnVlLCJ1c2VySW5pdGlhdGVkIjpmYWxzZSwiYXV0b1JlcGxheSI6dHJ1ZSwic3RhcnRNdXRlZCI6dHJ1ZSwidmlkZW9QbGF5ZXJNb2RlIjoiaW5saW5lIiwiZW5naW5lVHlwZSI6Imh0bWw1Iiwic291cmNlVHlwZSI6IkZpbGUiLCJzb3VyY2UiOiI3OGUzNGQ4Mzk3YWY4MWY3Njg5OTQ2NmM0ODk2NDQyMmQ1MTFkOGE3NTc1MjlmMTA3MDg4YjUyNzg1MDM5ZGQyIiwibGFiZWwiOiJ2aWRlbyJ9LHsic2Vzc2lvbklkIjoiczE2NjI0NTgwODZ4YjRjY2MzZjQwYmNhOGN4OTYxMjQ0ODUiLCJhY2NvdW50SWQiOiI1OTBlMTM4NCIsInN0cmVhbSI6ImFkRXZlbnRzIiwiaW5zdGFudGlhdGlvbiI6Ijc4OTQyNzYyNTM1NDM4NjIiLCJpbmRleCI6MTEsImNsaWVudFRpbWVzdGFtcCI6MTY2MjQ1ODA4MS45NjIsInVuaXROYW1lIjoiYmFubmVyIiwidW5pdFZhcmlhbnRMb2NhbElkIjo2NTM3LCJzY3JlZW5Mb2NhbElkIjo2NTQ3LCJzY3JlZW5UaXRsZSI6IlN0YXJ0Iiwic2NyZWVuSXNNYXN0ZXIiOmZhbHNlLCJvYmplY3RMb2NhbElkIjo2NTUzLCJvYmplY3ROYW1lIjoidmlkZW8iLCJvYmplY3RDbGF6eiI6IlZpZGVvIiwiaW5pdGlhdGlvblRpbWVzdGFtcCI6MTY2MjQ1ODA4MS45NjIsIm5hbWUiOiJ2aWV3U2hvd24iLCJ2aWV3TmFtZSI6InZpZGVvIiwiY2xhenoiOiJWaWRlbyIsImZpbGVuYW1lIjoiNzM2Mzg5Lm1wNCIsImxhYmVsIjoidmlkZW8iLCJzb3VyY2UiOiI3OGUzNGQ4Mzk3YWY4MWY3Njg5OTQ2NmM0ODk2NDQyMmQ1MTFkOGE3NTc1MjlmMTA3MDg4YjUyNzg1MDM5ZGQyIiwic291cmNlVHlwZSI6IkZpbGUiLCJ1c2VySW5pdGlhdGVkIjpmYWxzZSwic3RhcnRNdXRlZCI6dHJ1ZSwidmlkZW9QbGF5ZXJNb2RlIjoiaW5saW5lIiwidmlld2FiaWxpdHlTdGFydFRyaWdnZXJSYXRpbyI6MC4wNSwidmlld2FiaWxpdHlQYXVzZVRyaWdnZXJSYXRpbyI6MC4wNSwiZHVyYXRpb24iOjE1LjAxNX0seyJzZXNzaW9uSWQiOiJzMTY2MjQ1ODA4NnhiNGNjYzNmNDBiY2E4Y3g5NjEyNDQ4NSIsImFjY291bnRJZCI6IjU5MGUxMzg0Iiwic3RyZWFtIjoiYWRFdmVudHMiLCJpbnN0YW50aWF0aW9uIjoiNzg5NDI3NjI1MzU0Mzg2MiIsImluZGV4IjoxMiwiY2xpZW50VGltZXN0YW1wIjoxNjYyNDU4MDgxLjk2MiwibmFtZSI6InZpZXdhYmxlVGltZSIsImZyb20iOjE2NjI0NTgwODEuODksInRvIjoxNjYyNDU4MDgxLjg5fSx7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjEzLCJjbGllbnRUaW1lc3RhbXAiOjE2NjI0NTgwODEuOTgsInVuaXROYW1lIjoiYmFubmVyIiwidW5pdFZhcmlhbnRMb2NhbElkIjo2NTM3LCJzY3JlZW5Mb2NhbElkIjo2NTQ3LCJzY3JlZW5UaXRsZSI6IlN0YXJ0Iiwic2NyZWVuSXNNYXN0ZXIiOmZhbHNlLCJvYmplY3RMb2NhbElkIjo2NTUzLCJvYmplY3ROYW1lIjoidmlkZW8iLCJvYmplY3RDbGF6eiI6IlZpZGVvIiwiaW5pdGlhdGlvblRpbWVzdGFtcCI6MTY2MjQ1ODA4MS45NDksIm5hbWUiOiJ2aWRlb1ByZXNldFNlbGVjdGVkIiwidmlkZW9QcmVzZXQiOiJ2cDlfc2VydmVkXzcyMHAifV19?crc32c=2288206906
200 OK 35 B URL HTTP/1.1 track.celtra.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?crc32c=2288206906
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET 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?crc32c=2288206906 HTTP/1.1
Host: track.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Tue, 06 Sep 2022 09:54:47 GMT
Expires: 0
Pragma: no-cache
Content-Length: 35
Connection: keep-alive
track.celtra.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?crc32c=203084081
200 OK 35 B URL HTTP/1.1 track.celtra.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?crc32c=203084081
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET 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?crc32c=203084081 HTTP/1.1
Host: track.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Tue, 06 Sep 2022 09:54:47 GMT
Expires: 0
Pragma: no-cache
Content-Length: 35
Connection: keep-alive
cache-ssl.celtra.com/api/videoStream/78e34d8397af81f76899466c48964422d511d8a757529f107088b52785039dd2/vp9_served_720p/video.webm?transform=VideoStream&celtraCacheBust=11-1
206 Partial Content 1.9 MB URL HTTP/2 cache-ssl.celtra.com/api/videoStream/78e34d8397af81f76899466c48964422d511d8a757529f107088b52785039dd2/vp9_served_720p/video.webm?transform=VideoStream&celtraCacheBust=11-1
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Size 1.9 MB (1934592 bytes)
Hash fdae45ebc5b7bb3e14f1d8b7eef983ba
f80cc6c7e47da97ab06295ef988542a381b597b3
962559c452dd1fcf567585c60c604ac3437edc9ddbf9e5f379a5a00736498f58
GET /api/videoStream/78e34d8397af81f76899466c48964422d511d8a757529f107088b52785039dd2/vp9_served_720p/video.webm?transform=VideoStream&celtraCacheBust=11-1 HTTP/1.1
Host: cache-ssl.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
content-type: video/webm
content-length: 1934592
accept-ranges: bytes
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, Content-Disposition
cache-control: max-age=31556926
date: Tue, 06 Sep 2022 04:00:25 GMT
etag: "962559c452dd1fcf567585c60c604ac3437edc9ddbf9e5f379a5a00736498f58"
server: Apache
via: 1.1 varnish (Varnish/6.2), 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-varnish: 17114330 18127686
content-range: bytes 0-1934591/1934592
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aQ4sEO-DRN77NUBJ6iQivF3hmmaKmcw8q8271ZvqmbC4s1vBGHZGtw==
age: 21261
X-Firefox-Spdy: h2
ssp-sync.criteo.com/user-sync/pixels?countrycode=NO
200 OK 59 B URL HTTP/2 ssp-sync.criteo.com/user-sync/pixels?countrycode=NO
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1e7734cfec0197bbc3ce6449ae63f8b4
c489c2e7dd09e4c5e68411c041983a60ba8c10e3
563a83159b0298d1f67d09e46c6e5eac13a964a4703f3aeb4356214e27ad1ca2
GET /user-sync/pixels?countrycode=NO HTTP/1.1
Host: ssp-sync.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:46 GMT
content-type: application/json; charset=utf-8
server: Kestrel
content-encoding: br
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.thenewstribune.com
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
bidder.criteo.com/csm/events
204 No Content 0 B URL HTTP/2 bidder.criteo.com/csm/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csm/events HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 314
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 06 Sep 2022 09:54:46 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://www.thenewstribune.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
track.celtra.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?crc32c=3090653948
200 OK 35 B URL HTTP/1.1 track.celtra.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?crc32c=3090653948
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET 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?crc32c=3090653948 HTTP/1.1
Host: track.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Tue, 06 Sep 2022 09:54:47 GMT
Expires: 0
Pragma: no-cache
Content-Length: 35
Connection: keep-alive
ssp-sync.criteo.com/user-sync/pixels?countrycode=NO
200 OK 16 kB URL HTTP/2 ssp-sync.criteo.com/user-sync/pixels?countrycode=NO
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3d1b6e4e0c4af3b1f04906e2e4aa7779
54a9020ded80bd459394c9c2122047a8d23dcd61
e34034ba60bcb1c9c169b94bec0f287b167e7f07e805ae9557c66664115814f0
GET /user-sync/pixels?countrycode=NO HTTP/1.1
Host: ssp-sync.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:47 GMT
content-type: application/json; charset=utf-8
server: Kestrel
content-encoding: br
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: https://www.thenewstribune.com
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
protected-by.clarium.io/pixel?tag=wt_YXdNeFZaTHBOVzZLNkVHNldDNVM4b1JfYTY4LzA6OTcweDkw&v=5&s=v31gc93idbf&sb=-1&h=www.thenewstribune.com&cb=632451&d=eyJ3aCI6IllYZE5lRlphVEhCT1Z6WkxOa1ZITmxkRE5WTTRiMUpmWVRZNEx6QTZPVGN3ZURrdyIsIndkIjp7Im8iOjAsInciOiI5NzAiLCJoIjoiOTAifSwid3IiOjJ9&id=eyJkZnAiOnsiYWQiOjAsImMiOm51bGwsImwiOjAsIm8iOjAsIkEiOiIvNzY3NS9UQUMuc2l0ZV90aGVuZXdzdHJpYnVuZS9fSG9tZVBhZ2UiLCJ5Ijo3NjYyNSwiY28iOjAsInMiOiJ6ZXVzX2lubGluZS1jYXJkLTEwMDAifX0%3D
200 OK 68 B URL HTTP/1.1 protected-by.clarium.io/pixel?tag=wt_YXdNeFZaTHBOVzZLNkVHNldDNVM4b1JfYTY4LzA6OTcweDkw&v=5&s=v31gc93idbf&sb=-1&h=www.thenewstribune.com&cb=632451&d=eyJ3aCI6IllYZE5lRlphVEhCT1Z6WkxOa1ZITmxkRE5WTTRiMUpmWVRZNEx6QTZPVGN3ZURrdyIsIndkIjp7Im8iOjAsInciOiI5NzAiLCJoIjoiOTAifSwid3IiOjJ9&id=eyJkZnAiOnsiYWQiOjAsImMiOm51bGwsImwiOjAsIm8iOjAsIkEiOiIvNzY3NS9UQUMuc2l0ZV90aGVuZXdzdHJpYnVuZS9fSG9tZVBhZ2UiLCJ5Ijo3NjYyNSwiY28iOjAsInMiOiJ6ZXVzX2lubGluZS1jYXJkLTEwMDAifX0%3D
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /pixel?tag=wt_YXdNeFZaTHBOVzZLNkVHNldDNVM4b1JfYTY4LzA6OTcweDkw&v=5&s=v31gc93idbf&sb=-1&h=www.thenewstribune.com&cb=632451&d=eyJ3aCI6IllYZE5lRlphVEhCT1Z6WkxOa1ZITmxkRE5WTTRiMUpmWVRZNEx6QTZPVGN3ZURrdyIsIndkIjp7Im8iOjAsInciOiI5NzAiLCJoIjoiOTAifSwid3IiOjJ9&id=eyJkZnAiOnsiYWQiOjAsImMiOm51bGwsImwiOjAsIm8iOjAsIkEiOiIvNzY3NS9UQUMuc2l0ZV90aGVuZXdzdHJpYnVuZS9fSG9tZVBhZ2UiLCJ5Ijo3NjYyNSwiY28iOjAsInMiOiJ6ZXVzX2lubGluZS1jYXJkLTEwMDAifX0%3D HTTP/1.1
Host: protected-by.clarium.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Content-Type: image/png
Date: Tue, 06 Sep 2022 09:54:48 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Server: nginx/1.14.0 (Ubuntu)
Content-Length: 68
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash ff79e9570091fa31889189cec4792e41
d3b4b051e3dc268f9bc17c5049541840ce75d132
90e1b66d999dbdbcbeabbc398025b5446aff195c86299dae77c591c7c05aa522
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:48 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 04:31:54 GMT
Expires: Tue, 13 Sep 2022 04:31:53 GMT
Etag: "d3b4b051e3dc268f9bc17c5049541840ce75d132"
Cache-Control: max-age=584824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466534aa93f0b31-OSL
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type gzip compressed data, max compression\012- data
Hash 3c23f42da9b67ad15a550816b1b278f7
788d1f216377ae6833c2f978a32ea96fa1a8e672
451f9bf71643de00c54249ea5934f4922233ca56f677a030187b2e371b81a5dc
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 08:31:01 GMT
expires: Wed, 06 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 5027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87eb7d107018454a3be9062b16e5d536
3c8ccb607087cd6a2cf6db122e70b3d6505058e9
11b1282de8388086c63ac4c12c129d0a0402a226ac0bf67318e2687597b1a034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 09:54:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash ff79e9570091fa31889189cec4792e41
d3b4b051e3dc268f9bc17c5049541840ce75d132
90e1b66d999dbdbcbeabbc398025b5446aff195c86299dae77c591c7c05aa522
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:48 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 04:31:54 GMT
Expires: Tue, 13 Sep 2022 04:31:53 GMT
Etag: "d3b4b051e3dc268f9bc17c5049541840ce75d132"
Cache-Control: max-age=584824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466534a2ace1c12-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash ff79e9570091fa31889189cec4792e41
d3b4b051e3dc268f9bc17c5049541840ce75d132
90e1b66d999dbdbcbeabbc398025b5446aff195c86299dae77c591c7c05aa522
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:48 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 04:31:54 GMT
Expires: Tue, 13 Sep 2022 04:31:53 GMT
Etag: "d3b4b051e3dc268f9bc17c5049541840ce75d132"
Cache-Control: max-age=584824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466534a3d5eb521-OSL
cdn.ampproject.org/rtv/012208121708000/amp4ads-v0.mjs
200 OK 62 kB URL HTTP/2 cdn.ampproject.org/rtv/012208121708000/amp4ads-v0.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (65008)
Hash 1998e90b9a0f771ec8638c255b019447
ca1958a09e1140ab0e4203e32a1e6c632b13db98
302cb3b102fc397ee72df0859424e37d3807c73f75cc31a6890d013ab61eaeb2
GET /rtv/012208121708000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61526
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 20:06:52 GMT
expires: Tue, 05 Sep 2023 20:06:52 GMT
cache-control: public, max-age=31536000
age: 49676
etag: "b1753c5424806777"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012208121708000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012208121708000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5046)
Hash 04ef82080285002fc2c0475d59004353
7b8a632212d23b6ffa9504ebbe5f27a2441a6a87
a11d9300062045f16b2e0cb9ed0800817fe7a97325cb60e2e69066bb7b549247
GET /rtv/012208121708000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1914
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 05:40:12 GMT
expires: Fri, 01 Sep 2023 05:40:12 GMT
cache-control: public, max-age=31536000
age: 447276
etag: "6b6863aa0ddd5cf3"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012208121708000/v0/amp-analytics-0.1.mjs
200 OK 29 kB URL HTTP/2 cdn.ampproject.org/rtv/012208121708000/v0/amp-analytics-0.1.mjs
IP
File type ASCII text, with very long lines (65534)
Hash d0dc065a9dc02614746d651a5bb12de9
0db5268d620a35ba9428c5d7bbd45f62eb7f0574
2392f7a8010e114706a95c19fdb7d22c749d6521931dc5aebfe0d061a05803a2
GET /rtv/012208121708000/v0/amp-analytics-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 28840
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Sep 2022 14:49:04 GMT
expires: Mon, 04 Sep 2023 14:49:04 GMT
cache-control: public, max-age=31536000
age: 155144
etag: "bd6960dd2dd8774b"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash ff79e9570091fa31889189cec4792e41
d3b4b051e3dc268f9bc17c5049541840ce75d132
90e1b66d999dbdbcbeabbc398025b5446aff195c86299dae77c591c7c05aa522
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:48 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 04:31:54 GMT
Expires: Tue, 13 Sep 2022 04:31:53 GMT
Etag: "d3b4b051e3dc268f9bc17c5049541840ce75d132"
Cache-Control: max-age=584824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466534aaa0f0b02-OSL
cdn.ampproject.org/rtv/012208121708000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012208121708000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14666)
Hash 56b8acb5d398385ddd88c19175668aed
232588b0fa0f3f04c9243e3d7e54719b1f754e88
e0a9e9f9eea0797335716388b2498d4c525433a1038fac133b11b06a53353613
GET /rtv/012208121708000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5202
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 05:40:12 GMT
expires: Fri, 01 Sep 2023 05:40:12 GMT
cache-control: public, max-age=31536000
age: 447276
etag: "23fb7130d171a0c1"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
track.celtra.com/json/eyJldmVudHMiOlt7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjE2LCJjbGllbnRUaW1lc3RhbXAiOjE2NjI0NTgwODIuODk0LCJuYW1lIjoidmlld2FibGU1MDEiLCJjcml0ZXJpb24iOnsibmFtZSI6IjMwLzEiLCJyYXRpbyI6MC4zLCJ0aW1lIjoxMDAwfX1dfQ==?crc32c=1009741862
200 OK 35 B URL HTTP/1.1 track.celtra.com/json/eyJldmVudHMiOlt7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjE2LCJjbGllbnRUaW1lc3RhbXAiOjE2NjI0NTgwODIuODk0LCJuYW1lIjoidmlld2FibGU1MDEiLCJjcml0ZXJpb24iOnsibmFtZSI6IjMwLzEiLCJyYXRpbyI6MC4zLCJ0aW1lIjoxMDAwfX1dfQ==?crc32c=1009741862
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /json/eyJldmVudHMiOlt7InNlc3Npb25JZCI6InMxNjYyNDU4MDg2eGI0Y2NjM2Y0MGJjYThjeDk2MTI0NDg1IiwiYWNjb3VudElkIjoiNTkwZTEzODQiLCJzdHJlYW0iOiJhZEV2ZW50cyIsImluc3RhbnRpYXRpb24iOiI3ODk0Mjc2MjUzNTQzODYyIiwiaW5kZXgiOjE2LCJjbGllbnRUaW1lc3RhbXAiOjE2NjI0NTgwODIuODk0LCJuYW1lIjoidmlld2FibGU1MDEiLCJjcml0ZXJpb24iOnsibmFtZSI6IjMwLzEiLCJyYXRpbyI6MC4zLCJ0aW1lIjoxMDAwfX1dfQ==?crc32c=1009741862 HTTP/1.1
Host: track.celtra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Tue, 06 Sep 2022 09:54:48 GMT
Expires: 0
Pragma: no-cache
Content-Length: 35
Connection: keep-alive
lptag.liveperson.net/lptag/api/account/2196236/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3
200 OK 106 kB URL HTTP/2 lptag.liveperson.net/lptag/api/account/2196236/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3
IP
Size 106 kB (106246 bytes)
Hash 4ba92ab883959d7fb0455e1a0ed60be4
b733b36cf85fe775e8701528aeb5f2dfb393854c
f531185794cb9fea1e75b1444d27cf5343db8e9cc0eb0f0480c9b496f70e1dd4
GET /lptag/api/account/2196236/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3 HTTP/1.1
Host: lptag.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:47 GMT
content-type: application/x-javascript
cache-control: public, max-age=630
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash ff79e9570091fa31889189cec4792e41
d3b4b051e3dc268f9bc17c5049541840ce75d132
90e1b66d999dbdbcbeabbc398025b5446aff195c86299dae77c591c7c05aa522
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 09:54:48 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 04:31:54 GMT
Expires: Tue, 13 Sep 2022 04:31:53 GMT
Etag: "d3b4b051e3dc268f9bc17c5049541840ce75d132"
Cache-Control: max-age=584824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466534aaa4bfabc-OSL
sqs.us-east-1.amazonaws.com/397719490216/A-V3-DATA-DUMP?Action=SendMessage&MessageBody=%7B%22A%22%3A%5B%223%22%2C%2211%22%2C%22www.thenewstribune.com%22%2C%22%2F%22%2C%22Firefox%22%2C1662458077589%2C%22%22%2C0%5D%2C%22B%22%3A%7B%22zeus_overlay%22%3A%5B1%2C1662458080905%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2Cnull%2C1%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_top-banner%22%3A%5B1%2C1662458080906%2C1662458080906%2C0%2C1662458081335%2C0%2C0%2C1300%2C1662458081335%2C1300%2C0%2C90%2C728%2C1%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-1%22%3A%5B1%2C1662458080907%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-2%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-3%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-1%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_inline-1%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-2%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-3%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-4%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-5%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%7D%2C%22C%22%3A%7B%7D%2C%22D%22%3A%7B%7D%2C%22D2%22%3A%7B%22zeus_overlay%22%3A%5B%22D%22%2C0%2Cnull%2C1%2C%223075541862%22%5D%2C%22zeus_top-banner%22%3A%5B%22D%22%2C0%2C90%2C728%2C%223023192826%22%5D%2C%22zeus_flex-1%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_flex-2%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_flex-3%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-1%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_inline-1%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-2%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-3%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-4%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-5%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%7D%2C%22E%22%3A%7B%22zeus_overlay%22%3A%5B1662458077589%2C1662458080905%2C0%2C0%5D%2C%22zeus_top-banner%22%3A%5B1662458077589%2C1662458080906%2C1662458080906%2C1662458081335%5D%2C%22zeus_flex-1%22%3A%5B1662458077589%2C1662458080907%2C0%2C0%5D%2C%22zeus_flex-2%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_flex-3%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-1%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_inline-1%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-2%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-3%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-4%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-5%22%3A%5B1662458077589%2C0%2C0%2C0%5D%7D%2C%22E2%22%3A%7B%22zeus_overlay%22%3A%5B1662458077589%2C1662458080905%2C0%2C0%2C0%5D%2C%22zeus_top-banner%22%3A%5B1662458077589%2C1662458080906%2C1662458080906%2C1662458081335%2C138402177398%5D%2C%22zeus_flex-1%22%3A%5B1662458077589%2C1662458080907%2C0%2C0%2C0%5D%2C%22zeus_flex-2%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-3%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-1%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_inline-1%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-2%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-3%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-4%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-5%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%7D%7D
200 OK 378 B URL HTTP/1.1 sqs.us-east-1.amazonaws.com/397719490216/A-V3-DATA-DUMP?Action=SendMessage&MessageBody=%7B%22A%22%3A%5B%223%22%2C%2211%22%2C%22www.thenewstribune.com%22%2C%22%2F%22%2C%22Firefox%22%2C1662458077589%2C%22%22%2C0%5D%2C%22B%22%3A%7B%22zeus_overlay%22%3A%5B1%2C1662458080905%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2Cnull%2C1%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_top-banner%22%3A%5B1%2C1662458080906%2C1662458080906%2C0%2C1662458081335%2C0%2C0%2C1300%2C1662458081335%2C1300%2C0%2C90%2C728%2C1%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-1%22%3A%5B1%2C1662458080907%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-2%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-3%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-1%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_inline-1%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-2%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-3%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-4%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-5%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%7D%2C%22C%22%3A%7B%7D%2C%22D%22%3A%7B%7D%2C%22D2%22%3A%7B%22zeus_overlay%22%3A%5B%22D%22%2C0%2Cnull%2C1%2C%223075541862%22%5D%2C%22zeus_top-banner%22%3A%5B%22D%22%2C0%2C90%2C728%2C%223023192826%22%5D%2C%22zeus_flex-1%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_flex-2%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_flex-3%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-1%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_inline-1%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-2%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-3%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-4%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-5%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%7D%2C%22E%22%3A%7B%22zeus_overlay%22%3A%5B1662458077589%2C1662458080905%2C0%2C0%5D%2C%22zeus_top-banner%22%3A%5B1662458077589%2C1662458080906%2C1662458080906%2C1662458081335%5D%2C%22zeus_flex-1%22%3A%5B1662458077589%2C1662458080907%2C0%2C0%5D%2C%22zeus_flex-2%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_flex-3%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-1%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_inline-1%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-2%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-3%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-4%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-5%22%3A%5B1662458077589%2C0%2C0%2C0%5D%7D%2C%22E2%22%3A%7B%22zeus_overlay%22%3A%5B1662458077589%2C1662458080905%2C0%2C0%2C0%5D%2C%22zeus_top-banner%22%3A%5B1662458077589%2C1662458080906%2C1662458080906%2C1662458081335%2C138402177398%5D%2C%22zeus_flex-1%22%3A%5B1662458077589%2C1662458080907%2C0%2C0%2C0%5D%2C%22zeus_flex-2%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-3%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-1%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_inline-1%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-2%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-3%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-4%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-5%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%7D%7D
IP
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (378), with no line terminators
Hash 71c62d732768e7ee8a44ede4ee52072d
b71bdc673314869c52102ca04e1af8603c6e8f07
79250b0ad396fb850a7374aa3537922a6399c1f264994c017ad4551301b2a648
POST /397719490216/A-V3-DATA-DUMP?Action=SendMessage&MessageBody=%7B%22A%22%3A%5B%223%22%2C%2211%22%2C%22www.thenewstribune.com%22%2C%22%2F%22%2C%22Firefox%22%2C1662458077589%2C%22%22%2C0%5D%2C%22B%22%3A%7B%22zeus_overlay%22%3A%5B1%2C1662458080905%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2Cnull%2C1%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_top-banner%22%3A%5B1%2C1662458080906%2C1662458080906%2C0%2C1662458081335%2C0%2C0%2C1300%2C1662458081335%2C1300%2C0%2C90%2C728%2C1%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-1%22%3A%5B1%2C1662458080907%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-2%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-3%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-1%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_inline-1%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-2%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-3%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-4%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-5%22%3A%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%5D%7D%2C%22C%22%3A%7B%7D%2C%22D%22%3A%7B%7D%2C%22D2%22%3A%7B%22zeus_overlay%22%3A%5B%22D%22%2C0%2Cnull%2C1%2C%223075541862%22%5D%2C%22zeus_top-banner%22%3A%5B%22D%22%2C0%2C90%2C728%2C%223023192826%22%5D%2C%22zeus_flex-1%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_flex-2%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_flex-3%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-1%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_inline-1%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-2%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-3%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-4%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%2C%22zeus_square-5%22%3A%5B%22D%22%2C0%2C0%2C0%2C%220%22%5D%7D%2C%22E%22%3A%7B%22zeus_overlay%22%3A%5B1662458077589%2C1662458080905%2C0%2C0%5D%2C%22zeus_top-banner%22%3A%5B1662458077589%2C1662458080906%2C1662458080906%2C1662458081335%5D%2C%22zeus_flex-1%22%3A%5B1662458077589%2C1662458080907%2C0%2C0%5D%2C%22zeus_flex-2%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_flex-3%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-1%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_inline-1%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-2%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-3%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-4%22%3A%5B1662458077589%2C0%2C0%2C0%5D%2C%22zeus_square-5%22%3A%5B1662458077589%2C0%2C0%2C0%5D%7D%2C%22E2%22%3A%7B%22zeus_overlay%22%3A%5B1662458077589%2C1662458080905%2C0%2C0%2C0%5D%2C%22zeus_top-banner%22%3A%5B1662458077589%2C1662458080906%2C1662458080906%2C1662458081335%2C138402177398%5D%2C%22zeus_flex-1%22%3A%5B1662458077589%2C1662458080907%2C0%2C0%2C0%5D%2C%22zeus_flex-2%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_flex-3%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-1%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_inline-1%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-2%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-3%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-4%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%2C%22zeus_square-5%22%3A%5B1662458077589%2C0%2C0%2C0%2C0%5D%7D%7D HTTP/1.1
Host: sqs.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amzn-RequestId: 9fdadba6-4bea-5e51-ac06-803750c2681a
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Date: Tue, 06 Sep 2022 09:54:48 GMT
Content-Type: text/xml
Content-Length: 378
static.criteo.net/js/ld/publishertag.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.js
IP
GET /js/ld/publishertag.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 09:54:43 GMT
content-type: text/javascript
last-modified: Tue, 23 Aug 2022 00:22:12 GMT
etag: W/"63041db4-1ddab"
expires: Wed, 07 Sep 2022 09:54:43 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 06 Sep 2022 05:25:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 24 Aug 2022 19:06:24 GMT
etag: W/"a4d296427fc806b21335359e398c025c"
cache-control: public, max-age=86400
x-amz-version-id: tKimXuvhjexkvOlm5D.ynBWfUtiJgbbH
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VuVg6hKBSHfzhNb18wsc3k1KKKcYxMnvZFNVs9R5Mj4RUm3IimUE4A==
age: 16146
X-Firefox-Spdy: h2
htlb.casalemedia.com/cygnus?ac=j&s=641209&v=7.2&sd=1&r=%7B%22id%22%3A%22403788a3-b407-434f-98bc-e48806ff5a9b%22%2C%22imp%22%3A%5B%7B%22id%22%3A%225ab9ca54208bd05f%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A970%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%5D%2C%22ext%22%3A%7B%22gpid%22%3A%227675%2Fzeus_top-banner%22%7D%7D%7D%2C%7B%22id%22%3A%22305e41d1bdb6d8e8%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A970%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%5D%2C%22ext%22%3A%7B%22gpid%22%3A%227675%2Fzeus_top-banner%22%7D%7D%7D%2C%7B%22id%22%3A%22a4a5a62925f5aef3%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A970%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%5D%2C%22ext%22%3A%7B%22gpid%22%3A%227675%2Fzeus_top-banner%22%7D%7D%7D%5D%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.thenewstribune.com%2F%22%2C%22ref%22%3A%22%22%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%7D%2C%7B%7D%2C%7B%7D%5D%7D%7D
200 OK 0 B URL HTTP/2 htlb.casalemedia.com/cygnus?ac=j&s=641209&v=7.2&sd=1&r=%7B%22id%22%3A%22403788a3-b407-434f-98bc-e48806ff5a9b%22%2C%22imp%22%3A%5B%7B%22id%22%3A%225ab9ca54208bd05f%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A970%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%5D%2C%22ext%22%3A%7B%22gpid%22%3A%227675%2Fzeus_top-banner%22%7D%7D%7D%2C%7B%22id%22%3A%22305e41d1bdb6d8e8%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A970%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%5D%2C%22ext%22%3A%7B%22gpid%22%3A%227675%2Fzeus_top-banner%22%7D%7D%7D%2C%7B%22id%22%3A%22a4a5a62925f5aef3%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A970%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%5D%2C%22ext%22%3A%7B%22gpid%22%3A%227675%2Fzeus_top-banner%22%7D%7D%7D%5D%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.thenewstribune.com%2F%22%2C%22ref%22%3A%22%22%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%7D%2C%7B%7D%2C%7B%7D%5D%7D%7D
IP
GET /cygnus?ac=j&s=641209&v=7.2&sd=1&r=%7B%22id%22%3A%22403788a3-b407-434f-98bc-e48806ff5a9b%22%2C%22imp%22%3A%5B%7B%22id%22%3A%225ab9ca54208bd05f%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A970%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%5D%2C%22ext%22%3A%7B%22gpid%22%3A%227675%2Fzeus_top-banner%22%7D%7D%7D%2C%7B%22id%22%3A%22305e41d1bdb6d8e8%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A970%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%5D%2C%22ext%22%3A%7B%22gpid%22%3A%227675%2Fzeus_top-banner%22%7D%7D%7D%2C%7B%22id%22%3A%22a4a5a62925f5aef3%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A970%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%2C%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22703060%22%7D%7D%5D%2C%22ext%22%3A%7B%22gpid%22%3A%227675%2Fzeus_top-banner%22%7D%7D%7D%5D%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.thenewstribune.com%2F%22%2C%22ref%22%3A%22%22%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%7D%2C%7B%7D%2C%7B%7D%5D%7D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.thenewstribune.com
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:43 GMT
content-type: application/json
cf-ray: 7466532dcd6fb506-OSL
access-control-allow-origin: https://www.thenewstribune.com
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8RGaT1gW429pErRnVyS2SolOKwH7u9SeTK8zc%2FGudFm9AOh8m4PjNBxa1And0sgc06xTyLLD79%2BCyk%2FRPdMsnJ9xLfCZoG8GM2KsdaB7JAoOrMdXeXnGPD8WUjnBP78nOPZBUzPq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/desktopEmbedded.js?version=10.20.1.9-release_5536
200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/desktopEmbedded.js?version=10.20.1.9-release_5536
IP
GET /le_unified_window/10.20.1.9-release_5536/desktopEmbedded.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:48 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:34 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 06 Sep 2023 09:54:48 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cdn-prod.securiti.ai/consent/cookie-consent.css
200 OK 0 B URL HTTP/2 cdn-prod.securiti.ai/consent/cookie-consent.css
IP
GET /consent/cookie-consent.css HTTP/1.1
Host: cdn-prod.securiti.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 01 Sep 2022 18:20:58 GMT
x-amz-version-id: IzfFx9g6HKpD1fIvX_cD.5yELI9v2uKn
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'
x-frame-options: DENY
content-encoding: gzip
date: Tue, 06 Sep 2022 09:34:40 GMT
etag: W/"8ede99d489afa0acf201f07bcaba20c8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cJvflPFhudWBSXc-IXtFr98AIYzw5Y9ktRT5wWqj9D84ItRjfeEnKQ==
age: 1211
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/UMSClientAPI.min.js?version=10.20.1.9-release_5536
200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/UMSClientAPI.min.js?version=10.20.1.9-release_5536
IP
GET /le_unified_window/10.20.1.9-release_5536/UMSClientAPI.min.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:48 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:34 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 06 Sep 2023 09:54:48 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
sb.scorecardresearch.com/beacon.js
200 OK 0 B URL HTTP/2 sb.scorecardresearch.com/beacon.js
IP
GET /beacon.js HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:19:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Sep 2022 03:16:28 GMT
cache-control: max-age=86400
etag: W/"eaf85c1c6758e84acfe134efd70e9373"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: O0SRYxhHn27_gVX3tgo-lfgNwfqHsW7Wv-7gioWUrKJn-giYVHGnTQ==
age: 31305
X-Firefox-Spdy: h2
www.mcclatchy-wires.com/incoming/fob0vx/picture265350826/alternates/LANDSCAPE_768/Float_Plane_Crash_08026.jpg
200 OK 0 B URL HTTP/2 www.mcclatchy-wires.com/incoming/fob0vx/picture265350826/alternates/LANDSCAPE_768/Float_Plane_Crash_08026.jpg
IP
GET /incoming/fob0vx/picture265350826/alternates/LANDSCAPE_768/Float_Plane_Crash_08026.jpg HTTP/1.1
Host: www.mcclatchy-wires.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-proxy-forwarding-type: WhiteList
last-modified: Mon, 05 Sep 2022 15:51:51 GMT
etag: "6fec182000e6d6d697c6c71c072744fc"
content-type: image/jpeg
content-length: 22122
surrogate-control: varnish=ESI/2.1
x-varnish: 717287275, 693135482 708873352
x-mi-in-market: 0
server: MI
mi-cache-age: 2135
mi-cache: HIT
cache-control: max-age=558542
date: Tue, 06 Sep 2022 09:54:42 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
edge.adobedc.net/ee/v1/interact?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=9c32993e-1bc5-49b3-ae58-70af7d386a0e
200 OK 0 B URL HTTP/2 edge.adobedc.net/ee/v1/interact?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=9c32993e-1bc5-49b3-ae58-70af7d386a0e
IP
POST /ee/v1/interact?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=9c32993e-1bc5-49b3-ae58-70af7d386a0e HTTP/1.1
Host: edge.adobedc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Content-Type: text/plain; charset=UTF-8
Origin: https://www.thenewstribune.com
Content-Length: 1606
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-request-id: 9c32993e-1bc5-49b3-ae58-70af7d386a0e
x-rate-limit-remaining: 599
vary: Origin
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID
date: Tue, 06 Sep 2022 09:54:41 GMT
x-konductor: 22.8.58:6cff4a96
x-adobe-edge: IRL1;6
server: jag
content-encoding: deflate
content-type: application/json;charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=www.thenewstribune.com
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=www.thenewstribune.com
IP
GET /syncframe?origin=publishertag&topUrl=www.thenewstribune.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=e2cef86a-af55-4ee9-9cf8-34798cb002b5; expires=Sun, 01 Oct 2023 09:54:44 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 670122
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
d15kdpgjg3unno.cloudfront.net/oPS.js?cid=11
200 OK 0 B URL HTTP/2 d15kdpgjg3unno.cloudfront.net/oPS.js?cid=11
IP
GET /oPS.js?cid=11 HTTP/1.1
Host: d15kdpgjg3unno.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 14:53:41 GMT
x-amz-version-id: QRmipgxd_4KwrafyZWLfjSSyiKCclTvv
server: AmazonS3
content-encoding: gzip
date: Mon, 05 Sep 2022 17:36:51 GMT
cache-control: max-age=84600
etag: W/"e9416d2d6ff4570cf6344408f04cf671"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ob6JvNf7rY81zqN9F2BaiLcabUZddNXL3jL1gurHhcwgJ9l3OOdCWw==
age: 58672
X-Firefox-Spdy: h2
cdn-prod.securiti.ai/consent/cookie-consent-sdk.js
200 OK 0 B URL HTTP/2 cdn-prod.securiti.ai/consent/cookie-consent-sdk.js
IP
GET /consent/cookie-consent-sdk.js HTTP/1.1
Host: cdn-prod.securiti.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 01 Sep 2022 18:20:53 GMT
x-amz-version-id: u7Ujuqq1e6OAJFf3BGIbJarkOVJQ2w6i
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'
x-frame-options: DENY
content-encoding: gzip
date: Tue, 06 Sep 2022 09:32:46 GMT
etag: W/"ed7d2c358fe07269693776f0d68c8a81"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rWKo5nCTR138xIXt3l4eZGL5wilE-88meygPivEbYld4vMKSUAZJ8w==
age: 1337
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/2196236/configuration/setting/accountproperties/?cb=accountSettingsCB
200 OK 0 B URL HTTP/2 accdn.lpsnmedia.net/api/account/2196236/configuration/setting/accountproperties/?cb=accountSettingsCB
IP
GET /api/account/2196236/configuration/setting/accountproperties/?cb=accountSettingsCB HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:48 GMT
content-type: application/javascript
set-cookie: ADRUM_BTa=R:31|g:41d54402-f74f-4909-adf2-21764f5a6752; Max-Age=30; Expires=Tue, 06-Sep-2022 09:55:18 GMT; Path=/
ADRUM_BTa=R:31|g:41d54402-f74f-4909-adf2-21764f5a6752|n:livepersonltd_93a08561-b03e-475e-b29b-9ad4aa207daf; Max-Age=30; Expires=Tue, 06-Sep-2022 09:55:18 GMT; Path=/
SameSite=None; Max-Age=30; Expires=Tue, 06-Sep-2022 09:55:18 GMT; Path=/; Secure
ADRUM_BT1=R:31|i:2241585; Max-Age=30; Expires=Tue, 06-Sep-2022 09:55:18 GMT; Path=/
ADRUM_BT1=R:31|i:2241585|e:3; Max-Age=30; Expires=Tue, 06-Sep-2022 09:55:18 GMT; Path=/
vary: Accept
expires: Tue, 06 Sep 2022 09:55:48 GMT
x-envoy-upstream-service-time: 1
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: EXPIRED
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
js.matheranalytics.com/s/ma12095/74930801/all/ml.js?cb=1603
301 Moved Permanently 0 B URL HTTP/2 js.matheranalytics.com/s/ma12095/74930801/all/ml.js?cb=1603
IP
GET /s/ma12095/74930801/all/ml.js?cb=1603 HTTP/1.1
Host: js.matheranalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 06 Sep 2022 09:54:42 GMT
location: https://js.matheranalytics.com/static/ltm/ma12095/all/8/ml.br.js
x-served-by: 0-gc-euw1-10928
cache-control: public, max-age=269200
vary: Accept-Encoding
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/lpChatV3.min.js?version=10.20.1.9-release_5536
200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/lpChatV3.min.js?version=10.20.1.9-release_5536
IP
GET /le_unified_window/10.20.1.9-release_5536/lpChatV3.min.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:48 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:35 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 06 Sep 2023 09:54:48 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
edge.adobedc.net/ee/v1/interact?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=3c303c0c-3fc1-4977-ba3b-7b6feb69bec6
200 OK 0 B URL HTTP/2 edge.adobedc.net/ee/v1/interact?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=3c303c0c-3fc1-4977-ba3b-7b6feb69bec6
IP
POST /ee/v1/interact?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=3c303c0c-3fc1-4977-ba3b-7b6feb69bec6 HTTP/1.1
Host: edge.adobedc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Content-Type: text/plain; charset=UTF-8
Origin: https://www.thenewstribune.com
Content-Length: 1817
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-request-id: 3c303c0c-3fc1-4977-ba3b-7b6feb69bec6
x-rate-limit-remaining: 599
vary: Origin
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID
date: Tue, 06 Sep 2022 09:54:41 GMT
x-konductor: 22.8.58:6cff4a96
x-adobe-edge: IRL1;6
server: jag
content-encoding: deflate
content-type: application/json;charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
edge.adobedc.net/ee/v1/interact?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=a19cafd6-296f-463f-a095-1a363a6f7509
200 OK 0 B URL HTTP/2 edge.adobedc.net/ee/v1/interact?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=a19cafd6-296f-463f-a095-1a363a6f7509
IP
POST /ee/v1/interact?configId=462177a8-1012-4e47-aee6-a4f6f3154a6b&requestId=a19cafd6-296f-463f-a095-1a363a6f7509 HTTP/1.1
Host: edge.adobedc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Content-Type: text/plain; charset=UTF-8
Origin: https://www.thenewstribune.com
Content-Length: 2569
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-request-id: a19cafd6-296f-463f-a095-1a363a6f7509
x-rate-limit-remaining: 599
vary: Origin
access-control-allow-origin: https://www.thenewstribune.com
access-control-allow-credentials: true
access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID
date: Tue, 06 Sep 2022 09:54:41 GMT
x-konductor: 22.8.58:6cff4a96
x-adobe-edge: IRL1;6
server: jag
content-encoding: deflate
content-type: application/json;charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 06 Sep 2022 09:28:26 GMT
last-modified: Thu, 01 Sep 2022 20:50:54 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 ed4565467c6c9847b6a3fcb6cec799e4.cloudfront.net (CloudFront), 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
etag: W/"350e165fc9b88312c43a9ba90eba4e3d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-C1
x-amz-cf-id: C2cGz5ORFsPxZ2SNhlfhF68zQidQsER6q6n0YbZJ1NnmfwWmPzN7Lw==
age: 1577
X-Firefox-Spdy: h2
cdn.keywee.co/dist/analytics-1.5.12.min.js
200 OK 0 B URL HTTP/2 cdn.keywee.co/dist/analytics-1.5.12.min.js
IP
GET /dist/analytics-1.5.12.min.js HTTP/1.1
Host: cdn.keywee.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thenewstribune.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 28 Dec 2020 09:55:56 GMT
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 19:54:49 GMT
cache-control: max-age=259200,public
etag: W/"13a05c433850fad0455e2ee1a1707eb0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GXwO9s_kiGlM_w4UwEdUn_jLq4UZf6_QHhE78DUvEpRokAAYscJiUw==
age: 136797
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-50B2Fi6bBqYto.js
200 OK 0 B URL HTTP/2 rules.quantcount.com/rules-p-50B2Fi6bBqYto.js
IP
GET /rules-p-50B2Fi6bBqYto.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 22 Aug 2022 12:05:47 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Tue, 06 Sep 2022 09:36:18 GMT
cache-control: max-age=3600
etag: W/"38c1c6b9eca2fe0d875e1cfe555905e5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -iYKktBhVnf0sOai6YGCMcnHgFQTqYYWFvZ_wS06L6PZOtnwHn7iQw==
age: 1174
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:45 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 73785
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/surveylogicinstance.min.js?version=10.20.1.9-release_5536
200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/surveylogicinstance.min.js?version=10.20.1.9-release_5536
IP
GET /le_unified_window/10.20.1.9-release_5536/surveylogicinstance.min.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:48 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:35 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 06 Sep 2023 09:54:48 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
mcclatchy-thenewstribune.zeustechnology.com/main.js
200 OK 0 B URL HTTP/2 mcclatchy-thenewstribune.zeustechnology.com/main.js
IP
GET /main.js HTTP/1.1
Host: mcclatchy-thenewstribune.zeustechnology.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 15 Jun 2022 19:47:36 GMT
x-amz-version-id: hu.rdnwfwgGmoHkJhloriphyoGiGZ4WD
server: AmazonS3
content-encoding: br
date: Tue, 06 Sep 2022 09:29:18 GMT
cache-control: max-age=600,s-maxage=3600
etag: W/"148b75c4468c89bbda43f59370e76459"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uJLWvFGqA7XXfK1W7syDTCpLaGzUL_klZaeQuw4qS56l_CXW__TQmg==
age: 1524
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/ui-framework.js?version=10.20.1.9-release_5536
200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/ui-framework.js?version=10.20.1.9-release_5536
IP
GET /le_unified_window/10.20.1.9-release_5536/ui-framework.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thenewstribune.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 09:54:48 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:35 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 06 Sep 2023 09:54:48 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
13.82.105.19
104.18.18.126
104.110.10.32
52.16.246.173
151.101.85.194
185.89.210.180
93.184.220.29
178.250.6.206