perezhilton.com/category/yummy-yummy-screw/
301 Moved Permanently 0 B URL HTTP/1.1 perezhilton.com/category/yummy-yummy-screw/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /category/yummy-yummy-screw/ HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Dec 2022 19:26:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Dec 2022 20:26:54 GMT
Location: https://perezhilton.com/category/yummy-yummy-screw/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qv0MGjGG1B%2B15G0XbxScWb%2BIFdzBxYjH3fUS1%2FVcDg7fM8bLsFsxC%2Fr7%2FuK%2FKBx4doXZbXxhga%2Bxsu3Qn8mHdRrq2dyZR9usVoapM06gqMcjRwScN7NEqtRskUmTAdDQ5g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773674f62bca1c0e-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18731
Expires: Sat, 03 Dec 2022 00:39:05 GMT
Date: Fri, 02 Dec 2022 19:26:54 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2692
Cache-Control: max-age=143353
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:54 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 11:16:07 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4463
Expires: Fri, 02 Dec 2022 20:41:17 GMT
Date: Fri, 02 Dec 2022 19:26:54 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 19:19:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 417
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: flpqgzgz0MJFkS2JJQwjYbUrhe5VJHBEeNm9tIsvPGWaQczQZjj0EGLJChNxg1FLGaXTNp+zumJvqipPq24bYg==
x-amz-request-id: EH4SA57YYMECG5YG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 18:46:13 GMT
age: 2441
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 19:26:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1
200 OK 3.6 kB URL HTTP/2 perezhilton.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1
IP
File type ASCII text, with very long lines (21597)
Hash 8baa452907ccdd15d514aa8714bf889c
234ca83bed18e8d97e33b6b2cd05224090283956
aa0ec410dbfa03587a06b95dd60860f90c832aeed72e0369cc3217d7b81ffd5f
GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: text/css
last-modified: Thu, 22 Sep 2022 13:10:58 GMT
etag: W/"632c5ee2-545e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 740
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RwnOlzxEDR1nbb0FeJ0VOil1v%2BT1%2FLkEZmgTk3xIn2rEQU35UwB1%2BlIjRXIFycRolnLQUJ1EpQ4PkYvqF9Y73HGFDAwTrrujUfSm7%2BE12knBT7ih0yPqBdQw8O%2F%2BPVWFFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674f9e961b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.3
200 OK 8.3 kB URL HTTP/2 perezhilton.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.3
IP
File type ASCII text, with very long lines (27100)
Hash e5330c14fe66404a7e9f8a77baa600d2
8760bcae64b43a01cc75950136e71e2ae280f33b
04391b8521925e4de8ba8e650acaeba43a4eae4dfbb7fbaa4146f787260a4a63
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.5.3 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: text/css
last-modified: Mon, 21 Dec 2020 12:22:11 GMT
etag: W/"5fe09373-d293"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4106
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=reL51oHMpvy1WFzzmGxc34H3qXTBR16vxYU5ktZWLjYAWuK62oNHrJl2VXgrTv73ZDhZFgTIb99%2F%2BRVVlSf8JJ%2FP7rWALCkpljEqyzUXRqKTdS7ChURyXNSmVegAR9vO4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674f9e963b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
200 OK 57 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
IP
File type Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Hash 97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: font/woff2
content-length: 56780
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 632, 617, 617, 617, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 21:22:06
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 43c2b10ed4caafc278f6f5ebec7cdfe5
cdn-cache: HIT
cf-cache-status: HIT
age: 12483570
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 773674fa6da11c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.1
200 OK 8.2 kB URL HTTP/2 perezhilton.com/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.1
IP
File type ASCII text, with very long lines (27578)
Hash cf50d3af57e66c975a319601f8c52bbf
7cbd6e0b6603e697db841cf3841065d841de14f1
9ed4cc1dd04350a5c936e775c8c0d9175455a9aeb108f2c726975ce6f655dd32
GET /wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.1 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
last-modified: Thu, 22 Sep 2022 13:10:59 GMT
etag: W/"632c5ee3-6bbb"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7195
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N6QXNHwANLduJ07lC66aPG07eMp5AEY7Y%2BYl4JLCXIrxqkkduNokfZj1gWB7YHKE5Lc3%2FBKHKdbTZvgzpupe6sUFlhDNl%2Bt8jwL4%2FiGHLlJ8DvS8HCcWJXt%2FsyfjDh4sSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fa19a7b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2
200 OK 1.2 kB URL HTTP/2 perezhilton.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2
IP
File type ASCII text, with very long lines (2143), with no line terminators
Hash 0138a8099159d0fede498f0512a051d1
60f7639c8712bc3693c25bc54e66762588c2a3fc
c76771b28e57a1b25c57d5ab7920f0761cd895aee8c5c52f6a2d435a6900b9a3
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=2640
access-control-allow-origin: *
etag: W/"60901a02-a50"
last-modified: Mon, 03 May 2021 15:42:58 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4106
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BC5DdqTEDMcuDCjKSBo71vnYJ67FOSPNr4KbYIHMuIoY2DYBlf8fjFPxWOkohfDD4CATdbNF97dlLUUafUloT22N6c4NSGwYcMVhIEAHM50lu92ZYihZ%2Bt7LbTbDkJgpGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674f9e964b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 90b4caf4c10d4aedbbf15a03650df1f8
f2da7656691c4bc1238df9c60f4439dde08541dc
2c67636d085bb985e6cc0a524aeb26d2a8d1f574d538e394349d2196587e1219
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2640
Cache-Control: max-age=130711
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:55 GMT
Etag: "6389a2c6-116"
Expires: Sun, 04 Dec 2022 07:45:26 GMT
Last-Modified: Fri, 02 Dec 2022 07:01:26 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 278
perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
200 OK 54 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
IP
File type ASCII text, with very long lines (65307)
Hash 2ad5e4808a06e22db81789c7be3119a5
54863edda38071748efcef3af9af13ac1a575afc
ad1eed35c4e8f207146ab412227c6e66e1635adc0673c84fffd13215c2cd0afd
GET /wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: text/css
last-modified: Mon, 21 Nov 2022 22:07:33 GMT
etag: W/"637bf6a5-5ffbb"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2904
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OnF04Wchc3kLWR%2FC3REYdKtRfzIA%2FDfIqQu9eNLPI8uvqKo5e2CGBjhmJmPTCW15PO%2B1gDpWStIwKieqcslYIjbaljpfhwlYVKJ%2FTMuKhz507XO59D6VsmJIbdBUCthL1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674f9f96bb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 315873c315af2be891e63f8b421bae65
5277bb0c4fea2b036c6faf28d66395c96166ffd2
3f6657d352a42f8257409f2ed365a3fb928ac3eb74a34a2c74a433290182cc92
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perezhilton.com/wp-content/themes/understrap-master/js/intersectionObserver.pollyfill.min.js?ver=0.9.4.1636670677
200 OK 2.8 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/js/intersectionObserver.pollyfill.min.js?ver=0.9.4.1636670677
IP
File type ASCII text, with very long lines (6991), with no line terminators
Hash ebb04b2359b9b633ece4baea82fd98f6
d901624ad83934d414c001b3bbd7951c70a1264b
1212a88388f5416ce573c950f10335c85ca6dd8ed77f7769b07247bb63169937
GET /wp-content/themes/understrap-master/js/intersectionObserver.pollyfill.min.js?ver=0.9.4.1636670677 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
etag: W/"5eecd0d9-1b4f"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1438
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9oPPs0n2pZS3p5RlU3uc6itUmddVERAIfkCUdjbtl44GllfGVbJVKyvTv6oDFR8rwTtYwq%2BT8Z3zzhsaRbVwq9rKcCTh7jrUM2PU8RP3ud0jXMc1EYFTp%2FSliKGxMWMWTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fa099bb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
web.prebidwrapper.com/perezhilton-DxtDG5qb8P/default/prebid-load.js
200 OK 1.5 kB URL HTTP/2 web.prebidwrapper.com/perezhilton-DxtDG5qb8P/default/prebid-load.js
IP
File type Unicode text, UTF-8 text, with very long lines (3530), with no line terminators
Hash a91224affecc37f9eb453c010014598e
98694edfbaf85d327caeea22a12beb9b8d3dd888
4ea6fd85127f125d5f4a3cca28e3baa75296093725a1fadceacefecfa4ad80f9
Analyzer Verdict Alert fortinet Malware
GET /perezhilton-DxtDG5qb8P/default/prebid-load.js HTTP/1.1
Host: web.prebidwrapper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 02 Dec 2022 17:54:16 GMT
x-amz-version-id: ujfLHsGGaFkS1q0C24MQvnA4yxxbJ.YC
server: AmazonS3
content-encoding: br
date: Fri, 02 Dec 2022 19:16:38 GMT
cache-control: max-age=3600
etag: W/"d609a69ffaa615802ce037554bf7bc99"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 91-Oi52dnLDgtBpkGsYUH9it2abtHYj0dZPoS_TX5xL70zdLY0Oh0A==
age: 618
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-338092-8
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-338092-8
IP
File type ASCII text, with very long lines (1921)
Hash 81b2ea7342bc82fb0e6e0a73f38c5612
1b2b87fe63c7a08c2f5e9cb6d89cacbeb7b42a64
74963cf12e4a0330aaa1b6f4b3cd55579dc30206282295593669adbb1e84a808
GET /gtag/js?id=UA-338092-8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 19:26:55 GMT
expires: Fri, 02 Dec 2022 19:26:55 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44661
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6Lel6LwZAAAAAOWBQsyuijMbyGWGbJCfx8DOYNnc&ver=3.0
200 OK 583 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6Lel6LwZAAAAAOWBQsyuijMbyGWGbJCfx8DOYNnc&ver=3.0
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash df3d63f706ae2447104b59bcaee07507
7f587c7d3d71b4c15e44c50b4463684be0b87c0a
d5055a374ec37853848bcebb9cd4b523f05a4e0b6ed6bdf5db73abd18db8f097
GET /recaptcha/api.js?render=6Lel6LwZAAAAAOWBQsyuijMbyGWGbJCfx8DOYNnc&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 02 Dec 2022 19:26:55 GMT
date: Fri, 02 Dec 2022 19:26:55 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 583
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40252)
Hash 968ef381a966b3d33075ec9146b0c961
cf1b81a5959e083c8f5bfcf930685446553c6360
0240871c8c039882f894a5fe4d18f50fdf56411cce4ec10597f2e151a3665338
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27448
date: Fri, 02 Dec 2022 19:26:55 GMT
expires: Fri, 02 Dec 2022 19:26:55 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1410 / 624 of 1000 / last-modified: 1670007492"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8e2a2f7e9f3309423227b4f9e4f6d72e
fc3e73a47be4afe446032689f588ca7c2c2549de
3c7d123b14b2fd19ba589ae59679004a7d092253aaadc6e3c73b6c3ab2fe3f22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C7D123B14B2FD19BA589AE59679004A7D092253AAADC6E3C73B6C3AB2FE3F22"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1957
Expires: Fri, 02 Dec 2022 19:59:32 GMT
Date: Fri, 02 Dec 2022 19:26:55 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 926166756f3ed53443116e6d924b8b06
06b215cd4e4efea6f173189b2359793a6b968011
c7d30ce88db44f0fe15e1a83b852209dc1a3d1bdb3931af9641e1c392347c61d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=97856
Date: Fri, 02 Dec 2022 19:26:55 GMT
Etag: "63891fcf-1d7"
Expires: Sat, 03 Dec 2022 22:37:51 GMT
Last-Modified: Thu, 01 Dec 2022 21:42:39 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GEPHWgmS3Pxaz99E06CHZfBL1fTWWYj128kpSgWiMr2VCVT4VwJMCw==
Age: 3312
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6ad57d839c4b452d7118cf2052f9d35
50afdbe46f04c7611c1a0111bce3a76775e50272
4c5c20573601bde0f5c3567e02d02d74ab22d4ffe12f632e1def1b87dc86ad3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 19:11:16 GMT
cache-control: public,max-age=3600
age: 939
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4f7d3887b4749ff366fb6b6e5bc912a1
6a98270483e11f48316049e9b4ef4c3c788f68e4
bc1c99827f836cc2a8dbfa14395a12acdea97902ada6627f66e4f5497073db86
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=94725
Date: Fri, 02 Dec 2022 19:26:55 GMT
Etag: "63891a3f-1d7"
Expires: Sat, 03 Dec 2022 21:45:40 GMT
Last-Modified: Thu, 01 Dec 2022 21:18:55 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: b5vWTnsd4zNJYD8rdFt1zcL0DIlNaLVxDnYHxCGFJt0eQn36Zh_6qA==
Age: 1605
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8e2a2f7e9f3309423227b4f9e4f6d72e
fc3e73a47be4afe446032689f588ca7c2c2549de
3c7d123b14b2fd19ba589ae59679004a7d092253aaadc6e3c73b6c3ab2fe3f22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C7D123B14B2FD19BA589AE59679004A7D092253AAADC6E3C73B6C3AB2FE3F22"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1957
Expires: Fri, 02 Dec 2022 19:59:32 GMT
Date: Fri, 02 Dec 2022 19:26:55 GMT
Connection: keep-alive
polyfill.io/v3/polyfill.min.js?features=IntersectionObserver
200 OK 94 B URL HTTP/2 polyfill.io/v3/polyfill.min.js?features=IntersectionObserver
IP
Hash eb8b0ba88b3acfb11ea81d5c02be9108
4b7f14cc2db25abdbe25472934b7469b2488f9d4
7237f15a97fe102c6ed13eadc0f7980da03cd06a20dfb7c7b8050e60dada617d
GET /v3/polyfill.min.js?features=IntersectionObserver HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
last-modified: Wed, 16 Nov 2022 09:56:10 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/105.0.0
date: Fri, 02 Dec 2022 19:26:55 GMT
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1653, PASS, fastly;desc="Edge time";dur=12
content-length: 94
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/js/theme.min.js?ver=0.9.4.1636670677
200 OK 36 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/js/theme.min.js?ver=0.9.4.1636670677
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9bbe33b9ee35eee9c14b94ea0f9b48c4
b53d05efd1e8e18b729a1101258f95ff0366492d
1bd6c744c38d02dc7a9539c0e27c1ed87dfd4d1c75e4a10ea4032cb259e11758
GET /wp-content/themes/understrap-master/js/theme.min.js?ver=0.9.4.1636670677 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
last-modified: Thu, 11 Nov 2021 22:44:37 GMT
etag: W/"618d9cd5-1f54e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4106
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FMn538Jcr%2FF7HGhBmPD%2FaJylrZxEGQBvfo1cprEzcuLFzFJxouTiPsytxljmXmWDG%2FVQ%2FLa%2FKd7oIIxV1XTyC51zA5ZIQnwErPRO%2FjzFUOucYAqHehU0MY6iQRw45P9Idg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fa0995b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/category/yummy-yummy-screw/
200 OK 21 kB URL HTTP/2 perezhilton.com/category/yummy-yummy-screw/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1883)
Hash 15afbf7adb41b04023d5fb59ce79a17c
f9ea1323854dc0b1dca2f251ad8be42ba7d92856
5111375cd3248967561ca4d375b253e537b6159c0bd484b34b5644535c98751a
GET /category/yummy-yummy-screw/ HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:54 GMT
content-type: text/html; charset=UTF-8
link: <https://perezhilton.com/wp-json/>; rel="https://api.w.org/", <https://perezhilton.com/wp-json/wp/v2/categories/238>; rel="alternate"; type="application/json"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EKRAPSTB54hU6CIxfEEMZO%2B8cXZ%2FU%2F7g5U5lV6%2FjxngHDs993rxWgDnLUiKg2Jdsupof%2BffuPSuJlH%2BDQKyBOgnpKc3SuZfncc%2FdC7F9rpjbKDrrn4K3q8i6ytjsRe%2BxdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773674f7de4db529-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/lazy-load-optimizer/assets/frontend/js/lazysizes.min.js?ver=1.4.7
200 OK 3.5 kB URL HTTP/2 perezhilton.com/wp-content/plugins/lazy-load-optimizer/assets/frontend/js/lazysizes.min.js?ver=1.4.7
IP
File type ASCII text, with very long lines (7209)
Hash 915594497e55e6845c25c64ae7c9e0a3
3191f970cfe108ed198e1b96f7e71a4133ec0965
1cf1a5ffa3913ed717129563eb8c1bfe26771645884652dda988343b02ec0d03
GET /wp-content/plugins/lazy-load-optimizer/assets/frontend/js/lazysizes.min.js?ver=1.4.7 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
last-modified: Wed, 01 Jul 2020 22:16:26 GMT
etag: W/"5efd0b3a-1c43"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4106
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hMmz5QJYoChAiP9hURsiP%2BvG1HKZLT4P6pOZ8LpRwRQHT52AQSEKg%2F57SqxQlFKj2hvciqxs3nd2Bw7YDz9U4DT9b1rt9QZchSm9l9IUhXTAgkcrKqd7EFnj1d8TkNdltw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fa099db529-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
200 OK 39 kB URL HTTP/2 perezhilton.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
IP
File type Unicode text, UTF-8 text, with very long lines (34729), with NEL line terminators
Hash 66b56094dd645236282d4694081ef9ff
b9a5994cb0540d179102a0a29f8ac14074765ceb
f1ee7ee9a3d071a7ea71a7a6c5431c90ab5814ec6bf671822ddff85fefed6fd8
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
last-modified: Wed, 28 Oct 2020 11:54:12 GMT
etag: W/"5f995be4-183ee"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 739
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UcFtNXnHe02pWODiwXNAbzFJfGuUJUaPfzzm6NsKQWSHCj5cyEPjKrboIUV39P1VJtc4%2FmYe02Iooy5EcjTYCP9e8OHtUmgaaK%2BNTI7JFHx2GNKMKjBDj2ryZZbp5TvJEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fa098fb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/title-bg-2.png
200 OK 5.2 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/title-bg-2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5a2507841bf0c3ab7b782f03dd8f072d
7f096d31acc09a8797938acb88c551ddc47c1e11
c3b4080893c7e9e66a04a2ae020a196b933e5bb522e7c7a97ce488c3c6f58a70
GET /wp-content/themes/understrap-master/images/title-bg-2.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: image/webp
content-length: 5240
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=8774
content-disposition: inline; filename="title-bg-2.webp"
vary: Accept
etag: "5eecd0d9-2246"
expires: Sun, 04 Dec 2022 16:19:41 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 529634
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d%2BCYFDUig3j32Ewv%2FlDyZWKsIVXCg%2BAwznVBOJq535dnguxiTv83dssoNV22Wrn5Jfti93js06Dv2fBXTZWxxkngVI1kZj%2F7HQnsn8g7s1SgWNrK2erVqUUC3dncH2Ghmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773674ff6816b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.4.2
200 OK 5.2 kB URL HTTP/2 perezhilton.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.4.2
IP
File type ASCII text, with very long lines (1849), with no line terminators
Hash 3e440d08e18b76c342a2771d56f89ee1
fddefaf45e9f318ea25e2c5f30c3649257bba1c0
d20a8c986728239533546b78f19484e6c59c2704e1e3bbaaee92beb23048cbba
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.4.2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
cf-bgj: minify
access-control-allow-origin: *
etag: W/"6103ec5e-739"
last-modified: Fri, 30 Jul 2021 12:11:10 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2904
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jM%2BwXV9NEPJEfBXR%2FPM9wvfN1JcQYRl2Nts9oDqhFbStqhe7jHoClPwgNoNR5pwJ73qpMPVuXocqUGsCnFRXhCqp26%2B0gY4WYdfyuiBMZ0X5NsiXkI3QNoPM5QTdlsI58w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fa19a5b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/crisscross-purple.png
200 OK 2.3 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/crisscross-purple.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7412caede939ddfae209483ab63e3406
bba7ed13b78b455475339ad432dfddc45788d89d
6946f8592c617a94793044c37f57ecdf546763106207d4edf5b6dfbc3f023adf
GET /wp-content/themes/understrap-master/images/crisscross-purple.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: image/webp
content-length: 2292
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5393
content-disposition: inline; filename="crisscross-purple.webp"
vary: Accept
etag: "5eecd0d9-1511"
expires: Thu, 08 Dec 2022 00:06:00 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 242455
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=essQnbuU3ia9K2WDotPQ839u2M3%2BOT2%2FFmNZyia9cMB4kTJx0Iu77pZL7Fez%2BVd5Z9MdiohO6VS%2BNEyqM2xOW457jvTirBNg4jADu8nB6q6ir%2BSIqdulKtPke7pd0IkxzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773674ff681fb529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/04.jpg
200 OK 5.1 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/04.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x274, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 527e2f7da6908cca1386339a19f1e3ac
92f2b65e69ea43c037f5c60b98c26da707cdc7b3
eba32bc5ef70516ebba66efde63a169dc4696cd642ad06a7a2feabc2996963a7
GET /wp-content/themes/understrap-master/images/04.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: image/webp
content-length: 5096
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=22076
content-disposition: inline; filename="04.webp"
vary: Accept
etag: "5eecd0d9-563c"
expires: Wed, 07 Dec 2022 23:29:37 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 244638
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3yxX3YZyWef7eR5Y8mgv48pwKbM%2F%2BKNaeZqiTa19tnQlf4uGEWggqjeW8h0X1aNwZWSgOOjsRNf76Tcgv7su2rRszhA2CN0Qa7tXwyheNE209KwSU3UKjFZsVREEW4lVaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773674ff7822b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/play-button-6.png
200 OK 5.0 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/play-button-6.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 09d6662e05a5682985f14cee49ffae23
02683261eb54226be9c9ce190594a4a8d3e7dba0
dd23ee2d447749cbbc982f7ee9cc9a88fbf70dd9a712324c8b1bdbea05209f0c
GET /wp-content/themes/understrap-master/images/play-button-6.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: image/webp
content-length: 4996
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=8970
content-disposition: inline; filename="play-button-6.webp"
vary: Accept
etag: "5eecd0d9-230a"
expires: Wed, 07 Dec 2022 21:57:34 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 250161
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fFdYQIqmw%2BzYPzMI%2FjJHEicqZ2bEwO3gecmR9%2BjNj17wxhhA10MClDHZlD%2Br9lwxDQJ1BhzYC4MT1enO4K1lzrvZf0%2F4GsnMqVvQdwx6zsGhT5skoPvniyOKBCLrIkUS4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773674ff7828b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
200 OK 6.2 kB URL HTTP/2 perezhilton.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
IP
File type ASCII text, with very long lines (12987), with no line terminators
Hash 06fd244ae8294dc0ed635c0058803faa
60ca9ec8060dd41e79526849fcb0bd026b305715
af4bd4f7798b5a5642eb95e05b340ec10cb0b1410afade33efc973079e42aa80
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
cf-bgj: minify
access-control-allow-origin: *
etag: W/"6103ec5e-32bb"
last-modified: Fri, 30 Jul 2021 12:11:10 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 7196
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8sUjfp%2BrK%2BkG1E7hlN4XjEUMicf43RRcxO1gaL6AG8Nr2JsxuPIJUugnazqbAZQ9dOaG5Cod5iEzIpBknuG2vp%2FfhRDtALBk%2FVNffNNzC4MAgkUC1HP0GDW4TjhkyI0H0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fa0992b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/side-video-title-bg.png
200 OK 110 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/side-video-title-bg.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7ce66afe1631031bb516d7773f506026
e45739542414189b9b9a46aec9aaa0925d62ae5e
3e6643c0f263147cc6cfeeb25b7dbcec9c8146e811eed36173fd152e4fe4ba46
GET /wp-content/themes/understrap-master/images/side-video-title-bg.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: image/webp
content-length: 110
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=214
content-disposition: inline; filename="side-video-title-bg.webp"
vary: Accept
etag: "5eecd0d9-d6"
expires: Fri, 09 Dec 2022 18:58:42 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 88093
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mS583RtfyTLBadYZ%2By3ttrXpiXKmmQ%2BfaGaFzFHAUOoSqZmxdW8lKx%2F4LnypLUEMikB5ByF7bBjhp%2FuDEwt%2FBrhUw%2BPfA2%2BDwdkjanwWA1uT7eYDvtVCVYBR2IVW2UrcCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773674ff782cb529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/understrap-master/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/octet-stream
content-length: 77160
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
etag: "5eecd0d9-12d68"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 6710
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BzYPALwIVOZ6ooV1ga82SYo5LbSCcbtrHN6l2RfeOo2oibMpDdkTS755gfdZpt%2B44WPC%2FPJFw2QN3WVsFC8FK4UT4S08Q37EVJFhA8w4BZdwyR9ZFqPlFE6MOKo9YIFP9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674ff8842b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/fonts/Rustico/Rustico.otf
200 OK 150 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/fonts/Rustico/Rustico.otf
IP
File type OpenType font data\012- data
Size 150 kB (149984 bytes)
Hash 5252e764142ac0bca8ec3b63a1794c34
bd477bca84036a3132e91467a73102d5fc381540
a9aa6a2e52794de01c7ab5e4c6e3ae9b3dfba0dac7da7cde6389a7c0d70e6ba5
GET /wp-content/themes/understrap-master/fonts/Rustico/Rustico.otf HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/octet-stream
content-length: 149984
last-modified: Sat, 26 Sep 2020 17:52:27 GMT
etag: "5f6f7fdb-249e0"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 6424
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p2b9NtZQD3DLJz%2BzUdLLm0L%2Bf%2FMTH1AQO58%2FJR2vwgddI757fwnA2TiffbErI85U5mO1hzMkVhyA%2BUXaL9SKGkOVAg0P%2FklZ3XKHOxW12kXGh9rmNk3q%2FPsv101TtyCPxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674ffb877b529-OSL
X-Firefox-Spdy: h2
socialcanvas-cdn.kargo.com/js/rh.min.js
200 OK 406 kB URL HTTP/2 socialcanvas-cdn.kargo.com/js/rh.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 406 kB (405829 bytes)
Hash 46eca193d3bdb2f49582490916c729fc
14efa80507c839e40c7d3220a63634749d337cfb
2b251ddce6717bc2ff70168e654660aa5c516981c4f4036599f6ef53fb9ccc84
GET /js/rh.min.js HTTP/1.1
Host: socialcanvas-cdn.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 17:10:26 GMT
server: AmazonS3
content-encoding: br
date: Fri, 02 Dec 2022 17:11:01 GMT
etag: W/"166f6453c953c1ed1b0fcc048b55132d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xaQGfrS-GKw6fzvuCBpYST5nWdT5nzKLay52CrliHCVSam4E-CriRQ==
age: 8156
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lobster/v28/neILzCirqoswsqX9zoKmMw.woff2
200 OK 33 kB URL HTTP/2 fonts.gstatic.com/s/lobster/v28/neILzCirqoswsqX9zoKmMw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 33436, version 1.0\012- data
Hash b9b4c932ef89c39525bfe1b604cda3a1
767246e4c7df1b6c32f590c16c135808382b1aba
9a932e49823b59769330d1ce8ef9f1b90e5ae8ecd5f2bb388d19bf684cdb7ebd
GET /s/lobster/v28/neILzCirqoswsqX9zoKmMw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33436
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 17:49:38 GMT
expires: Wed, 29 Nov 2023 17:49:38 GMT
cache-control: public, max-age=31536000
age: 265038
last-modified: Tue, 26 Apr 2022 15:01:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25672, version 1.0\012- data
Hash fe3e5be2baa0126122ba9367ebab73c8
40bec99106dfab5f3721ed725483eb618a9016cd
8b166007d6f54c33b3ea10ea23572bc3166f55f365840d3cbd6ef7b5dcf6674e
GET /s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25672
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:56:29 GMT
expires: Fri, 01 Dec 2023 21:56:29 GMT
cache-control: public, max-age=31536000
age: 77427
last-modified: Mon, 18 Jul 2022 19:12:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 172361
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 172361
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perezhilton.com/wp-content/themes/understrap-master/css/ajax-loader.gif
200 OK 2.6 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/css/ajax-loader.gif
IP
File type GIF image data, version 89a, 32 x 32\012- data
Hash 7929b973556ab589cb85cefad65d7fe0
8b3a78a0ee64dde94f617a40631735cbc8e23a76
568d7b83659993469a2d729ad98daba3a7de2568f74d670d18ae618f118fe353
GET /wp-content/themes/understrap-master/css/ajax-loader.gif HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/gif
content-length: 2592
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=4178, status=webp_bigger
etag: "5eecd0d9-1052"
expires: Thu, 08 Dec 2022 21:16:55 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 166201
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IpcE6QDxsItLh8OoApP8DMRIbtNveJBHiWIU5foGG8YTmVIHRav7qgpjYQl5UGSzbRoNw0dNWup%2BoYB5BaV75U61dXx7LNTN30Q71zj%2F3%2Fe7ZZxdzHmBt%2B37r5z9bbgqoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7736750099c2b529-OSL
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 04f42ed2b8f7cef708589fceb8d5ddf8
d90856a9b826d90da9e39d8e7043c38688cdc90c
b0f8eb4babf6144f9676d7c1adeab8e694ce1b46469588313eab612828ba4976
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 19:26:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 18:46:24 GMT
Expires: Sat, 03 Dec 2022 18:46:24 GMT
ETag: "d90856a9b826d90da9e39d8e7043c38688cdc90c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317942195_151379541007558_799171166982181451_nthumb.jpg
200 OK 7.0 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317942195_151379541007558_799171166982181451_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x172, components 3\012- data
Hash 7eb21cfa1bfdabe57d9438777fbea2c4
1c7cca97d3be05c24d2afb709aff9f54a67c5a88
6a72be4fa0206dcab6b29d0b2949e88f8d53491cfcd0d1c5cf7328d28e170d5b
GET /wp-content/uploads/sb-instagram-feed-images/317942195_151379541007558_799171166982181451_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 6987
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=7128, status=webp_bigger
etag: "6389b081-1bd8"
expires: Sat, 10 Dec 2022 08:18:56 GMT
last-modified: Fri, 02 Dec 2022 08:00:01 GMT
cf-cache-status: HIT
age: 40080
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fuSPNPq4sO5VnQ0mWiwweeO24H9QZpmA5P7XjZFSQmXQ7nZK%2FVse1AUoDT%2FQF7W900p8EF5rQeanoQxl9rSpCSr%2BUULYk5QW%2FMwwSV2ay6dchlUXQXjWrqy9%2FG7QsU2nXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367500ea22b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317616689_960381531588171_6476985943256599034_nthumb.jpg
200 OK 8.1 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317616689_960381531588171_6476985943256599034_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x177, components 3\012- data
Hash d08670213bcc92bd44781b9ac4f9078f
7040d19261923c828a9334bee52a2c4961c66923
e428408b2c6b16e9582a06993030c4f67e2327aaac9594da816053682d9f5dc5
GET /wp-content/uploads/sb-instagram-feed-images/317616689_960381531588171_6476985943256599034_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 8131
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8276, status=webp_bigger
etag: "6389b081-2054"
expires: Sat, 10 Dec 2022 08:18:56 GMT
last-modified: Fri, 02 Dec 2022 08:00:01 GMT
cf-cache-status: HIT
age: 40080
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H2mJYq8FA2MWJAk8Q5V%2BHOhiR0tGgLl9zg1inx2uAzKHFL0whnuypkKj6ObEnoXN3%2FA%2FOVCoo7VNKF%2F9UGw6Xu2KgOf487YvmEmE9OY6q0Cp2xzBO%2BK1SzCsZm2QC5Lwkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367500ea29b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317649374_6060735243960006_3128115955290866758_nthumb.jpg
200 OK 7.5 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317649374_6060735243960006_3128115955290866758_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x174, components 3\012- data
Hash 1b12e2f29ffbdef330b8ccfdb39db33e
7d077110fb325ed6960e092028faad58578e0263
83aa7478143727de7f63c94af8dabf4fd46d66f9839470ff066d0e1e0ce44b78
GET /wp-content/uploads/sb-instagram-feed-images/317649374_6060735243960006_3128115955290866758_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 7488
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=7609, status=webp_bigger
etag: "6389b082-1db9"
expires: Sat, 10 Dec 2022 08:18:56 GMT
last-modified: Fri, 02 Dec 2022 08:00:02 GMT
cf-cache-status: HIT
age: 40080
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BaYp%2BGinHS1wmk%2BOYqRLzZhUF7nQIV5X3VmWOWgP3RM1KyIkWn6zkn7fLuzCiwRnyDOGGY4PP5%2BJapLUyl1NDMMEsxw%2BHNzrH%2BlQqBfnkGGE3CnC86xLyXN9i70%2BH7D6Lw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367500fa2eb529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317859749_5608647212581469_1820156238983297013_nthumb.jpg
200 OK 6.9 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317859749_5608647212581469_1820156238983297013_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x152, components 3\012- data
Hash b3c6c951ebb900546577f781f02b320c
0abaabbd8f6614cf856c87862f02375d730d7f93
bc0522443f26abe29bb8a9a8bbc459cd64732726c2cdf387ed353bece4e716ca
GET /wp-content/uploads/sb-instagram-feed-images/317859749_5608647212581469_1820156238983297013_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 6948
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=7099, status=webp_bigger
etag: "6389b082-1bbb"
expires: Sat, 10 Dec 2022 08:18:56 GMT
last-modified: Fri, 02 Dec 2022 08:00:02 GMT
cf-cache-status: HIT
age: 40080
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b3b6C7qfKPaeaJrKrp7VELlMbEWx2MMQbYYUnnCw7PKN%2BXlffvpvzLhYB%2BY4q7pRHkz2Z0AycAgONS14OWorVpGgMipDBZxupw%2FSwiS0YABxHQejrMQ5iJiFdA24DKYPTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367500fa34b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317757547_1707288473020609_1363719413153174114_nthumb.jpg
200 OK 7.7 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317757547_1707288473020609_1363719413153174114_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x187, components 3\012- data
Hash b4cc09d3cdebca7cbbbd1c0e960223d2
a72750801e6268f871cd3e6b36d2db7b35bf508c
f270ba18f2ad00063a85218b4d24ebd003ddbf7b2b12a98b17528f64ef9b770b
GET /wp-content/uploads/sb-instagram-feed-images/317757547_1707288473020609_1363719413153174114_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 7668
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=7804, status=webp_bigger
etag: "6389b082-1e7c"
expires: Sat, 10 Dec 2022 08:18:56 GMT
last-modified: Fri, 02 Dec 2022 08:00:02 GMT
cf-cache-status: HIT
age: 40080
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i8%2BxdK%2FxK7WAUL3%2FCyOCUr2R2wxCtY2Vx4K0J0YUavMv3Doz3NALmEHzl0pnTJZQXfCWRTRj0vLZLUng0w4TnuB%2B%2Bql1hVThFsgKtDqVYNPB4yfO03s0qDIZ0%2BTMSSYl3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367500fa2bb529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317576126_131356583094148_5839090260884599377_nthumb.jpg
200 OK 9.1 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317576126_131356583094148_5839090260884599377_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x182, components 3\012- data
Hash 50948355202b3fb4c98cd5509c5b0a56
37d43539356cd7d84ae4b58f2be94061e5875b0d
b1a7f8bfe8405b81062571626a9648a3e2e637c0143e44594ba694c756b96398
GET /wp-content/uploads/sb-instagram-feed-images/317576126_131356583094148_5839090260884599377_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 9053
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=9328, status=webp_bigger
etag: "638907c3-2470"
expires: Fri, 09 Dec 2022 20:06:25 GMT
last-modified: Thu, 01 Dec 2022 20:00:03 GMT
cf-cache-status: HIT
age: 84031
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fIjnIXxPeR%2BDs07ud0q0MvvdfC0ctT3ZNPQxuursx9YFN9ip32MUtA7dcNd%2FqUDvj5W9uo4N%2FL%2FI6ynZHfSbGqS6gJetAzapstI1w2vGMgpg4kVtMehm8R8DqTD2H4BU9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367500fa46b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317631815_703075597705337_2776685235827865052_nthumb.jpg
200 OK 6.5 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317631815_703075597705337_2776685235827865052_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x267, components 3\012- data
Hash a9d6249d8424eb8dcc71763cb457d306
1cd68f4799b12402b1f4390bccfbec4ae7ffd1ea
7c2df76e801bfe9a4edd91b6807b111c10ca90a4e8bfb3c7e57136fd5730c3ca
GET /wp-content/uploads/sb-instagram-feed-images/317631815_703075597705337_2776685235827865052_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 6511
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=6835, status=webp_bigger
etag: "638907c3-1ab3"
expires: Fri, 09 Dec 2022 20:06:25 GMT
last-modified: Thu, 01 Dec 2022 20:00:03 GMT
cf-cache-status: HIT
age: 84031
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D5a4XMIc6RlEHgA1Xb6voHh36W3DMFzGPF6e7JXRDcZXaX7SXqj87B2yPPRXR3kn1QGlIdst5DpM4jfjUcKR47k2RsHn8PJc2Py3dh3rW0N%2FULbqjkTs4ZUxaNaWnVicjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367500fa4bb529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317531787_179708894653815_664821031774172884_nthumb.jpg
200 OK 8.8 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317531787_179708894653815_664821031774172884_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x267, components 3\012- data
Hash accd233d1b572fbe8cdd0bca190e74a3
37364b28225e74b3f07f8e53eff56d0433ee9317
8358f1cd45d6e1a6af2a7476822e60c4038a8edb683ea24a5af17790a1b53e61
GET /wp-content/uploads/sb-instagram-feed-images/317531787_179708894653815_664821031774172884_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 8784
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=9002, status=webp_bigger
etag: "638907c2-232a"
expires: Fri, 09 Dec 2022 20:06:25 GMT
last-modified: Thu, 01 Dec 2022 20:00:02 GMT
cf-cache-status: HIT
age: 84031
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iUfsBW7XXBAHmztkSt6gkV4TGU6toH36CrOLGu%2BfEFz3ud7qhIS1W1ZJx8onCsACh8%2FWj4Ls1bC5xS%2F6I91a%2BuLoc2DH3ypqMHwcWy%2FHRYCrbpyg%2Fq9TUrQkkGU4Ksah3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367500fa3bb529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317811271_700432931797710_3463048432749768000_nthumb.jpg
200 OK 6.5 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317811271_700432931797710_3463048432749768000_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x152, components 3\012- data
Hash 9c1a3c788d529c3869b599418d1f22d0
190cf0f3e14e3c61e0fec4bb725ba1e0528e3016
5387e7b803e655fd2b955ac804829eaad8d22cf695e420e711752e27184eb4d8
GET /wp-content/uploads/sb-instagram-feed-images/317811271_700432931797710_3463048432749768000_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 6450
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=6557, status=webp_bigger
etag: "638907c1-199d"
expires: Fri, 09 Dec 2022 20:06:25 GMT
last-modified: Thu, 01 Dec 2022 20:00:01 GMT
cf-cache-status: HIT
age: 84031
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hCJ5SuHzU4%2B%2FCCcjUj9YiH0HI86TFxMPVi82xeZxOVBxVT3wLxs7DAcCqVxRGQioZhv7SllmiFRWCwfHewTR2yCWf9K3ke54IJjq%2F54p788uyBqapAqNYNYnjSx7t3CLlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367500fa37b529-OSL
X-Firefox-Spdy: h2
powerad.ai/detect-aau?ch=2
200 OK 2 B URL HTTP/2 powerad.ai/detect-aau?ch=2
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /detect-aau?ch=2 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700|Lobster|Rustico|Quicksand:400,700&display=swap
200 OK 828 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700|Lobster|Rustico|Quicksand:400,700&display=swap
IP
Hash 8f60a2fa0ad5d764a3a893ab58371f59
51ae444f2d4b503dcdff7803bd51ab0188e5a34b
b513e85fa883d90d681e5594a333ab84331987c3fe11e3f7a566097c3f861ae4
GET /css?family=Roboto:300,400,700|Lobster|Rustico|Quicksand:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 19:26:55 GMT
date: Fri, 02 Dec 2022 19:26:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
reporting.powerad.ai/
200 OK 2 B IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST / HTTP/1.1
Host: reporting.powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 165
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 19:09:57 GMT
expires: Tue, 28 Nov 2023 19:09:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 346619
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a.teads.tv/analytics/tag.js
200 OK 73 kB URL HTTP/2 a.teads.tv/analytics/tag.js
IP
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 8087ffaa5d9a196ba47e0f449715cf25
6d580cea8be54c5994427bbc7287ab719a74a919
e4ebd4322a2502381841694420159185cdddace2e8fe7789ee7006149e41c232
GET /analytics/tag.js HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +hi3J8gLh7odTbzzwPTTi1cNLRiMIMeCbLwhFS3fdhvnkPc6F/KidF+aylAlaVgqP4umQC5X3TY=
x-amz-request-id: VYTSDGA8QVA7F7Y0
last-modified: Wed, 02 Nov 2022 09:38:15 GMT
etag: "6ddfb3a828a563a7719081ff9aeedaba"
x-amz-server-side-encryption: AES256
x-amz-version-id: Y6qsPmt0o95KDo3Ibo2euzqSnxQebNV8
accept-ranges: bytes
content-type: text/javascript;charset=utf-8
content-length: 3391
cache-control: private, max-age=3600
date: Fri, 02 Dec 2022 19:26:56 GMT
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
static.adsafeprotected.com/skeleton.js
200 OK 17 B URL HTTP/2 static.adsafeprotected.com/skeleton.js
IP
File type ASCII text, with no line terminators
Hash 53fab767ecbd3bf07990b10246befbd4
49044085bb137d175d261b5fb9617c6f0f302c49
bdeed1e1c0751610c8f3dc2a5c78c93f841c366b36a7f7a54f5e6752c2656c05
GET /skeleton.js HTTP/1.1
Host: static.adsafeprotected.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 17
date: Tue, 20 Sep 2022 03:50:24 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Aug 2020 23:54:35 GMT
etag: "53fab767ecbd3bf07990b10246befbd4"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rRzXoicAazlKQkyFcWC3wtSUTM9LH7BWyAJ3HjmIYJ8-TgTPQkg0Dg==
age: 6363393
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pagead/ppub_config?ippd=perezhilton.com
200 OK 167 B URL HTTP/2 securepubads.g.doubleclick.net/pagead/ppub_config?ippd=perezhilton.com
IP
File type JSON data\012- , ASCII text, with very long lines (396), with no line terminators
Hash fafcdf2429f92aede80c85de385f960e
0260ed48157550148e3ff44c173c243fa9c2e630
3b54171af49653c22bd6bd81242b73a14f3ff501dbe4fd74d056e7d9332d4238
GET /pagead/ppub_config?ippd=perezhilton.com HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
date: Fri, 02 Dec 2022 19:26:56 GMT
expires: Fri, 02 Dec 2022 19:26:56 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 167
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 19:41:56 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash aeb13f3bf312fc3d6b3ae18fff4c7373
6f8d013bbc8212ddbed261cb10f591a480e189af
b8d8c67758334f8e3399777fe15b30e45266408d057902540a15de375791f358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2481
Cache-Control: max-age=170472
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:56 GMT
Etag: "638a3eb7-1d7"
Expires: Sun, 04 Dec 2022 18:48:08 GMT
Last-Modified: Fri, 02 Dec 2022 18:06:47 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 32ce0f38fae1b1af1c9a7b1920f7691a
3ba8859e57fccec52648465bbd6d59cee6ae2f60
5621e401988686f703aa189c04defb81c41c1542f52cc14245509624cdeb10f6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=98621
Date: Fri, 02 Dec 2022 19:26:56 GMT
Etag: "6389258e-1d7"
Expires: Sat, 03 Dec 2022 22:50:37 GMT
Last-Modified: Thu, 01 Dec 2022 22:07:10 GMT
Server: ECS (nyb/1D16)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xyCPCNvAu8E7gKwuOC4noEvBKBD5mTKsizr8J6d3yNulbvU-fv2yQA==
Age: 2607
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 1ba6f81d02d6341f2bb3bf73d8593290
c7d9f4686655badf7530642aca01fc13e235b9d4
997875d23bd0cd18ce2007d4d94b49c6dbf0f4ffbdea1704e26fa028818e94ac
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 19:26:56 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 18:00:10 GMT
Expires: Sat, 03 Dec 2022 18:00:10 GMT
ETag: "c7d9f4686655badf7530642aca01fc13e235b9d4"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 2861173b320290e31201b405c47928b2
1db870813b51323cb8bd30933fead02e40c1d284
e6a83c23dbe3c61497976497c446bef316801a8b1340c89f1257c77c29dd9f33
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 19:26:56 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 20:54:10 GMT
Expires: Fri, 02 Dec 2022 20:54:10 GMT
ETag: "1db870813b51323cb8bd30933fead02e40c1d284"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 424affe18f33b86d2c9290ef29ee464d
ce4a3451a0391ecad89089545815484c7707e557
ad274bd7d70c0166d2b65e2d63561e2396b1494df2b607c3731a3163342f47b6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=98148
Date: Fri, 02 Dec 2022 19:26:56 GMT
Etag: "63892425-1d7"
Expires: Sat, 03 Dec 2022 22:42:44 GMT
Last-Modified: Thu, 01 Dec 2022 22:01:09 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tyDOiMU29me-KPbTWO6tzj0agdHMbkUAN4zpL8OCLuRoX71cPMdBdw==
Age: 2495
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0099007cdbda387cb4328e81c26918cb
e2002bbf8fcec91ccd580c06e0f0da08860b4523
5d07f1800bb2d70e8b6d8ccff6b3a7bbef1c5b820f688c109869e31bd09c0b86
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 02 Dec 2022 19:26:56 GMT
Last-Modified: Fri, 02 Dec 2022 17:59:57 GMT
Server: ECS (nyb/1D16)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7P7BTBv2v1aG6DePILlE2b_P1IkO8mahQ0SnMNw5JhonwPXB3qeirA==
Age: 5220
prd-collector-anon.ex.co/main/events
200 OK 0 B URL HTTP/2 prd-collector-anon.ex.co/main/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /main/events HTTP/1.1
Host: prd-collector-anon.ex.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 675
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: text/plain; charset=utf-8
content-length: 0
vary: Origin
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-GANCBjEfRH5Fe.js
200 OK 160 B URL HTTP/2 rules.quantcount.com/rules-p-GANCBjEfRH5Fe.js
IP
Hash 7602c05be39825c3fad02a96f76db456
db61024519befad6dc15191bcfe8090ca3a7ee18
a67bbdc13dec7d78a2a262845fb14cec2007d8dfad2743c3ffa666e7dbc3111f
GET /rules-p-GANCBjEfRH5Fe.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 160
last-modified: Fri, 14 Oct 2022 00:20:54 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Fri, 02 Dec 2022 18:49:49 GMT
cache-control: max-age=3600
etag: "7602c05be39825c3fad02a96f76db456"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NcG2rB6F6rJfdbFXX7wfXwD33tGn5bkQK36XAIprxwrcII5m8qS_MA==
age: 2302
X-Firefox-Spdy: h2
jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&us_privacy=1---
200 OK 2.9 kB URL HTTP/2 jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&us_privacy=1---
IP
File type Unicode text, UTF-8 text, with very long lines (14447), with no line terminators
Hash a17e3a01f51f1572124b669d4b7d47c8
d63973d7a4d7930ca14fff5e42bdf6a9bea751e9
1a8c7583230e3735afa1239937f0685c49f9c8f802be05aa57ee6c5937ce7489
GET /t?ntv_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&us_privacy=1--- HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: text/javascript;charset=UTF-8
content-length: 2855
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Sat, 02-Dec-2023 19:26:56 GMT; Path=/; Secure; SameSite=None;
content-encoding: gzip
X-Firefox-Spdy: h2
s.ntv.io/css/click-out-icon.css
200 OK 618 B URL HTTP/1.1 s.ntv.io/css/click-out-icon.css
IP
File type ASCII text, with very long lines (618), with no line terminators
Hash 43c31858c9aac81661d142577cb1fc68
8a736cfb2890869ccca3a08a0fee958db9065e49
8e41a8e6b02e146fe25fa71262a12a24c80ee7e0debfcae0757a4fe6c67de5a9
GET /css/click-out-icon.css HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: L+7Dni3Dair+fW/8ocWuYL/NaUFoV+hx3vOaVlgEpoT66xJpnMwjDXuX9530dIUTy5iPTf5TMMc=
x-amz-request-id: HJ96NMDZYRWSV0KK
Last-Modified: Wed, 13 Sep 2017 22:37:26 GMT
ETag: "43c31858c9aac81661d142577cb1fc68"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 618
Date: Fri, 02 Dec 2022 19:26:56 GMT
Connection: keep-alive
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
perezhilton.com/wp-content/themes/understrap-master/images/crisscross-blue.png
200 OK 2.2 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/crisscross-blue.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7ff8d71fec3b2dbf4018df8c102e8a8f
92f00cc180294f3fc3b994c3bbdaef6c7f32800b
f0a81ad562240c035cdcdf0bac347e89ea98ae0c5a069e7868d4da609de51acf
GET /wp-content/themes/understrap-master/images/crisscross-blue.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/webp
content-length: 2162
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5102
content-disposition: inline; filename="crisscross-blue.webp"
vary: Accept
etag: "5efd0b3b-13ee"
expires: Sat, 10 Dec 2022 06:24:38 GMT
last-modified: Wed, 01 Jul 2020 22:16:27 GMT
cf-cache-status: HIT
age: 46938
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YojQyhVTwj%2BT9GejccA5xWjnyn8zW5M2S1dmD35YMn7zSXb2lWNRGcT5MEImWMKnBgBqyUX%2BnDZrH%2F5fB2Eog%2B%2B7za1wcrOxvPetwT4%2FDQF7vjqgTpuok5%2Bfho096OwJuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773675054880b529-OSL
X-Firefox-Spdy: h2
socialcanvas-api.kargo.com/v2/request
204 No Content 0 B URL HTTP/1.1 socialcanvas-api.kargo.com/v2/request
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2/request HTTP/1.1
Host: socialcanvas-api.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.0
Date: Fri, 02 Dec 2022 19:26:56 GMT
Content-Length: 0
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Vary: Access-Control-Request-Headers
Access-Control-Allow-Headers: content-type
s.ntv.io/font/click-out-icon.ttf?sjshwd
200 OK 2.6 kB URL HTTP/1.1 s.ntv.io/font/click-out-icon.ttf?sjshwd
IP
Hash 174a2fe35f522750523347e61b0fd6d9
f615cb8411874340ea3da25d0a14496d656167e3
25f581e84b4b73a0ac387b8990cd3b3d32dcd5130dfd02fe5cd9012f1c2715b3
GET /font/click-out-icon.ttf?sjshwd HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://s.ntv.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: i8nh5aPLPmXLN4QzOJ7GANgCoGDjXVmGrCY6WciZFBMk301tSFeukdbHgBxbAA8hvjeSCzmZ2oY=
x-amz-request-id: 7RCC3AM58BFB44M1
Last-Modified: Tue, 04 Oct 2016 00:20:40 GMT
ETag: "f587575d5d6dc5e7dc296da77fb11396"
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 1092
Date: Fri, 02 Dec 2022 19:26:56 GMT
Connection: keep-alive
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
perezhilton.com/wp-content/uploads/2020/07/perez-hilton-logo-300x49-1.png
200 OK 3.8 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2020/07/perez-hilton-logo-300x49-1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c7764c24e2de3456874de6498526d64f
3eba45267451f1f7207775df71e25646a2f39b42
2d420940dd06b215993e088c1fa5e041093186882e0c5533f67b4d696f34fbc0
GET /wp-content/uploads/2020/07/perez-hilton-logo-300x49-1.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/webp
content-length: 3834
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6439
content-disposition: inline; filename="perez-hilton-logo-300x49-1.webp"
vary: Accept
etag: "5f177546-1927"
expires: Sat, 10 Dec 2022 04:11:49 GMT
last-modified: Tue, 21 Jul 2020 23:07:50 GMT
cf-cache-status: HIT
age: 54907
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uA9fcBr3Ba%2F5k9Ux2sEdDYqHXLzC%2F0K4fs6Zud7oSmGyyoN1zpi2iwBqdyDGC7CCt1s8N5WLZpm2vPX5jFNJ6fNdzSFKANle9%2BujXHSoG28BhwFAXpW8Tj%2BTAH9XtZU7hA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77367505a8e5b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/feature-bg-holiday-2.jpeg
200 OK 33 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/feature-bg-holiday-2.jpeg
IP
File type JPEG image data, progressive, precision 8, 1584x634, components 3\012- data
Hash f8df43724c7b37f7679dea45e5d79517
b6b2d2d746ee5aab3a8027bef8e53bcecad50e82
ed4528db17b4e83313f696cb7268e09c141c23ed99a1cc9ed3b561feb3c0c7ef
GET /wp-content/themes/understrap-master/images/feature-bg-holiday-2.jpeg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 33081
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=40451, status=webp_bigger
etag: "61a7284c-9e03"
expires: Sat, 03 Dec 2022 15:33:48 GMT
last-modified: Wed, 01 Dec 2021 07:46:20 GMT
cf-cache-status: HIT
age: 618788
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m%2B3vHbqXwI7j7YpGxu0Fw4jeVbHsor2tIZ0pKUyiS%2F5Vpd%2BDptZwh9Zr12CdENAITJGmZJ2th4EaJgoClr8sWEaF0oLU6tHy7I4iJWF%2BV0sWFwfj3uGgZKZxpjuFLhwlLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367505a8e9b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/08/Tommy-Lee-Full-Frontal-Instagram-Picture-1024x683.jpg
200 OK 109 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/08/Tommy-Lee-Full-Frontal-Instagram-Picture-1024x683.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1024x683, components 3\012- data
Size 109 kB (109179 bytes)
Hash 4424fc0017f7c07479d1b644830fc451
832734be5148833a1b041c5c9d1bc4abd4a9caef
66e5d38c4f68b8f87dd061d3d41a3f1670f682798d16381e532e526279dcfa00
GET /wp-content/uploads/2022/08/Tommy-Lee-Full-Frontal-Instagram-Picture-1024x683.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/jpeg
content-length: 109179
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=127978, status=webp_bigger
etag: "62f512ce-1f3ea"
expires: Sat, 10 Dec 2022 09:50:46 GMT
last-modified: Thu, 11 Aug 2022 14:31:42 GMT
cf-cache-status: HIT
age: 34570
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PRk2HC209EqNF6%2BrZ46VH5kfIKTMAH5kmDO3OeaUwsU2vbKcQk8CnptHskZ6M8hbgjBpYqZ0i%2BfWR2TqDAm4VcyMo5iPteviRvLX8GLzjUKFSDhmvqvrGMfR4aT9GksEng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367505a8efb529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/glass.png
200 OK 460 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/glass.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b976c00d10b3f9b36a00d17cdf9fa326
2879298b17b5234fc7b5f9217c4d46a78fcb685a
eb32633a40695a487dd80912b7d58b061aac6eee2bfcaa76ec7f36cf7749c635
GET /wp-content/themes/understrap-master/images/glass.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/webp
content-length: 460
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=996
content-disposition: inline; filename="glass.webp"
vary: Accept
etag: "5eecd0d9-3e4"
expires: Thu, 08 Dec 2022 22:06:56 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 163200
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DeBT8Byix4tyk%2BI4H5Jk34cZqZkqXD5VL0LojSlE8%2BrEjCQ3N5WCnsrzgU0TyeDsELsXm24Ed6yY%2BwUV7Gvi1QtkjHNWJ2XFURT1QQDkUhM5MAd3tsaaHyQqlvoa9BkJpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7736750598dfb529-OSL
X-Firefox-Spdy: h2
jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=3405113&ntv_pl=1103180
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=3405113&ntv_pl=1103180
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_at=394&ntv_usid=3405113&ntv_pl=1103180 HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Sat, 02-Dec-2023 19:26:56 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
socialcanvas-api.kargo.com/v2/request
200 OK 1.3 kB URL HTTP/1.1 socialcanvas-api.kargo.com/v2/request
IP
File type JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1289), with no line terminators
Hash e8b25f21e561a8407514dcce6569f421
5c0dcdfbaa38b18a48d0b9fac6760052df220b22
37899332c1e04d19168935a3dde5fec4d0504371087fdde176eeae36d0f23194
POST /v2/request HTTP/1.1
Host: socialcanvas-api.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 260
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.0
Date: Fri, 02 Dec 2022 19:26:56 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 1289
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With
ETag: W/"509-XA3N+6o4sYpI0Ln6xnYAUt8iCyI"
ntvcld-a.akamaihd.net/image/upload/w_860,h_860,c_fill,g_auto:text,f_auto,fl_lossy,e_sharpen:70/assets/8892DB09B2354AA69FD693D1E4C03DCF.png
200 OK 108 kB URL HTTP/1.1 ntvcld-a.akamaihd.net/image/upload/w_860,h_860,c_fill,g_auto:text,f_auto,fl_lossy,e_sharpen:70/assets/8892DB09B2354AA69FD693D1E4C03DCF.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Size 108 kB (108276 bytes)
Hash 974cb0ad12a39c96b2f028d58fa5bbde
1f3185f361914bb722b2be6681f6831dcb2b7864
834890445ea49235eafda2c536207a97e6fb1a1b1b16d2d638365d5400fdad10
GET /image/upload/w_860,h_860,c_fill,g_auto:text,f_auto,fl_lossy,e_sharpen:70/assets/8892DB09B2354AA69FD693D1E4C03DCF.png HTTP/1.1
Host: ntvcld-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
ETag: "dd194daf2bb3d7ca6f03ebc67ecbb897"
Last-Modified: Sun, 30 Oct 2022 18:09:48 GMT
Server: Akamai Image Manager
X-Serial: 939
X-Check-Cacheable: YES
Content-Length: 108276
Content-Type: image/webp
Cache-Control: private, no-transform, max-age=2069006
Expires: Mon, 26 Dec 2022 18:10:23 GMT
Date: Fri, 02 Dec 2022 19:26:57 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13532
Expires: Fri, 02 Dec 2022 23:12:29 GMT
Date: Fri, 02 Dec 2022 19:26:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13532
Expires: Fri, 02 Dec 2022 23:12:29 GMT
Date: Fri, 02 Dec 2022 19:26:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 48369
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hb.brainlyads.com/prebid.js
200 OK 191 kB URL HTTP/2 hb.brainlyads.com/prebid.js
IP
Size 191 kB (191125 bytes)
Hash 531c13fcff333ff5ef192282f6e85ff2
4766a057e2e1e4c8f45e75f1dd69b13d5e13c590
5d51e8b09231dbdff9de7ac7b86a2791452fe90476cbad35f4943dab0b8dd833
GET /prebid.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 06:15:38 GMT
vary: Accept-Encoding
etag: W/"6388468a-91d4f"
expires: Fri, 09 Dec 2022 19:26:56 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d147ccb10bda82b153a596c3c967cd6a
ffd0763f997e71a8c1458523fc17cafe8849dfdf
1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:51 GMT
age: 77886
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13532
Expires: Fri, 02 Dec 2022 23:12:29 GMT
Date: Fri, 02 Dec 2022 19:26:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 50802
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd8ad22c2eb1eb91c76970fa449f1bc4
0de97f3a4964038222bd751e043e413113e6db9d
668f805815aede3bc04f8564bd6aefd56029362bb0aa8a794673eb78ab2d4643
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4834
x-amzn-requestid: 63a0b8b5-5cb3-4a1f-aa46-47c84abe726f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQrjEeAIAMF3sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7e3-0032799009f893ba79f314db;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 02EF3QEVKmEB2ikbGk9gzQq7_VMi00ufHUNRFTL8MpwJKaXQwdT8HA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:42:27 GMT
age: 56670
etag: "0de97f3a4964038222bd751e043e413113e6db9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 156e9ea97b774cbd8361072e4041b6c8
fc71ae3cae92ed6011904bb2367f23bf4e69fab4
58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 10:51:17 GMT
age: 30940
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 44df3b34ec7b3fd62faad37061b75032
e2a6503853cd10dec87c4c644f96fbc1fc91d6ec
54f5ad79c3cc6d2eaf4c19a9c32e237754481abf3491063a765c71a13ab9fbd8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=99147
Date: Fri, 02 Dec 2022 19:26:57 GMT
Etag: "63892856-1d7"
Expires: Sat, 03 Dec 2022 22:59:24 GMT
Last-Modified: Thu, 01 Dec 2022 22:19:02 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: t8RiBBF9KKUJR4SYycWBwprP0_M3LnLep5rotbAiHKfXWPK83xBRMA==
Age: 2422
rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&se=e30&dtstmp=1670009214944
302 Found 0 B URL HTTP/2 rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&se=e30&dtstmp=1670009214944
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&se=e30&dtstmp=1670009214944 HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 02 Dec 2022 19:26:57 GMT
content-length: 0
trace-id: c6221b1f604d8b32
vary: Origin
location: /j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&se=e30&dtstmp=1670009214944&n3pc=true
set-cookie: lidid=bb1a12be-6097-4df1-b939-8bb02835bf41; Max-Age=63072000; Expires=Sun, 01 Dec 2024 19:26:57 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&se=e30&dtstmp=1670009214944&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&se=e30&dtstmp=1670009214944&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&se=e30&dtstmp=1670009214944&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Content-Type: text/plain
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:57 GMT
content-type: application/json
content-length: 13
trace-id: d786cef41e917600
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: cb22aafa-4a2f-41fd-86d6-910d74bbd7e5
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/06/denise-richards-joins-onlyfans-instagram-1024x946.jpg
200 OK 194 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/06/denise-richards-joins-onlyfans-instagram-1024x946.jpg
IP
File type JPEG image data, progressive, precision 8, 1024x946, components 3\012- data
Size 194 kB (193658 bytes)
Hash 5df63f5b50497ed56a96e86b134e2c74
c16178e32aeca812656b83062fbc5ed61885ead8
341ca5bd14c8ce5acbd0dc34f49870f22aabd7829a2a4571a7948b942ccc78b1
GET /wp-content/uploads/2022/06/denise-richards-joins-onlyfans-instagram-1024x946.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:57 GMT
content-type: image/jpeg
content-length: 193658
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=200394, status=webp_bigger
etag: "62b4d882-30eca"
expires: Tue, 06 Dec 2022 21:32:18 GMT
last-modified: Thu, 23 Jun 2022 21:17:54 GMT
cf-cache-status: HIT
age: 338079
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CnEoT%2BR6EKWVqNU9FmwbuAeUkra%2BkGMw3CNUzehh64b5PKZTr0pRV3qV9xfiTKFH25AM0WYd8fDitE5nVJh5bwi0CbE0WSXtJGC33Achr9wl%2F22QMLldmK9cEnG3SlVORA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675094e23b529-OSL
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
301 Moved Permanently 167 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 167
location: https://d3div1mtym39ic.cloudfront.net/aax2/apstag.js
server: CloudFront
date: Fri, 02 Dec 2022 00:42:44 GMT
via: 1.1 a49c26e403f2dac09629dceb6dac5740.cloudfront.net (CloudFront), 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-C1
x-amz-cf-id: Nx27Zfm-uW5R_ObVzmzVfyKU3nojyQ0ZkydHPj-_dzQgBquhmxT81g==
age: 67453
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-9JS9Z0NFL0>m=2oebu0&_p=201516189&cid=1273796959.1670009215&ul=en-us&sr=1280x1024&_s=1&sid=1670009215&sct=1&seg=0&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&dt=Yummy%20Yummy%20Screw%20Archives%20-%20Perez%20Hilton&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-9JS9Z0NFL0>m=2oebu0&_p=201516189&cid=1273796959.1670009215&ul=en-us&sr=1280x1024&_s=1&sid=1670009215&sct=1&seg=0&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&dt=Yummy%20Yummy%20Screw%20Archives%20-%20Perez%20Hilton&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9JS9Z0NFL0>m=2oebu0&_p=201516189&cid=1273796959.1670009215&ul=en-us&sr=1280x1024&_s=1&sid=1670009215&sct=1&seg=0&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&dt=Yummy%20Yummy%20Screw%20Archives%20-%20Perez%20Hilton&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://perezhilton.com
date: Fri, 02 Dec 2022 19:26:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash dac57aee83fd3a2ddc6062078a14c96b
5f1d474a4240d864d1f9ca72bfb20c26667663d9
679ebe4565db79ab8eb3487a99c7b9aa54562c3a41e1be21db8de145997f8b40
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:26:57 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 12:12:00 GMT
Expires: Fri, 09 Dec 2022 12:11:59 GMT
Etag: "5f1d474a4240d864d1f9ca72bfb20c26667663d9"
Cache-Control: max-age=578101,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7736750abc91b50c-OSL
p.cpx.to/p/12967/px.js
200 OK 2.0 kB IP
File type ASCII text, with very long lines (1990), with no line terminators
Hash 5dbddde1d9530a933894a8cefd6890d2
2539ba49075ba661adeaecb49aa4b88f75ce4959
f266acb707c5b2704c3b6e18e0888d7995bad0ba0ffec4a125146f7e3d058583
GET /p/12967/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2419200, public
Content-Type: application/javascript; charset=UTF-8
Date: Fri, 02 Dec 2022 19:26:56 GMT
Content-Length: 1990
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 464dd073d919cdde4d9b5923ed150f43
7f2df90743c6cd78007a17c3dc3a09ea66003ccf
dc8412854f039f86adde6420dcd4a6661f222d80cfb1ed56ea6e3d7fdcadd0e6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2660
Cache-Control: max-age=109462
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:57 GMT
Etag: "63894fb3-1d7"
Expires: Sun, 04 Dec 2022 01:51:19 GMT
Last-Modified: Fri, 02 Dec 2022 01:06:59 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 314 B IP
Hash 2c1d51a79ab43fdf25cff1412a6884a6
f431146c232d9eacf2a5999fe91d6add089dd0d3
ba8ba68825b61168060c0cc787ea13b9ff54dbb6879fae979966faee06db33c3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2445
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:57 GMT
Last-Modified: Fri, 02 Dec 2022 18:46:12 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 314
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5ac20ea815c77d3144a630d953836b61
ae9e3f19d1f8227cae41f24e9e29300b0a062400
d78d09e2775e65d2c241d28019f607a5cf73e6465acc59a219022d42ca6e7039
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 677
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 02 Dec 2022 19:26:57 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: 664a8280-6fd5-477e-b60b-234abf480c16
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ea195f2ba94234dbc8901541d17a12c5
4a4002d69d134960b7dad44c5a1ab4549ca57159
660c5e09ee37a4926166d2f81be838c5bf23582790bca3f9b8fbb3b51ebb8262
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "660C5E09EE37A4926166D2F81BE838C5BF23582790BCA3F9B8FBB3B51EBB8262"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7223
Expires: Fri, 02 Dec 2022 21:27:20 GMT
Date: Fri, 02 Dec 2022 19:26:57 GMT
Connection: keep-alive
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f56251fa996d87e41815027ad290a48
e215fa92566e411a091eeaaa0661a77d5b81283c
9cfe3cb36827f9d8e0695735557acde561eededc38691c6ff6484116657ea30f
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 675
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 02 Dec 2022 19:26:57 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: 0a491011-20e2-4a0c-b52b-54bd4cd369f4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8d854eac2359732cbc6115530261d27e
11e8674fe28fae43be470f972d15fd244af05e9f
42824011d577228656077f4089ae672baaabe25e8af7e8f9282da6e6ce6cacfb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=93468
Date: Fri, 02 Dec 2022 19:26:57 GMT
Etag: "63891605-1d7"
Expires: Sat, 03 Dec 2022 21:24:45 GMT
Last-Modified: Thu, 01 Dec 2022 21:00:53 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NK3m2mLcO1F1t4JZn_08TQSfF7x4F-MNCUTRko2bzbUmHSbCL228Cw==
Age: 1432
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 843
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Fri, 02 Dec 2022 19:26:57 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
htlb.casalemedia.com/openrtb/pbjs?s=501529&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2215269dbe36251518%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2216d674748b787338%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22501529%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
200 OK 38 B URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=501529&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2215269dbe36251518%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2216d674748b787338%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22501529%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6c4d8d8a5e972731c0772d49c327b25c
ce9abb78e8030bb78d6cc8113db33ee8c8c57336
a91bdb4c787ec2214bbe0af58f7c9436165d882085010eacde21316ed932e405
GET /openrtb/pbjs?s=501529&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2215269dbe36251518%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2216d674748b787338%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22501529%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:57 GMT
content-type: application/json
content-length: 38
cf-ray: 7736750b4944b4f4-OSL
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B4nxmmS67rHzdd0ZjHjVLTMiYjxN2Z8rsdnxS8IKN%2BFULAwIEkslz72OoBtYuEhXpjaTfc9fya%2BUL%2B%2F8yoxZgcI3f3%2FFUjbdojZQJzG6x%2FTfKKMYifXN5pMvhYkwxGe967la59N7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 000a2e15a014c8dd047e06b859a809d7
051a46ab17cd724545ce464d63c505ab899f86cb
be07ca1f5b301c76513a2a210dbff809ca7d498dc330e47e328c1e9d2b4d7c42
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 19:26:57 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 20:57:48 GMT
Expires: Fri, 02 Dec 2022 20:57:48 GMT
ETag: "051a46ab17cd724545ce464d63c505ab899f86cb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
200 OK 279 B IP
Hash 4d5063e9021d24470e46fdb55d5e6cac
62cb1fec9d675182b3ea68073c3247719b755297
992ce23369636df4579bfb98b20c7feede23f57268fe3d7eb8b2ecf32cecb83e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2515
Cache-Control: max-age=149303
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:57 GMT
Etag: "6389ebe5-117"
Expires: Sun, 04 Dec 2022 12:55:20 GMT
Last-Modified: Fri, 02 Dec 2022 12:13:25 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5
200 OK 699 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5
IP
File type JSON data\012- , ASCII text, with very long lines (699), with no line terminators
Hash c3ae1582883189831fc9d2b110aad0ad
b401c55f9459b3c1c9dbeabf34fd4404002099b3
6d54aecd2bd9fef0d74763ef48135aded46f2a190546075cf9466b9e5296c8a9
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 699
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Fri, 02 Dec 2022 13:41:10 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RLecQIdGkz3uwnpNyC7XHoWy5ck-7OYbEbxqO72NgWNhupwRLoLMCA==
age: 20747
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17888&site_id=442788&zone_id=2548858&size_id=2&p_pos=atf&us_privacy=1---&rp_schain=1.0,1!nextmillennium.io,15042,1,,,&eid_pubcid.org=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3%5E1&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tk_flint=pbjs_lite_v6.29.0&x_source.tid=d28fd25b-b404-4cda-8c28-9cb541efa2f4&l_pb_bid_id=2027eb518e5d8a58&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5087864295135186
200 OK 240 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17888&site_id=442788&zone_id=2548858&size_id=2&p_pos=atf&us_privacy=1---&rp_schain=1.0,1!nextmillennium.io,15042,1,,,&eid_pubcid.org=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3%5E1&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tk_flint=pbjs_lite_v6.29.0&x_source.tid=d28fd25b-b404-4cda-8c28-9cb541efa2f4&l_pb_bid_id=2027eb518e5d8a58&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5087864295135186
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9bd1671e7d8a852fe1a503c6fddf44a2
b21f64ecf7b06cefd4d88b2670db636810033724
3ea2a5f9588a61afdc714151162a00e024c92e57bcd53d4211b22e6c2fdb30c2
GET /a/api/fastlane.json?account_id=17888&site_id=442788&zone_id=2548858&size_id=2&p_pos=atf&us_privacy=1---&rp_schain=1.0,1!nextmillennium.io,15042,1,,,&eid_pubcid.org=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3%5E1&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tk_flint=pbjs_lite_v6.29.0&x_source.tid=d28fd25b-b404-4cda-8c28-9cb541efa2f4&l_pb_bid_id=2027eb518e5d8a58&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5087864295135186 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Fri, 02 Dec 2022 19:26:57 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB6WDBGL-G-B3UX; Domain=.rubiconproject.com; Path=/; Expires=Sat, 02-Dec-2023 19:26:57 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qptejit0LfkTe9DtVM30fCgJ0MVX6Cj0QepOHVTkoLIhuZppt9Bb1XYHe6QAskPRNMx+FptCLf6SgD0N5xGbqay; Domain=.rubiconproject.com; Path=/; Expires=Sat, 02-Dec-2023 19:26:57 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 240
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a0ab4791f39d024c036b1eaefb35cb54
ef8db0a4b664c02ffb60dd4327939de074f30524
97507bbe96138b31e4640fa82582bc9d4e396103cc3cbb643979dd98a4603af3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102935
Date: Fri, 02 Dec 2022 19:26:57 GMT
Etag: "638937cf-1d7"
Expires: Sun, 04 Dec 2022 00:02:32 GMT
Last-Modified: Thu, 01 Dec 2022 23:25:03 GMT
Server: ECS (nyb/1D14)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SuGKae04McP_1O5HbjF1IzBGqkpBi0JxigW1ipNv5UrAHY5_tArmGA==
Age: 2249
hb.undertone.com/hb?pid=3757&domain=perezhilton.com&ccpa=1---
204 No Content 0 B URL HTTP/2 hb.undertone.com/hb?pid=3757&domain=perezhilton.com&ccpa=1---
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /hb?pid=3757&domain=perezhilton.com&ccpa=1--- HTTP/1.1
Host: hb.undertone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 672
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: private, max-age=0, no-cache
date: Fri, 02 Dec 2022 19:26:57 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSDo OUR BUS UNI COM NAV"
pragma: no-cache
server: istio-envoy
set-cookie: UTID=1f679fe75e294400a450b424d1587bf7; Path=/; Domain=undertone.com; Max-Age=31536000; Expires=Sat, 02 Dec 2023 19:26:57 GMT; Secure; SameSite=None
UTID_ENC=1uxknwr2bn0i33rgnov30c453; Path=/; Domain=undertone.com; Max-Age=31536000; Expires=Sat, 02 Dec 2023 19:26:57 GMT; Secure; SameSite=None
x-envoy-upstream-service-time: 4
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Oa0DbYHI-mTuFfb36bls12THCFHml5C-5MBi8LyLoJBO_awEOWEPrw==
accept-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64
X-Firefox-Spdy: h2
pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
200 OK 2.8 kB URL HTTP/2 pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
IP
File type C source, ASCII text, with very long lines (2658)
Hash bf5da1c2137a9f95540c5c865952c04b
d07a569ff37d68467841990cad5d2a99e1a2e37d
8e521ebeb6ce59914c54f532b1577efd671f4b02bb3c331e01b4a7e79a02cfea
GET /v5/pixeljs/Hc6PdfQeAi.js?dne=1 HTTP/1.1
Host: pixel.zprk.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:57 GMT
content-type: text/plain;charset=UTF-8
content-length: 2753
access-control-allow-methods: POST, GET, DELETE, PUT
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
hb.emxdgt.com/?t=1500&ts=1670009215875&src=pbjs
204 No Content 0 B URL HTTP/2 hb.emxdgt.com/?t=1500&ts=1670009215875&src=pbjs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?t=1500&ts=1670009215875&src=pbjs HTTP/1.1
Host: hb.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 751
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 19:26:57 GMT
cache-control: no-cache
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
access-control-allow-headers: security, Content-Type
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.29.0
200 OK 4.2 kB URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.29.0
IP
File type JSON data\012- , ASCII text, with very long lines (9097), with no line terminators
Hash 35af86c2707414af1320d7cb7f4a85f2
7c2c7d291021864a4427f8450377d96eb6ae5ec7
acbba7901ad42bf31fcf6681a5900e4fcbb007f897cfa00ad5ae443889284418
POST /rtb/bid?src=prebid_prebid_6.29.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 759
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:26:57 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://perezhilton.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Transfer-Encoding: chunked
X-Sovrn-Pod: ad_ap4ams1
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 60b1e4f076432cfea9254bea0abf2666
c1765b310bff4f6a264b558634b184cea2c0f8a3
c73fe66ce0f4e585964a4f69b3b11db75c1b7d5f3972e944a057ac42fc8b98d5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127608
Date: Fri, 02 Dec 2022 19:26:57 GMT
Etag: "6389975d-1d7"
Expires: Sun, 04 Dec 2022 06:53:45 GMT
Last-Modified: Fri, 02 Dec 2022 06:12:45 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LNNTEOgEHuuXPjk0kja-uNkcAYTd-f_geUBk8SCGkKGHfTp5kZAnBg==
Age: 2460
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c51bb7b6d3f932b06bb3bcbe4a4e404b
0d5458574a33ed926c2caf342e7f833081451234
a64780bacbecc990418857cbc50b5d5a87e8475df22073e01ec48a675dbce753
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=170569
Date: Fri, 02 Dec 2022 19:26:57 GMT
Etag: "638a3ebc-1d7"
Expires: Sun, 04 Dec 2022 18:49:46 GMT
Last-Modified: Fri, 02 Dec 2022 18:06:52 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sYV53G-GPhFGSryKH0zH1-a-ZgttcF-S0qMQF-TM2LIEOtAC94_PKw==
Age: 2574
perezhilton.com/wp-content/uploads/2022/11/jason-momoa-strips-butt-jimmy-kimmel-1024x701.jpg
200 OK 126 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/11/jason-momoa-strips-butt-jimmy-kimmel-1024x701.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x701, components 3\012- data
Size 126 kB (126360 bytes)
Hash ee79e6f7bbb076a9ddd2b05c74dca67b
12dd280de01c7c6e3439853b2cfd8382e461fa1d
dd544b51e5acc8ff07d579c5b1120a198af18167bb3e247f74ceafbe7f4611ef
GET /wp-content/uploads/2022/11/jason-momoa-strips-butt-jimmy-kimmel-1024x701.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:57 GMT
content-type: image/jpeg
content-length: 126360
last-modified: Thu, 10 Nov 2022 16:29:29 GMT
etag: "636d26e9-1ed98"
expires: Sat, 10 Dec 2022 19:26:57 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4%2F%2Bhw7GrK7LGCg6LPbq09d63ApR0rXlI8vPBCRl7YihrkITczcziC5LHc9nXpnIvPSwSj8J4Jn9qNriT%2FD7OHjDj8ZV4P%2FsngRGnfiHQtIr2AhnLg4Zt4E7XurX4Ns%2FONQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367505a8ecb529-OSL
X-Firefox-Spdy: h2
ads.yieldmo.com/exchange/prebid?pbav=6.29.0&p=%5B%7B%22placement_id%22%3A%221-174f-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22callback_id%22%3A%2266a4a8d3379307%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%5D%2C%22ym_placement_id%22%3A%222422700953154036356%22%7D%5D&page_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&bust=1670009215871&dnt=false&description=&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%7D&us_privacy=1---&pr=&scrd=1&title=Yummy%20Yummy%20Screw%20Archives%20-%20Perez%20Hilton&w=1280&h=939&pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3%22%2C%22atype%22%3A1%7D%5D%7D%5D
204 No Content 0 B URL HTTP/2 ads.yieldmo.com/exchange/prebid?pbav=6.29.0&p=%5B%7B%22placement_id%22%3A%221-174f-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22callback_id%22%3A%2266a4a8d3379307%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%5D%2C%22ym_placement_id%22%3A%222422700953154036356%22%7D%5D&page_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&bust=1670009215871&dnt=false&description=&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%7D&us_privacy=1---&pr=&scrd=1&title=Yummy%20Yummy%20Screw%20Archives%20-%20Perez%20Hilton&w=1280&h=939&pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3%22%2C%22atype%22%3A1%7D%5D%7D%5D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/prebid?pbav=6.29.0&p=%5B%7B%22placement_id%22%3A%221-174f-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22callback_id%22%3A%2266a4a8d3379307%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%5D%2C%22ym_placement_id%22%3A%222422700953154036356%22%7D%5D&page_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&bust=1670009215871&dnt=false&description=&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%7D&us_privacy=1---&pr=&scrd=1&title=Yummy%20Yummy%20Screw%20Archives%20-%20Perez%20Hilton&w=1280&h=939&pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3%22%2C%22atype%22%3A1%7D%5D%7D%5D HTTP/1.1
Host: ads.yieldmo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 19:26:58 GMT
set-cookie: yieldmo_id=g1c88639f41f6b5aeafb%7C1670009218110%7C3155385116845635856%7C; Domain=.yieldmo.com; Expires=Sat, 02-Dec-2023 19:26:58 GMT; Path=/; Secure; SameSite=None; Secure
x-robots-tag: none,NOINDEX,NOFOLLOW
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
access-control-request-headers: Cache-Control, Pragma
access-control-allow-methods: POST, GET, OPTIONS
pragma: no-cache
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/07/chris-meloni-pelaton-app-nude-1024x689.jpg
200 OK 108 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/07/chris-meloni-pelaton-app-nude-1024x689.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x689, components 3\012- data
Size 108 kB (108028 bytes)
Hash 72418815b5e2989948317bb55b7a842c
3f2f82d87386c8d1d083aa79b6ddf6e90c39a2fe
493eabaabdba7b7717fd274ee4695eff21ee7c42c3d61bf3d6d34ac10e0ca100
GET /wp-content/uploads/2022/07/chris-meloni-pelaton-app-nude-1024x689.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:57 GMT
content-type: image/jpeg
content-length: 108028
last-modified: Thu, 14 Jul 2022 22:42:26 GMT
etag: "62d09bd2-1a5fc"
expires: Sat, 10 Dec 2022 19:26:57 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QZw%2FkI9LcEfVArHKOCAa4Umj8FsetNyMSVd0U5LIao5EbkIj3TNQ%2FGk2W2g53x6JS2ak9VmtRp1KXIzSWrYSeG9h1V34QDuGeTrJwrl7%2BNscROa7uMWtvWsi00bXfMLiSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367505a8f4b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/08/Katy-Perry-MASH-Game-Reaction-1024x798.jpg
200 OK 132 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/08/Katy-Perry-MASH-Game-Reaction-1024x798.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=MEGA/WENN], baseline, precision 8, 1024x798, components 3\012- data
Size 132 kB (132329 bytes)
Hash 3bf38e85406f7b12dc880bb0fc3c7bfe
bcfc5f53ccafe9b19a8aa31c0807cd9a1688adc1
16f92d9792647f15ad6eecd855631ac11224bac0f9ac6f1f5cc4d6bf98dffbdf
GET /wp-content/uploads/2022/08/Katy-Perry-MASH-Game-Reaction-1024x798.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: image/jpeg
content-length: 132329
last-modified: Thu, 04 Aug 2022 19:17:01 GMT
etag: "62ec1b2d-204e9"
expires: Sat, 10 Dec 2022 19:26:57 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M2neuVQ%2BQ6zm9OSO9mX5zYgj%2B9cbaTZKDLN47R4uHZQahzO2ADqFvPgFaXuQcvUOj5D33u0D%2BvYDr%2Fm4Hdgcq7M4Hps2By4X4AIG4U11A%2Bs4ezEOcL4RTZfzckC24uw2Og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77367505a8f3b529-OSL
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&pid=DdyrMTDcm8IVg&cb=0&ws=0x0&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22174f-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%5D&schain=1.0%2C1!nextmillennium.io%2C15042%2C1%2C%2C%2C&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 182 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&pid=DdyrMTDcm8IVg&cb=0&ws=0x0&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22174f-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%5D&schain=1.0%2C1!nextmillennium.io%2C15042%2C1%2C%2C%2C&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash 03206b3becd3f319748be27fac14e41e
de0bf799d74c58057efc333d7d44b443e17cbfa0
9ef6333d9a5248ee0a6db9b1a66792f5ae0c79f9588040fb555bb888bc5ea2de
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&pid=DdyrMTDcm8IVg&cb=0&ws=0x0&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22174f-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%5D&schain=1.0%2C1!nextmillennium.io%2C15042%2C1%2C%2C%2C&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 182
server: Server
date: Fri, 02 Dec 2022 19:26:58 GMT
x-amz-rid: N88WME8KSWDGK18DR221
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 1BvCDjJHvtG0Gd8tiGGEqarYo9gAPlJND6mmjWGfFOHJ8FACO-xVTA==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 40eb4f476417f59a8d8ca6782b983810
30db578ed2898dca6bb8153be45c50e643d2458b
8c66bee3b8ea2facd9ef2c61dbd1344c9fbcbd29fd38e181bebe86ac17c2bd4a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5166
Cache-Control: max-age=151536
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:58 GMT
Etag: "6389ea44-116"
Expires: Sun, 04 Dec 2022 13:32:34 GMT
Last-Modified: Fri, 02 Dec 2022 12:06:28 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 278
bcp.crwdcntrl.net/6/map
200 OK 60 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b209d5a0252bbc3b1a3c76bda6a75576
77f35c691733ec52140b85338ea5b09429b90853
b45cb4503e8435c11e395fb657fe001f4eac706b14cfb754fb1b63512144153a
POST /6/map HTTP/1.1
Host: bcp.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 50
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: application/json;charset=utf-8
content-length: 60
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.3.94
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/uYzurxb5ulw
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/uYzurxb5ulw
IP
Hash 2cf0b3762f1c4a100cdc982d478c745e
b1d38873ef71d281d9b8752f8b3fc4cfb21b1e45
ae23a03150f656e6fffcda558632ca3dc5fbf02277e73947abf2e6a26cb23ff6
POST /s/gts1p5/uYzurxb5ulw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
audit-tcfv2.quantcast.mgr.consensu.org/?log=%7B%22accountId%22%3A%22GANCBjEfRH5Fe%22%2C%22domain%22%3A%22perezhilton.com%22%2C%22publisher%22%3A%22Perez%20Hilton%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22dPwGeF35y7eAISaRjtqDYQ%22%2C%22clientTimestamp%22%3A1670009216525%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-cm9b6lydekxxmcwk7m0n%22%7D
200 OK 2 B URL HTTP/2 audit-tcfv2.quantcast.mgr.consensu.org/?log=%7B%22accountId%22%3A%22GANCBjEfRH5Fe%22%2C%22domain%22%3A%22perezhilton.com%22%2C%22publisher%22%3A%22Perez%20Hilton%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22dPwGeF35y7eAISaRjtqDYQ%22%2C%22clientTimestamp%22%3A1670009216525%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-cm9b6lydekxxmcwk7m0n%22%7D
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /?log=%7B%22accountId%22%3A%22GANCBjEfRH5Fe%22%2C%22domain%22%3A%22perezhilton.com%22%2C%22publisher%22%3A%22Perez%20Hilton%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22dPwGeF35y7eAISaRjtqDYQ%22%2C%22clientTimestamp%22%3A1670009216525%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-cm9b6lydekxxmcwk7m0n%22%7D HTTP/1.1
Host: audit-tcfv2.quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-origin: *
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/12/brad-william-henke-dead-1024x766.jpg
200 OK 79 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/12/brad-william-henke-dead-1024x766.jpg
IP
File type JPEG image data, progressive, precision 8, 1024x766, components 3\012- data
Hash 19786f8e04f4837a223107580087b100
9399f57c9789fd52db6cb83c32b52f44934f4acf
69df68ae951ded533dd6dcacc578a506982df1d80daa2e2440cf787408527320
GET /wp-content/uploads/2022/12/brad-william-henke-dead-1024x766.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=3524755945110770; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215; _awl=2.1670009217.0.5-f3490afc6890f27d0817e38b8193c4bc-6763652d6575726f70652d7765737431-0; _au_1d=AU1D-0100-001670009216-D5XTAEUN-874F; _au_last_seen_pixels=eyJhcG4iOjE2NzAwMDkyMTYsInR0ZCI6MTY3MDAwOTIxNiwicHViIjoxNjcwMDA5MjE2LCJhZHgiOjE2NzAwMDkyMTYsImdvbyI6MTY3MDAwOTIxNiwic21hcnQiOjE2NzAwMDkyMTYsImltcHIiOjE2NzAwMDkyMTYsInNvbiI6MTY3MDAwOTIxNiwiYmVlcyI6MTY3MDAwOTIxNn0=; panoramaId_expiry=1670009218398
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: image/jpeg
content-length: 78595
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=79497, status=webp_bigger
etag: "638a1fbc-13689"
expires: Sat, 10 Dec 2022 16:04:55 GMT
last-modified: Fri, 02 Dec 2022 15:54:36 GMT
cf-cache-status: HIT
age: 12123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MF3rXZlPzpC8DHrbBUN6WhN1ckPOu9kBfvOPe10FH7fgSou8xcKG19kVmGYye5XA9slBWVlxPi%2Bl6uAz3jd6Nuiuz0GwGJ75BAiysqckZmtEMYI8PhEbmTJvj14My2fQ6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675107804b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/07/Doja-Cat-Stranger-Things-Crush-1024x792.jpg
200 OK 215 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/07/Doja-Cat-Stranger-Things-Crush-1024x792.jpg
IP
Size 215 kB (214828 bytes)
Hash 369b874177254e9e3846b2a484d85b68
db00e2e921c61064c47d3494c7e33af18a6ea5ce
2e0439fbd9a863b164200b659fef86886651bfdc0428449f80f9222896360753
GET /wp-content/uploads/2022/07/Doja-Cat-Stranger-Things-Crush-1024x792.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: image/jpeg
content-length: 205903
last-modified: Thu, 07 Jul 2022 19:47:38 GMT
etag: "62c7385a-3244f"
expires: Sat, 10 Dec 2022 19:26:58 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AvtgE0vMqyBEid9bE%2BgSFa6y15DCYyV2Lu%2FfEa3jmIH30CU%2FPy2Gk5mJ7Wq7wsj89zrbgiuKIb3Bym8fJm995h7CKRJmQmjvLPuT8IsjOzozEIla5OnOHb0voAsIhXmIYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675094e16b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/07/pete-davidson-new-face-manscaped-ad-campaign-kim-kardashian-video-1024x697.jpg
200 OK 103 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/07/pete-davidson-new-face-manscaped-ad-campaign-kim-kardashian-video-1024x697.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 2021 Editor 19.0 (Macintosh), datetime=2022:07:11 08:31:27], baseline, precision 8, 1024x697, components 3\012- data
Size 103 kB (102720 bytes)
Hash 8e0414e09a1322921f4c87a9a56bb515
97d5bb30988fb5163168f501f5585637771637e4
71187b9f670116449305a70f863484326e81c2329b2d76d23cea5b66e486e1c5
GET /wp-content/uploads/2022/07/pete-davidson-new-face-manscaped-ad-campaign-kim-kardashian-video-1024x697.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: image/jpeg
content-length: 102720
last-modified: Mon, 11 Jul 2022 15:31:54 GMT
etag: "62cc426a-19140"
expires: Sat, 10 Dec 2022 19:26:58 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ntCW%2FJQcIis%2B94SxRCS173tdy3LcQT2zR%2BDjcLWzBGhQqQh5NdOGyTZ4vOGRnmxcdN1gWG0GwYnP0QG%2BGEF3bTsNX5FUGzdCWJvo0fvagZ%2FXC%2FdAi5QpKshd%2FbJNqranZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675093e14b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/07/Jessica-James-Decker-Son-Naked-Pic-Eric-1024x808.jpg
200 OK 197 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/07/Jessica-James-Decker-Son-Naked-Pic-Eric-1024x808.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x808, components 3\012- data
Size 197 kB (196570 bytes)
Hash 6718db5006cc6f9145248102749c7bf6
04ab12aa140e3abbead7b2edc8622487210877db
b50c92027836b67c57d22032ffa7ebaaaabaaaa66169bfadeaae29ddd21941ea
GET /wp-content/uploads/2022/07/Jessica-James-Decker-Son-Naked-Pic-Eric-1024x808.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: image/jpeg
content-length: 196570
last-modified: Tue, 12 Jul 2022 19:43:33 GMT
etag: "62cdcee5-2ffda"
expires: Sat, 10 Dec 2022 19:26:58 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S3AbT2mj2urj7r%2BDfcnf8wYC4psNR9ZA%2FBOzOqxSHlMVcvNJxG%2Ft%2FVGkOrt7aTuJ8TcChJT352%2F9bL0BtgV4kHz2a1l%2FAS%2Fwkc8rEYMqqsvNrp7wuNZkIyn%2BXIFD9lNwsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675093e0bb529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/06/eva-mendes-ryan-gosling-underwear-1024x773.jpg
200 OK 121 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/06/eva-mendes-ryan-gosling-underwear-1024x773.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x773, components 3\012- data
Size 121 kB (120731 bytes)
Hash 092fd4f06b7467be71f003209c9dc096
b17918656be9e7b6caf5fc16192a3d328d79005b
3a28017c7f93b30a95ad86e0af9b7f77eb3fd7cda55307a82b1491639076e6ab
GET /wp-content/uploads/2022/06/eva-mendes-ryan-gosling-underwear-1024x773.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: image/jpeg
content-length: 120731
last-modified: Wed, 29 Jun 2022 23:30:55 GMT
etag: "62bce0af-1d79b"
expires: Sat, 10 Dec 2022 19:26:58 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1emCvGP4Fi4eRh9OBbpMUaTU5BbuuBH3lQX92p5OnLMoIuHehBU%2BDHOBb9wbM30zDUbD5XQurhdbBt%2BZPwwYGzD6V9CuGb2d2LgGXGhmSfiLxr2nS1UCFuzYg7pNpIBcpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675094e17b529-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/06/Orlando-Bloom-Workout-Video-3-1024x763.jpg
200 OK 129 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/06/Orlando-Bloom-Workout-Video-3-1024x763.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, height=5000, bps=0, PhotometricIntepretation=RGB, description=Orlando Bloom at the Monte-Carlo Gala For Planetary Health 2021 photocall., orientation=upper-left, width=3936], baseline, precision 8, 1024x763, components 3\012- data
Size 129 kB (128589 bytes)
Hash 5eed34feadf667454da9c941f69308b3
37556382d955ed0b4f9be4a6105cc60c5456abec
4dc5940e54fecbdc6636042885cb5e96998b6355cb76ec5a1b07a2aa179e6a0a
GET /wp-content/uploads/2022/06/Orlando-Bloom-Workout-Video-3-1024x763.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: image/jpeg
content-length: 128589
last-modified: Mon, 27 Jun 2022 17:35:41 GMT
etag: "62b9ea6d-1f64d"
expires: Sat, 10 Dec 2022 19:26:58 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m1cRA%2BIHzmv8kmjyvbLb2x57JVCMSnVXexOqn1tUphJT92yVUpCP6U%2BCeclx7dQCdY74CuHke88XhhzxO0k19qZ1pgE8D6JfYeq5MOeOM7C0ISZV%2ByN%2FE23e6XZGGa6XhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675094e1eb529-OSL
X-Firefox-Spdy: h2
cdn.hadronid.net/hadron.js?partner_id=251&sync=1&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F
200 OK 11 kB URL HTTP/2 cdn.hadronid.net/hadron.js?partner_id=251&sync=1&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F
IP
File type ASCII text, with very long lines (55891), with no line terminators
Hash 33cd92c53f0dc38f519d199b025e161e
4cba211549a2e25c0d3a6ec5e58e0eca0384b2d2
3c42cd6138f280a03903ec7209b927b810d004fed09d2b56eda0cfde00a883ba
GET /hadron.js?partner_id=251&sync=1&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F HTTP/1.1
Host: cdn.hadronid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"2280e2148e4ee3c06f679f8fac039778"
last-modified: Fri, 18 Nov 2022 10:57:44 GMT
x-amz-id-2: AlHhfnaYFu7DcAqm/AZXcFZz8Z4At5Hcn9XqhUxeA24L5T6B/l+VTePOXZCvBx0dhJEtzYQ2PVA=
x-amz-request-id: FNK044PCM9Y7VVCR
cache-control: max-age=3600
cf-cache-status: HIT
age: 1569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XAcfZ1m07swXH3hI3JXRWgy0o2dzN7X9vVciJH0Bi7jq1VOGllPCEqO7NBcurEEMIlxRV0ffivlufgCmU59AYKnkMzwwGpM5GVLbk%2FJmd5Fy%2FPM6d533oU1DiKcf7xqGI30%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7736750fd837b521-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
IP
Hash 5dd0ab4da3b836c184f52f5989432e79
d57381b91591ea605ce18a90ed92d5c9b0c7653b
8fcd81b2918b3334df56ddacf9a3a33e7e6dae4f34e3611b2cedaaeaab326385
POST /s/gts1d4/CobzvdRzzqc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 02 Dec 2022 19:26:58 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: BE2ERT01ER1QB2543TF3
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.digicert.com/
200 OK 313 B IP
Hash 1d01c48aceb0aa610a1769d1398e403d
7c5e8e14bc685af339a979ceef6c2942994bd86e
925a72d059b45264690446d0e004cf1a96d4be10dbf614ad51113af07e82404a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2703
Cache-Control: max-age=145495
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:58 GMT
Etag: "6389dc4a-139"
Expires: Sun, 04 Dec 2022 11:51:53 GMT
Last-Modified: Fri, 02 Dec 2022 11:06:50 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 1d01c48aceb0aa610a1769d1398e403d
7c5e8e14bc685af339a979ceef6c2942994bd86e
925a72d059b45264690446d0e004cf1a96d4be10dbf614ad51113af07e82404a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2703
Cache-Control: max-age=145495
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:58 GMT
Etag: "6389dc4a-139"
Expires: Sun, 04 Dec 2022 11:51:53 GMT
Last-Modified: Fri, 02 Dec 2022 11:06:50 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313
id.crwdcntrl.net/id?gdpr_applies=false&us_privacy=1---
200 OK 43 B URL HTTP/2 id.crwdcntrl.net/id?gdpr_applies=false&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id?gdpr_applies=false&us_privacy=1--- HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.25.112
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6f38dd7ea1214826c7a65cfadf2b7138
f209cd9d6e043dbc6fbbba23205133fa0e9b991f
36be864cb960e7cf3519f654c0b8233b3bb50a0b307066cfe52c588a4f6b8689
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36BE864CB960E7CF3519F654C0B8233B3BB50A0B307066CFE52C588A4F6B8689"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14940
Expires: Fri, 02 Dec 2022 23:35:58 GMT
Date: Fri, 02 Dec 2022 19:26:58 GMT
Connection: keep-alive
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash f145de462115255e574b5b83f0b868f5
c5d51ccddd48ab7d67874305fe871f294649535b
17cb0f1a4bd4e23b08f470108ae8d856ed6526f883be1f531eb0d102f106b13b
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:26:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 06 Dec 2022 16:17:24 GMT
ETag: "c5d51ccddd48ab7d67874305fe871f294649535b"
Last-Modified: Fri, 02 Dec 2022 16:17:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 949
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7736751248f20af6-OSL
id5-sync.com/g/v2/525.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/525.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bed89dd1ea153bddf933fceaa4545083
8f6b60d80db7f13b7f1f0290b3c596a0be55a354
db8ed7e058b83762dd5fd96db4c1377466070e15e98aa2ea349ca98cdf218fe3
POST /g/v2/525.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 239
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Fri, 02 Dec 2022 19:26:58 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
lexicon.33across.com/v1/envelope?pid=0010b00002e4MRRAA2&gdpr=0&us_privacy=1---
200 OK 49 B URL HTTP/2 lexicon.33across.com/v1/envelope?pid=0010b00002e4MRRAA2&gdpr=0&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c466bd434db29cf02793f8522fde5f3a
f39a01bb0264479dbe9a4bfb0b80ae0b3b0e8154
d0d2e098cd489ef7bc528c86de8ab5c51b5d6cdf9b76a8b08766036992f0d2f4
GET /v1/envelope?pid=0010b00002e4MRRAA2&gdpr=0&us_privacy=1--- HTTP/1.1
Host: lexicon.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false
expires: Sat, 26 Jul 1997 05:00:00 GMT
content-type: application/json
content-length: 49
date: Fri, 02 Dec 2022 19:26:58 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/06/Eva-Mendes-Ryan-Gosling-Ken-1024x901.jpg
200 OK 231 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/06/Eva-Mendes-Ryan-Gosling-Ken-1024x901.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=1134, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1124], baseline, precision 8, 1024x901, components 3\012- data
Size 231 kB (231317 bytes)
Hash eb7d51f50818a0597df43633dba7977d
ee51e62b90d43dceab69f8e6078cc15079bbff66
ace61286feeb2be6469f5fa85ef844007f93fa36733d1b41a816bf9749b8cb9a
GET /wp-content/uploads/2022/06/Eva-Mendes-Ryan-Gosling-Ken-1024x901.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: image/jpeg
content-length: 231317
last-modified: Fri, 17 Jun 2022 15:52:14 GMT
etag: "62aca32e-38795"
expires: Sat, 10 Dec 2022 19:26:58 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FqZShy2a0BXthqLI%2BHse%2Bs3pEnVC5EjAOJoZwWEg9wMlDiqVQG47Vhl7AGU91E0UhGtQl8%2BT1%2FR%2BO%2BaAWjjWpf1zc9Tiv6E8KQxsahZRPqX4JU0SJJU8NckDCQV%2FSVHPtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675094e25b529-OSL
X-Firefox-Spdy: h2
match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f7c5d05ed12d7ab0238e2ee9ee234f10
54d324ca1898409cf59003da16fe9c4a3254f6fd
468fca13a164ac3eb13f75ab8b88f7fdf5d64e47900455a70a195e5d32c64908
GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Sun, 01 Jan 2023 19:26:58 GMT
vary: Origin
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001670009216-D5XTAEUN-874F
302 Found 473 B URL HTTP/2 ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001670009216-D5XTAEUN-874F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (363)
Hash 7f06147a532640e7c5f04aa784f08647
95cd9c094880f069d54e5bbdb35cbd20a62262d5
37c96b8aaf9f1cc4de34d0c219970f0aa7083d22d8c7007db2f63fc33a352104
GET /api/v1/g_hosted?id=AU1D-0100-001670009216-D5XTAEUN-874F HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: text/html; charset=utf-8
content-length: 473
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY3MDAwOTIxNi1ENVhUQUVVTi04NzRG
server: nginx/1.20.0
set-cookie: au_id=AU1D-0100-001670009216-D5XTAEUN-874F; Expires=Sun, 01 Dec 2024 19:26:58 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
g_hosted=; Expires=Sun, 01 Dec 2024 19:26:58 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/ip_match?id=AU1D-0100-001670009216-D5XTAEUN-874F
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/ip_match?id=AU1D-0100-001670009216-D5XTAEUN-874F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/ip_match?id=AU1D-0100-001670009216-D5XTAEUN-874F HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: nginx/1.20.0
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
IP
Hash 5dd0ab4da3b836c184f52f5989432e79
d57381b91591ea605ce18a90ed92d5c9b0c7653b
8fcd81b2918b3334df56ddacf9a3a33e7e6dae4f34e3611b2cedaaeaab326385
POST /s/gts1d4/CobzvdRzzqc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:59 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5bc03b4995299a6a2777604a4d461631
c9de39bb466bfb8f885bae78849b7049389e3483
a8155ab40b718c91379d3a995b89adb27a9044c6f48d0033bfe797e5d9f1437b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:26:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 13:42:55 GMT
Expires: Wed, 07 Dec 2022 13:42:54 GMT
Etag: "c9de39bb466bfb8f885bae78849b7049389e3483"
Cache-Control: max-age=410754,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773675122e06b50c-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4c9c01d2d5be7134d2a94e19a3bbc000
51d639276d968b24c7a182348c06b6f0d1eb0e1c
5d545ed51804930c44cab96054f8baa5071a0389812a0e4c36c3d82929660717
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103725
Date: Fri, 02 Dec 2022 19:26:59 GMT
Etag: "6389391f-1d7"
Expires: Sun, 04 Dec 2022 00:15:44 GMT
Last-Modified: Thu, 01 Dec 2022 23:30:39 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KFswv40nCh1Y2k6eSKa0auApRTJVWsOOV2o-ji1q_tFpGC2tvp7nFQ==
Age: 2705
api.rlcdn.com/api/identity/envelope?pid=1258
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=1258
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=1258 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Fri, 02 Dec 2022 19:26:59 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5bc03b4995299a6a2777604a4d461631
c9de39bb466bfb8f885bae78849b7049389e3483
a8155ab40b718c91379d3a995b89adb27a9044c6f48d0033bfe797e5d9f1437b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:26:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 13:42:55 GMT
Expires: Wed, 07 Dec 2022 13:42:54 GMT
Etag: "c9de39bb466bfb8f885bae78849b7049389e3483"
Cache-Control: max-age=410754,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77367513e814b50c-OSL
idx.liadm.com/idex/prebid/74679?duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&us_privacy=1---&gdpr=0
200 OK 54 B URL HTTP/2 idx.liadm.com/idex/prebid/74679?duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&us_privacy=1---&gdpr=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 95d7c0fd8e023d8f5167e3ceedba3850
90823c463a6fc18a8388009aeafc0c94d6f9e135
3813d0071a34187f3ae304042d3d408fb7cb81ef65013e2839ba8ee05627ac25
GET /idex/prebid/74679?duid=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg&us_privacy=1---&gdpr=0 HTTP/1.1
Host: idx.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: application/json
content-length: 54
trace-id: b14abfcdb9f8a82d
vary: Origin
expires: Sat, 03 Dec 2022 19:26:59 GMT
set-cookie: lidid=7c4918cc-5bda-4e30-8709-7d54e2c15acf; Max-Age=63072000; Expires=Sun, 01 Dec 2024 19:26:59 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
request-time: 4
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/12/Love-Is-Blind-Star-SK-Shuts-Down-Cheating-Allegations-1024x769.jpg
200 OK 119 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/12/Love-Is-Blind-Star-SK-Shuts-Down-Cheating-Allegations-1024x769.jpg
IP
File type JPEG image data, progressive, precision 8, 1024x769, components 3\012- data
Size 119 kB (118980 bytes)
Hash a21c991bf3b5e2d54a2bd0780a84e121
8e4ca185d0a9727626b25e837d3eb0751ecf55d7
b16104588cb26d22f9fda9e0aec39de2dbbb47c39b9ec0ee8f7b539e1cdf715a
GET /wp-content/uploads/2022/12/Love-Is-Blind-Star-SK-Shuts-Down-Cheating-Allegations-1024x769.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=3524755945110770; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215; _awl=2.1670009217.0.5-f3490afc6890f27d0817e38b8193c4bc-6763652d6575726f70652d7765737431-0; _au_1d=AU1D-0100-001670009216-D5XTAEUN-874F; _au_last_seen_pixels=eyJhcG4iOjE2NzAwMDkyMTYsInR0ZCI6MTY3MDAwOTIxNiwicHViIjoxNjcwMDA5MjE2LCJhZHgiOjE2NzAwMDkyMTYsImdvbyI6MTY3MDAwOTIxNiwic21hcnQiOjE2NzAwMDkyMTYsImltcHIiOjE2NzAwMDkyMTYsInNvbiI6MTY3MDAwOTIxNiwiYmVlcyI6MTY3MDAwOTIxNn0=; panoramaId_expiry=1670009218398; _lr_retry_request=true; _lr_env_src_ats=false; cto_bundle=W5FiN19RY0JqbUdUM3YlMkZpJTJCN2F2QjRVbHhZMEJYbzlVbjllWG9SMlQlMkJ6c2NzJTJGYk8xOUdBOGM0WE1zRUxIU294bEV3OEc5TWZvRk1UZWRuS1paVjBhMFhFJTJGc1dZMGNYbVZiU2ZjWHI2RFh4JTJGemVKV1lTJTJCQm5lOEtwWUpYVzFNY05Bdk8x; cto_bidid=pqqMGV9lU0Vic3FzendnOHFJODBGMWhiRFcybkFpTE9Pa1lqQWx5OWdhS0FkREVicGZpeHBrbzBjVCUyQlolMkZJSjNsbnJxZnE2bU1NRGxqeVdjSWpGcE96eHRzVFElM0QlM0Q; pbjs-unifiedid=%7B%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222022-12-02T19%3A26%3A58%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/jpeg
content-length: 118980
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=121197, status=webp_bigger
etag: "63890ab1-1d96d"
expires: Fri, 09 Dec 2022 20:26:42 GMT
last-modified: Thu, 01 Dec 2022 20:12:33 GMT
cf-cache-status: HIT
age: 82816
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LGck4fZYIk7gtE1hpvncfZzSJcMmW3Ww36kj8c8RCvk3PFXtblcJbOeXkJbwOjXofXZ%2BjFJTRedEeCQ7eeWJEDSAhjvivtRQnJWVeYq5wcH9X77TegQEy9bYeNcV4stzVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675144d03b529-OSL
X-Firefox-Spdy: h2
a.ad.gt/api/v1/collect
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/collect HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 636
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 19:26:59 GMT
server: nginx/1.20.0
access-control-allow-origin: https://perezhilton.com
vary: Origin
X-Firefox-Spdy: h2
pixels.ad.gt/api/v1/getpixels?tagger_id=5ad8072e0d451a3ccc417edde94568a0&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&code=%27none%27
204 No Content 0 B URL HTTP/2 pixels.ad.gt/api/v1/getpixels?tagger_id=5ad8072e0d451a3ccc417edde94568a0&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&code=%27none%27
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/getpixels?tagger_id=5ad8072e0d451a3ccc417edde94568a0&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&code=%27none%27 HTTP/1.1
Host: pixels.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 19:26:59 GMT
server: nginx/1.20.0
X-Firefox-Spdy: h2
reporting.powerad.ai/
200 OK 2 B IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST / HTTP/1.1
Host: reporting.powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 134
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
X-Firefox-Spdy: h2
z.moatads.com/nativo483ETsY34/moatad.js?moatClientLevel1=26217&moatClientLevel2=150608&moatClientLevel3=429167&moatClientLevel4=4907235&moatClientSlicer1=14625&moatClientSlicer2=0&ntvDomSearch=ntv1103180-429167-39086
200 OK 107 kB URL HTTP/2 z.moatads.com/nativo483ETsY34/moatad.js?moatClientLevel1=26217&moatClientLevel2=150608&moatClientLevel3=429167&moatClientLevel4=4907235&moatClientSlicer1=14625&moatClientSlicer2=0&ntvDomSearch=ntv1103180-429167-39086
IP
File type ASCII text, with very long lines (1899)
Size 107 kB (106867 bytes)
Hash bd6ad5bf882497a15cb39603e65a256e
66c0a79a11101cc65adb985a311b83842218ff2c
c073a4333a23c5835cbfcfc733480be30e688b491ceb948efc36812c8cbef05b
GET /nativo483ETsY34/moatad.js?moatClientLevel1=26217&moatClientLevel2=150608&moatClientLevel3=429167&moatClientLevel4=4907235&moatClientSlicer1=14625&moatClientSlicer2=0&ntvDomSearch=ntv1103180-429167-39086 HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2r9Ihp/iCa1laB9Q6OH2iPqzpvbRHpXyu9rHdl70kpQ3EjluIW3f3dTMFaKiySix+UIRJL4ZUF0=
x-amz-request-id: JDAGX1WQ0RT6CNJ9
last-modified: Tue, 29 Nov 2022 17:18:17 GMT
etag: "bd6ad5bf882497a15cb39603e65a256e"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
content-length: 106867
vary: Accept-Encoding
cache-control: max-age=57552
date: Fri, 02 Dec 2022 19:26:59 GMT
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001670009216-D5XTAEUN-874F&gdpr=0
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001670009216-D5XTAEUN-874F&gdpr=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001670009216-D5XTAEUN-874F&gdpr=0 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 02 Dec 2022 18:46:55 GMT
expires: Fri, 02 Dec 2022 20:46:55 GMT
cache-control: public, max-age=7200
age: 2404
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jadserve.postrelease.com/trk.gif?ntv_at=46,302&ntv_ui=61a6d273-ab87-4227-9a2e-dea92fa878ba&ntv_a=b4wGA4-BKATNUQA&ntv_fl=dPg3DKsufaAX3QZufD7aNbL4HEaXTN_Pn9dzkLUc1Jvh1v_8UIWPjG9y3wBKtRecapYjpaPqkhHyRBhxh6QcL0I2V_SBZvR9oCknOE3vQS8Hmne3I2iBxH5C0EGw8MvIqfUz1V5Z7ztgxXhhh7upLdiUPaeURtFGSd6x831AuZget1D3WwHX5oQg4DJPd3hw&ord=-1794065950&ntv_ht=gFGKYwA&ntv_tad=16&ntv_it
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_at=46,302&ntv_ui=61a6d273-ab87-4227-9a2e-dea92fa878ba&ntv_a=b4wGA4-BKATNUQA&ntv_fl=dPg3DKsufaAX3QZufD7aNbL4HEaXTN_Pn9dzkLUc1Jvh1v_8UIWPjG9y3wBKtRecapYjpaPqkhHyRBhxh6QcL0I2V_SBZvR9oCknOE3vQS8Hmne3I2iBxH5C0EGw8MvIqfUz1V5Z7ztgxXhhh7upLdiUPaeURtFGSd6x831AuZget1D3WwHX5oQg4DJPd3hw&ord=-1794065950&ntv_ht=gFGKYwA&ntv_tad=16&ntv_it
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_at=46,302&ntv_ui=61a6d273-ab87-4227-9a2e-dea92fa878ba&ntv_a=b4wGA4-BKATNUQA&ntv_fl=dPg3DKsufaAX3QZufD7aNbL4HEaXTN_Pn9dzkLUc1Jvh1v_8UIWPjG9y3wBKtRecapYjpaPqkhHyRBhxh6QcL0I2V_SBZvR9oCknOE3vQS8Hmne3I2iBxH5C0EGw8MvIqfUz1V5Z7ztgxXhhh7upLdiUPaeURtFGSd6x831AuZget1D3WwHX5oQg4DJPd3hw&ord=-1794065950&ntv_ht=gFGKYwA&ntv_tad=16&ntv_it HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Sat, 02-Dec-2023 19:26:59 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
jadserve.postrelease.com/gdprConsent?ntv_pl=1103180&ntv_gdpr_consent=&ntv_it
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/gdprConsent?ntv_pl=1103180&ntv_gdpr_consent=&ntv_it
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /gdprConsent?ntv_pl=1103180&ntv_gdpr_consent=&ntv_it HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Sat, 02-Dec-2023 19:26:59 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001670009216-D5XTAEUN-874F
302 Found 381 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001670009216-D5XTAEUN-874F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 6109e4701699eb158c49c3048484d792
1c2e2a30e9e32900a911f952661183c53203b8c2
3771d7cbbb69ad79082cbcca95e48a24d90d09901fa7eb960d0bc33f949292d0
GET /pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001670009216-D5XTAEUN-874F HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm=&google_sc=&google_ula=450542624&id=AU1D-0100-001670009216-D5XTAEUN-874F&google_tc=
date: Fri, 02 Dec 2022 19:26:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 381
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 19:41:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY3MDAwOTIxNi1ENVhUQUVVTi04NzRG
302 Found 345 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY3MDAwOTIxNi1ENVhUQUVVTi04NzRG
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 8df3c4d8fd49c5392781881322130d01
0f35b70fc471b8875c7786a26fa3a10a27d8221b
9d2f124f5d7ebb97fdcc886f0ecf95af425260d1f0c7130498b6c25ca82e99f7
GET /pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY3MDAwOTIxNi1ENVhUQUVVTi04NzRG HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY3MDAwOTIxNi1ENVhUQUVVTi04NzRG&google_tc=
date: Fri, 02 Dec 2022 19:26:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 345
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 19:41:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 15c4a632694d5581537a3762c6f579c8
93cc67bde84e616d1ec2a4235ba7b26e3632711e
8c7f9c232f24c0eb75cfd6c585bfa98b59f8aeb6b8b58c243add570b4d687dc6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2630
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:59 GMT
Last-Modified: Fri, 02 Dec 2022 18:43:09 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 6acc582e88a49b8d0a4c05705f9c6af2
7cd445187fc02c97202cde41ee450d0c078cfd9c
41dc74b2ddf000db6ff024819614df835bb6092f78bba04e409b11f05e645348
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4447
Cache-Control: max-age=121335
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:59 GMT
Etag: "6389771b-1d7"
Expires: Sun, 04 Dec 2022 05:09:14 GMT
Last-Modified: Fri, 02 Dec 2022 03:55:07 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 314 B IP
Hash 07b6ce9d6736186c7a24c054f5dc6d17
dc4b7862583161053fc9c414259fc29f74ea72f8
df2b7bd6959ee5dc0901570cbe3406d4db19cb700e930496106a00abf498aaaa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2564
Cache-Control: max-age=162623
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:59 GMT
Etag: "638a1fbe-13a"
Expires: Sun, 04 Dec 2022 16:37:22 GMT
Last-Modified: Fri, 02 Dec 2022 15:54:38 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 314
secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001670009216-D5XTAEUN-874F&adnxs_id=$UID&gdpr=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001670009216-D5XTAEUN-874F&adnxs_id=$UID&gdpr=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001670009216-D5XTAEUN-874F&adnxs_id=$UID&gdpr=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Fri, 02 Dec 2022 19:26:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26adnxs_id%3D%24UID%26gdpr%3D0
AN-X-Request-Uuid: edaa0833-936f-4217-9759-2f4a0495cc4f
Set-Cookie: uuid2=5315527705848641495; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 02-Mar-2023 19:26:59 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
at.teads.tv/fpc?analytics_tag_id=PUB_18753&tfpvi=&gdpr_status=23&gdpr_reason=230&gdpr_consent=&ccpa_consent=1---&shared_ids=&sv=8480ba3&
200 OK 52 B URL HTTP/1.1 at.teads.tv/fpc?analytics_tag_id=PUB_18753&tfpvi=&gdpr_status=23&gdpr_reason=230&gdpr_consent=&ccpa_consent=1---&shared_ids=&sv=8480ba3&
IP
File type ASCII text, with no line terminators
Hash a338c9d0169638df93e975c053fcc5ed
31a177662f4ea44951bc0ed69811392aafaa8b35
960240d3ca98985a061582b5dfbdeacb1fdf7d5abcdf267b56877b17ca9e12c8
GET /fpc?analytics_tag_id=PUB_18753&tfpvi=&gdpr_status=23&gdpr_reason=230&gdpr_consent=&ccpa_consent=1---&shared_ids=&sv=8480ba3& HTTP/1.1
Host: at.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
Content-Length: 52
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
Expires: Fri, 02 Dec 2022 19:26:59 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Dec 2022 19:26:59 GMT
Connection: keep-alive
sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26sas_uid%3D%5bsas_uid%5d&gdpr=0
302 Found 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26sas_uid%3D%5bsas_uid%5d&gdpr=0
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26sas_uid%3D%5bsas_uid%5d&gdpr=0 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Fri, 02 Dec 2022 19:26:58 GMT
cache-control: no-cache,no-store
location: https://sync.smartadserver.com:443/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&sas_uid=[sas_uid]&gdpr=0&cklb=1
pragma: no-cache
set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 02 Dec 2023 19:26:59 GMT; domain=.smartadserver.com; path=/
pbw=%24b%3d12100%3b%24o%3d11100; expires=Sat, 02 Dec 2023 19:26:59 GMT; domain=.smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: h7N3tX+9ICimhROhKmKz9MqBEbWrEXYXT3sDDHa9rwNCbZ0w7s8ra7gkbdvHghVWN7IsWVcYYWyN3dgKQINYFQ==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1679558926
date: Fri, 02 Dec 2022 19:26:59 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fb4f700b81249ed87eb01c16147b2877
0a8546cbf4996c905d13616df00a1b3c3800d571
e4a8178494ae731309459a7098680918e0fa6b64033e97a26387f9cfb6161313
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=146941
Date: Fri, 02 Dec 2022 19:26:59 GMT
Etag: "6389e1e2-1d7"
Expires: Sun, 04 Dec 2022 12:16:00 GMT
Last-Modified: Fri, 02 Dec 2022 11:30:42 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7zywR9SyctiTjxmEGZwuk83MHFLTqx0mYo_HtQjCfc5exKSS5SiGQw==
Age: 2718
match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670009216-D5XTAEUN-874F
303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670009216-D5XTAEUN-874F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/audigent?buyer_user_id=AU1D-0100-001670009216-D5XTAEUN-874F HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Fri, 02 Dec 2022 19:26:59 GMT
location: https://match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670009216-D5XTAEUN-874F&_bee_ppp=1
Server: gunicorn
set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 02 Dec 2022 19:36:59 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 6acc582e88a49b8d0a4c05705f9c6af2
7cd445187fc02c97202cde41ee450d0c078cfd9c
41dc74b2ddf000db6ff024819614df835bb6092f78bba04e409b11f05e645348
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4447
Cache-Control: max-age=121335
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:26:59 GMT
Etag: "6389771b-1d7"
Expires: Sun, 04 Dec 2022 05:09:14 GMT
Last-Modified: Fri, 02 Dec 2022 03:55:07 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 81378f1a0c54df148415cde5138e8aec
5efeba0c580ee0cb0e13fb348c9d28bc1dd3d2e7
537d28371affddde2bda68ae506851251bc2b7463f11cd1d309e57079b542bef
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 19:26:59 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 19:25:29 GMT
Expires: Sat, 03 Dec 2022 19:25:29 GMT
ETag: "5efeba0c580ee0cb0e13fb348c9d28bc1dd3d2e7"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fb1a72097f0d04a3dace3a7395c6acd3
c9d455e378ae757b9e959e7258e54e1586702330
c1f39f1d1bc19d54bb693e125278f7ee7cf74b8c92e0077d0d95a028d8b822e4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=107643
Date: Fri, 02 Dec 2022 19:26:59 GMT
Etag: "638948bd-1d7"
Expires: Sun, 04 Dec 2022 01:21:02 GMT
Last-Modified: Fri, 02 Dec 2022 00:37:17 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RXACI1Bplr7sk5oJrC3wF1qE4vC3lF9yIb5j_CP-8m3L-Wq4XPitKA==
Age: 2625
ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26impr_uid%3D%7BPUB_USER_ID%7D
302 Found 0 B URL HTTP/2 ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26impr_uid%3D%7BPUB_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26impr_uid%3D%7BPUB_USER_ID%7D HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26impr_uid%3D%7BPUB_USER_ID%7D
set-cookie: tuuid=45a0babe-b1f4-43b3-9b40-2e2650a3f183; Expires=Thu, 02 Mar 2023 19:26:59 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1670009219; Expires=Thu, 02 Mar 2023 19:26:59 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
sync.go.sonobi.com/us?https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&uid=[UID]&gdpr=0
302 Found 0 B URL HTTP/1.1 sync.go.sonobi.com/us?https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&uid=[UID]&gdpr=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /us?https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&uid=[UID]&gdpr=0 HTTP/1.1
Host: sync.go.sonobi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 19:26:59 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 0
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, no-store, private
P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Tcn: Choice
Vary: negotiate,Accept-Encoding
X-Go-Server: go-iad-2-5-138
X-Xss-Protection: 0
Location: https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&uid=eb5637d2-d983-4797-81b2-13cf164cddb7&gdpr=0
Server: sonobi-go
Set-Cookie: __uis=eb5637d2-d983-4797-81b2-13cf164cddb7; expires=Sun, 01 Jan 2023 19:26:59 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
HAPLB8S=s85138|Y4pRh; path=/; domain=.go.sonobi.com; SameSite=None; secure
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26adnxs_id%3D%24UID%26gdpr%3D0
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26adnxs_id%3D%24UID%26gdpr%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26adnxs_id%3D%24UID%26gdpr%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Fri, 02 Dec 2022 19:26:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ids.ad.gt/api/v1/match?id=AU1D-0100-001670009216-D5XTAEUN-874F&adnxs_id=0&gdpr=0
AN-X-Request-Uuid: 572b7a93-d6c6-44aa-9df4-1737941a9f6f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670009216-D5XTAEUN-874F&_bee_ppp=1
303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670009216-D5XTAEUN-874F&_bee_ppp=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/audigent?buyer_user_id=AU1D-0100-001670009216-D5XTAEUN-874F&_bee_ppp=1 HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Fri, 02 Dec 2022 19:26:59 GMT
location: https://ids.ad.gt/api/v1/beeswax_match?beeswax_id=&id=AU1D-0100-001670009216-D5XTAEUN-874F
Server: gunicorn
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
sync.smartadserver.com/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&sas_uid=[sas_uid]&gdpr=0&cklb=1
200 OK 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&sas_uid=[sas_uid]&gdpr=0&cklb=1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&sas_uid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
date: Fri, 02 Dec 2022 19:26:59 GMT
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-338092-8&cid=1273796959.1670009215&jid=419208743&gjid=1096840537&_gid=384306501.1670009218&_u=YADAAUIYAAAAACAAI~&z=350260642
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-338092-8&cid=1273796959.1670009215&jid=419208743&gjid=1096840537&_gid=384306501.1670009218&_u=YADAAUIYAAAAACAAI~&z=350260642
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-338092-8&cid=1273796959.1670009215&jid=419208743&gjid=1096840537&_gid=384306501.1670009218&_u=YADAAUIYAAAAACAAI~&z=350260642 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://perezhilton.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 02 Dec 2022 19:26:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-167135943-9&cid=1273796959.1670009215&jid=432428923&gjid=264371812&_gid=384306501.1670009218&_u=YADAAUIZAAAAACAAI~&z=958574704
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-167135943-9&cid=1273796959.1670009215&jid=432428923&gjid=264371812&_gid=384306501.1670009218&_u=YADAAUIZAAAAACAAI~&z=958574704
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-167135943-9&cid=1273796959.1670009215&jid=432428923&gjid=264371812&_gid=384306501.1670009218&_u=YADAAUIZAAAAACAAI~&z=958574704 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://perezhilton.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 02 Dec 2022 19:26:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ad.360yield.com/ul_cb/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26impr_uid%3D%7BPUB_USER_ID%7D
200 OK 43 B URL HTTP/2 ad.360yield.com/ul_cb/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26impr_uid%3D%7BPUB_USER_ID%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3Fid%3DAU1D-0100-001670009216-D5XTAEUN-874F%26impr_uid%3D%7BPUB_USER_ID%7D HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59ccaf5f1bf1101f3d43ae777be4f6a9
2740c2403e005eac512a829e64de6a03a65fcbb6
1c6da1c071531cd11b32e943b42798202de1a80882e067773ed4d6147094587f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perezhilton.com/wp-content/uploads/2022/06/There-Is-A-Man-Deemed-The-Orgasm-Whisperer-In-El-Lay-1024x625.jpg
200 OK 60 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/06/There-Is-A-Man-Deemed-The-Orgasm-Whisperer-In-El-Lay-1024x625.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x625, components 3\012- data
Hash 4240c2359996c941db3c23007fae059e
f6fc2c3bd6e9c9b3e4fc376118e1c50bb98a7fee
48608c8bd2b9bb8125b0fed1a531ad5458393a3c98321362221d79fac7ceb07c
GET /wp-content/uploads/2022/06/There-Is-A-Man-Deemed-The-Orgasm-Whisperer-In-El-Lay-1024x625.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=3524755945110770; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.1.1273796959.1670009215; _awl=2.1670009217.0.5-f3490afc6890f27d0817e38b8193c4bc-6763652d6575726f70652d7765737431-0; _au_1d=AU1D-0100-001670009216-D5XTAEUN-874F; _au_last_seen_pixels=eyJhcG4iOjE2NzAwMDkyMTYsInR0ZCI6MTY3MDAwOTIxNiwicHViIjoxNjcwMDA5MjE2LCJhZHgiOjE2NzAwMDkyMTYsImdvbyI6MTY3MDAwOTIxNiwic21hcnQiOjE2NzAwMDkyMTYsImltcHIiOjE2NzAwMDkyMTYsInNvbiI6MTY3MDAwOTIxNiwiYmVlcyI6MTY3MDAwOTIxNn0=; panoramaId_expiry=1670009218398; _lr_retry_request=true; _lr_env_src_ats=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:27:00 GMT
content-type: image/jpeg
content-length: 59506
last-modified: Wed, 15 Jun 2022 20:48:06 GMT
etag: "62aa4586-e872"
expires: Sat, 10 Dec 2022 19:26:59 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EpmaRPXHu1puS4wUjnvLrp6h%2B%2FDinRsu1Q%2FtWbe9ogtmmf41tiGahbAOgUNMAOuGVUdXjnSbqIIkzOFERVLPrMfy1NqgSc%2B1s2uz8sXABA1IMPjJic%2Br9YnHZOuXiotSXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675130babb529-OSL
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/match?id=AU1D-0100-001670009216-D5XTAEUN-874F&adnxs_id=0&gdpr=0
202 Accepted 85 B URL HTTP/2 ids.ad.gt/api/v1/match?id=AU1D-0100-001670009216-D5XTAEUN-874F&adnxs_id=0&gdpr=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 0abbbe51d7251477d6638d7dab4a8603
124c69763f36814eb21e60e17e92237f6760332b
49a2b259b2a1e1fab213ab199966b6902b78e24de6913534165ec834d5c2ba3c
GET /api/v1/match?id=AU1D-0100-001670009216-D5XTAEUN-874F&adnxs_id=0&gdpr=0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670009216-D5XTAEUN-874F; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 03 Dec 2022 07:26:59 GMT
set-cookie: au_id=AU1D-0100-001670009216-D5XTAEUN-874F; Expires=Sun, 01 Dec 2024 19:26:59 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59ccaf5f1bf1101f3d43ae777be4f6a9
2740c2403e005eac512a829e64de6a03a65fcbb6
1c6da1c071531cd11b32e943b42798202de1a80882e067773ed4d6147094587f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&rl=&if=false&ts=1670009218274&cd[partner_id]=251&cd[tagger_id]=5ad8072e0d451a3ccc417edde94568a0&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670009218272.533926288&it=1670009217900&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&rl=&if=false&ts=1670009218274&cd[partner_id]=251&cd[tagger_id]=5ad8072e0d451a3ccc417edde94568a0&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670009218272.533926288&it=1670009217900&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&rl=&if=false&ts=1670009218274&cd[partner_id]=251&cd[tagger_id]=5ad8072e0d451a3ccc417edde94568a0&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670009218272.533926288&it=1670009217900&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 02 Dec 2022 19:27:00 GMT
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/12/TJ-Holmes-Post-Wife-Viral-1024x681.jpg
200 OK 101 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/12/TJ-Holmes-Post-Wife-Viral-1024x681.jpg
IP
File type JPEG image data, progressive, precision 8, 1024x681, components 3\012- data
Size 101 kB (101284 bytes)
Hash fa2dbfdf8f78df0dd8644fb0b3331eca
45a8b5ed0e47b8146c3a6cbbb141e0a8c84b2fc4
7d089c562110e0e7c4734b9ccf6cba590754c9e22fddafcbaac69998206015e4
GET /wp-content/uploads/2022/12/TJ-Holmes-Post-Wife-Viral-1024x681.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={"id":3405113,"placementID":1103180,"lastInteraction":1670009214986,"sessionStart":1670009214986,"sessionEndDate":1670025600000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=3524755945110770; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gka4wnyyx0xtwxrn69cdsesg; _pubcid=8f5c4f44-0ce0-4f1a-9fc4-79bd88f1f1c3; _ga_9JS9Z0NFL0=GS1.1.1670009215.1.0.1670009215.0.0.0; _ga=GA1.2.1273796959.1670009215; _awl=2.1670009217.0.5-f3490afc6890f27d0817e38b8193c4bc-6763652d6575726f70652d7765737431-0; _au_1d=AU1D-0100-001670009216-D5XTAEUN-874F; _au_last_seen_pixels=eyJhcG4iOjE2NzAwMDkyMTYsInR0ZCI6MTY3MDAwOTIxNiwicHViIjoxNjcwMDA5MjE2LCJhZHgiOjE2NzAwMDkyMTYsImdvbyI6MTY3MDAwOTIxNiwic21hcnQiOjE2NzAwMDkyMTYsImltcHIiOjE2NzAwMDkyMTYsInNvbiI6MTY3MDAwOTIxNiwiYmVlcyI6MTY3MDAwOTIxNn0=; _lr_retry_request=true; _lr_env_src_ats=false; cto_bundle=W5FiN19RY0JqbUdUM3YlMkZpJTJCN2F2QjRVbHhZMEJYbzlVbjllWG9SMlQlMkJ6c2NzJTJGYk8xOUdBOGM0WE1zRUxIU294bEV3OEc5TWZvRk1UZWRuS1paVjBhMFhFJTJGc1dZMGNYbVZiU2ZjWHI2RFh4JTJGemVKV1lTJTJCQm5lOEtwWUpYVzFNY05Bdk8x; cto_bidid=pqqMGV9lU0Vic3FzendnOHFJODBGMWhiRFcybkFpTE9Pa1lqQWx5OWdhS0FkREVicGZpeHBrbzBjVCUyQlolMkZJSjNsbnJxZnE2bU1NRGxqeVdjSWpGcE96eHRzVFElM0QlM0Q; pbjs-unifiedid=%7B%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222022-12-02T19%3A26%3A58%22%7D; __li_idex_cache=%7B%22unifiedId%22%3A%221eBC4Vj7PyuWhTD5_Z_1z3uHXzAaeGWssDe9Lw%22%7D; pbjs_li_nonid=%7B%22unifiedId%22%3A%221eBC4Vj7PyuWhTD5_Z_1z3uHXzAaeGWssDe9Lw%22%7D; _gid=GA1.2.384306501.1670009218; _gat_gtag_UA_338092_8=1; _gat_gtag_UA_167135943_9=1; _tfpvi=NDU3NDkzZTUtYjY2Mi00NjVlLThiMjQtMDY5ZmJlNDUwMDM0IzAw; _fbp=fb.1.1670009218272.533926288
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:27:00 GMT
content-type: image/jpeg
content-length: 101284
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=103832, status=webp_bigger
etag: "6388d3e0-19598"
expires: Fri, 09 Dec 2022 16:26:49 GMT
last-modified: Thu, 01 Dec 2022 16:18:40 GMT
cf-cache-status: HIT
age: 97211
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DMw%2F9sEwsfk%2Bwjf4ONX6izaUlBZEfA5x92jc1U%2FLuU5bGGBDCREeM5Qg6afy5olalOfVDm3reO2bMC5R%2B%2Bd%2FuQmHYpWf%2BCi%2BDIbYndAXMoTYQhuOudJdcj8xw29cviHZNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7736751b2daeb529-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 39ef1924744ac2ead0f904ce49169c60
31b1cc248855ee885f670870653c54775790823a
6d967b4746b160e52c8a5f8d7bb27b8eb66a245369f578bf7569da39c655f0a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D967B4746B160E52C8A5F8D7BB27B8EB66A245369F578BF7569DA39C655F0A2"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6838
Expires: Fri, 02 Dec 2022 21:20:58 GMT
Date: Fri, 02 Dec 2022 19:27:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 39ef1924744ac2ead0f904ce49169c60
31b1cc248855ee885f670870653c54775790823a
6d967b4746b160e52c8a5f8d7bb27b8eb66a245369f578bf7569da39c655f0a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D967B4746B160E52C8A5F8D7BB27B8EB66A245369F578BF7569DA39C655F0A2"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6838
Expires: Fri, 02 Dec 2022 21:20:58 GMT
Date: Fri, 02 Dec 2022 19:27:00 GMT
Connection: keep-alive
report3.hb.brainlyads.com/statistics
204 No Content 0 B URL HTTP/1.1 report3.hb.brainlyads.com/statistics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /statistics HTTP/1.1
Host: report3.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-nm-host,x-nm-url
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 02 Dec 2022 19:27:00 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
report3.hb.brainlyads.com/statistics
200 OK 0 B URL HTTP/1.1 report3.hb.brainlyads.com/statistics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /statistics HTTP/1.1
Host: report3.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-nm-host: perezhilton.com
x-nm-url: https://perezhilton.com/category/yummy-yummy-screw/
Content-Type: application/json
Content-Length: 5607
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 02 Dec 2022 19:27:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
onetag-sys.com/usync/?cb=1670009216240&us_privacy=1---
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?cb=1670009216240&us_privacy=1---
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1670009216240&us_privacy=1--- HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
ap.lijit.com/beacon?us_privacy=1---&informer=13473250
302 Found 0 B URL HTTP/1.1 ap.lijit.com/beacon?us_privacy=1---&informer=13473250
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beacon?us_privacy=1---&informer=13473250 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 19:27:01 GMT
Set-Cookie: ljt_reader=FwBPsNZHSvHpRp9-TKyOk0pC; Path=/; Domain=.lijit.com; Expires=Sat, 02-Dec-2023 19:27:01 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://ap.lijit.com/beacon?us_privacy=1---&informer=13473250&dnr=1
Content-Length: 0
X-Sovrn-Pod: ad_ap4ams1
ocsp.digicert.com/
200 OK 278 B IP
Hash c79423c9c391ee093a981860ecf38a44
cb4475eb824357a1fc9d29c7d46e40eeb2d36a91
6ecab5315d545e49e8aa1090b08a08c33f24a729556556d36c51665c491c5e43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2457
Cache-Control: max-age=139506
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:01 GMT
Etag: "6389c5de-116"
Expires: Sun, 04 Dec 2022 10:12:07 GMT
Last-Modified: Fri, 02 Dec 2022 09:31:10 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 278
ap.lijit.com/beacon?us_privacy=1---&informer=13473250&dnr=1
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/beacon?us_privacy=1---&informer=13473250&dnr=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beacon?us_privacy=1---&informer=13473250&dnr=1 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 02 Dec 2022 19:27:01 GMT
Set-Cookie: ljt_reader=FwBPsNZH6gLp9s7ST0im3Fw7; Path=/; Domain=.lijit.com; Expires=Sat, 02-Dec-2023 19:27:01 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap4ams1
eus.rubiconproject.com/usync.html?us_privacy=1---
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?us_privacy=1---
IP
ASN #1299 Telia Company AB
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?us_privacy=1--- HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Dec 2022 19:27:01 GMT
Connection: keep-alive
Vary: Accept-Encoding
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 17053
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: W/"623de86a-cf34"
Expires: Fri, 04 Nov 2022 04:41:58 GMT
Cache-Control: max-age=86402
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 02 Dec 2022 19:27:01 GMT
Age: 53735
X-Served-By: cache-lga13626-LGA, cache-bma1654-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 38, 149830
X-Timer: S1670009221.374114,VS0,VE0
Vary: Accept-Encoding
js-sec.indexww.com/um/ixmatch.html
200 OK 12 kB URL HTTP/2 js-sec.indexww.com/um/ixmatch.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (18728)
Hash ddb4d060d1cc93627986dfb5dfaad131
6673cd13a7049f8f1f145fe4a167cb84c7455dea
5c90600c6be97ef9882839e34dc282d60fc303de05b81f996e301fd3f657b48b
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:27:01 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 25 Jul 2022 19:18:26 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
cf-cache-status: HIT
age: 1135
expires: Fri, 02 Dec 2022 23:27:01 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 7736752188cd0b41-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 1977cf573c41e6d783bb0b14a1ef7741
ff684d4f7fb0717033d9942677f8e14985f7c9ed
75a4e20d323fc9afbfcb6af32a7273b6191667fa080517a54f05aba6ddc84b4c
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 19:27:01 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 18:51:18 GMT
Expires: Sat, 03 Dec 2022 18:51:18 GMT
ETag: "ff684d4f7fb0717033d9942677f8e14985f7c9ed"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
200 OK 279 B IP
Hash 7ad21e6c0d3349471811c05a90f4dbdd
af5a11ac6c93bda22ed3588b17171aae38180d5e
de872fda94e128b84b91b4713f21a8ae216b351bab682cc84716785ddf269bd8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2630
Cache-Control: max-age=119486
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:01 GMT
Etag: "638976fd-117"
Expires: Sun, 04 Dec 2022 04:38:27 GMT
Last-Modified: Fri, 02 Dec 2022 03:54:37 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
ib.adnxs.com/getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 02 Dec 2022 19:27:01 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 00032de4-043c-4bc9-81b2-09e3ea4fac3a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
biddr.brealtime.com/check.html
200 OK 536 B URL HTTP/1.1 biddr.brealtime.com/check.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (926), with no line terminators
Hash 0033ea2ac7bf71369f3ca914869bd7f4
02cb500ceeafb2659c849f0233a01b1ad54849dc
e15c3b7839bfc0e44b766cc6e09520867e821936580e3cab19c0046a9815ac0e
GET /check.html HTTP/1.1
Host: biddr.brealtime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:27:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: WeqF89pYIGWpFNs426rAd5J4pPA0pX7StLc3dP4FJwbYenlb1hONdEOob5jWo4xU9l+FdgGxHIU=
x-amz-request-id: H6ZYF8B5P5AMX1X7
Last-Modified: Tue, 08 Sep 2020 13:51:51 GMT
CF-Cache-Status: HIT
Age: 2372
Expires: Fri, 02 Dec 2022 20:27:01 GMT
Cache-Control: public, max-age=3600
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77367521ffa8b51b-OSL
Content-Encoding: gzip
match.adsrvr.org/track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent=
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:27:01 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash e8e3d315810f86282f246b99c5efd320
f29235b75edbd1366dfae79b49185ff8fb3385d2
212ac32b342e44bc8d0740156a60641a0ec352328f0845d8d8babc47de89eabe
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5947
Cache-Control: max-age=162417
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:01 GMT
Etag: "638a11bb-1d7"
Expires: Sun, 04 Dec 2022 16:33:58 GMT
Last-Modified: Fri, 02 Dec 2022 14:54:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=12776
301 Moved Permanently 0 B URL HTTP/2 secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=12776
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utils/xapi/multi-sync.html?p=12776 HTTP/1.1
Host: secure-assets.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=12776
date: Fri, 02 Dec 2022 19:27:01 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 02 Dec 2022 19:27:01 GMT
content-length: 0
location: /usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1
cf-ray: 77367521f8150af6-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y4pRhexoKkaf1aCJYj8SLwAA; Path=/; Domain=casalemedia.com; Expires=Sat, 02 Dec 2023 19:27:01 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=1836; Path=/; Domain=casalemedia.com; Expires=Thu, 02 Mar 2023 19:27:01 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=1836; Path=/; Domain=casalemedia.com; Expires=Thu, 02 Mar 2023 19:27:01 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ceTmuFX2FvBCHqmzGGsexMhHwDkbD4OnIdkdS0YvQi%2Bo2z0TMSbBTX%2FNyQQzca0O2R3DgygalxmT%2BGIFGYG%2Bg%2FFenxAA5mfuvZLvXq8Bj2r8dd1NWhQ%2Bo%2FWzi0ZosJIwxIdiNy0rjySDcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.html?p=12776
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?p=12776
IP
ASN #1299 Telia Company AB
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?p=12776 HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Dec 2022 19:27:01 GMT
Connection: keep-alive
Vary: Accept-Encoding
us-u.openx.net/w/1.0/cm?id=fba3d144-1026-4d31-a758-943b9545e305&r=https://usr.undertone.com/userPixel/sync?partnerId=39&uid=
200 OK 56 B URL HTTP/2 us-u.openx.net/w/1.0/cm?id=fba3d144-1026-4d31-a758-943b9545e305&r=https://usr.undertone.com/userPixel/sync?partnerId=39&uid=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 15669dda86db3cbff7835fa202dc0b16
ce788cab9c1aa7e458a3971a59702c410b37e64d
5cc3f958039a8885c4e9526e22d454da47d579b9a02861e7a60b41fa0ba910df
GET /w/1.0/cm?id=fba3d144-1026-4d31-a758-943b9545e305&r=https://usr.undertone.com/userPixel/sync?partnerId=39&uid= HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Fri, 02 Dec 2022 19:27:01 GMT
content-type: text/html
content-length: 56
content-encoding: gzip
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 7ad21e6c0d3349471811c05a90f4dbdd
af5a11ac6c93bda22ed3588b17171aae38180d5e
de872fda94e128b84b91b4713f21a8ae216b351bab682cc84716785ddf269bd8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2414
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:01 GMT
Last-Modified: Fri, 02 Dec 2022 18:46:47 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
status.geotrust.com/
200 OK 471 B IP
Hash e8e3d315810f86282f246b99c5efd320
f29235b75edbd1366dfae79b49185ff8fb3385d2
212ac32b342e44bc8d0740156a60641a0ec352328f0845d8d8babc47de89eabe
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5947
Cache-Control: max-age=162417
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:01 GMT
Etag: "638a11bb-1d7"
Expires: Sun, 04 Dec 2022 16:33:58 GMT
Last-Modified: Fri, 02 Dec 2022 14:54:51 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 3fe5a33a956495f1e900444f7a2a3d94
a644ba16b5e2459564f09561c50c6592d6a1efee
4e3f6ed5950b10d18041b9c8b2823860c36f5823be8eea8613d345d6ddb7a7dc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2217
Cache-Control: max-age=124110
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:01 GMT
Etag: "63898aaa-1d7"
Expires: Sun, 04 Dec 2022 05:55:31 GMT
Last-Modified: Fri, 02 Dec 2022 05:18:34 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
powerad.ai/pubPls/?width=1280&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F
200 OK 6.0 kB URL HTTP/2 powerad.ai/pubPls/?width=1280&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F
IP
File type JSON data\012- , ASCII text, with very long lines (43914), with no line terminators
Hash 9a2ea5914a3d9d022f9434a1e2724870
5866d7463d20dfad9b287a7d644bcfad6fe5a02b
4d39401abb64cbaca7f064cddf19893143c674da83dc919fb22e6fd15982ab76
GET /pubPls/?width=1280&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
access-control-allow-headers: *
set-cookie: 12331dcr-g=1; Path=/; Secure; SameSite=None
12593dcr-g=1; Path=/; Secure; SameSite=None
12594dcr-g=1; Path=/; Secure; SameSite=None
12595dcr-g=1; Path=/; Secure; SameSite=None
12940dcr-g=1; Path=/; Secure; SameSite=None
13127dcr-g=1; Path=/; Secure; SameSite=None
etag: W/"ab8a-6UuU0Wyv3MqmEwExH+Eb6ouZjBs"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fad632aa1e7fe5767861d97c6361f7af
c5e2f50e677c318db7a07f2dbc8bbe58555cffef
49b907be01c784612faa455269993bdd5fdd2031297a3d2256d8a29e0a2ecc62
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2601
Cache-Control: max-age=160126
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:01 GMT
Etag: "638a15da-1d7"
Expires: Sun, 04 Dec 2022 15:55:47 GMT
Last-Modified: Fri, 02 Dec 2022 15:12:26 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash fad632aa1e7fe5767861d97c6361f7af
c5e2f50e677c318db7a07f2dbc8bbe58555cffef
49b907be01c784612faa455269993bdd5fdd2031297a3d2256d8a29e0a2ecc62
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2499
Cache-Control: max-age=160024
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 19:27:01 GMT
Etag: "638a15da-1d7"
Expires: Sun, 04 Dec 2022 15:54:05 GMT
Last-Modified: Fri, 02 Dec 2022 15:12:26 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID
302 Found 286 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash 04ce1d4a9e41ee4b95e37c41391b3877
ee74bb78f45fba78a27e183813cfb4b275568ec6
b8442a4a2a142a9cc1fde5885d88420f4e30be652e6950c2cebb9b2d5f3d17e1
GET /AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Fri, 02 Dec 2022 19:27:00 GMT
content-length: 286
X-Firefox-Spdy: h2
pixel-sync.sitescout.com/dmp/pixelSync?nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
302 Found 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
set-cookie: ssi=c4a501fb-3cc8-4e67-8cca-9584f63b677f#1670009221577; Domain=.sitescout.com; Expires=Sat, 02-Dec-2023 19:27:01 GMT; Path=/; Secure; SameSite=None
location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
content-length: 0
date: Fri, 02 Dec 2022 19:27:00 GMT
server: AC1.1
X-Firefox-Spdy: h2
pixel.advertising.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
301 Moved Permanently 360 B URL HTTP/2 pixel.advertising.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 5bc073669c856f7252a4bec2a2525d0c
8eb8fae40e9893d3958946478d65bc5ab45b2496
c56c30dddc16d8c19e9046050f4df1af8c5856250ffe5ff0022d7675033816d0
GET /ups/58293/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 02 Dec 2022 19:27:01 GMT
server: ATS/9.1.10.25
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
content-type: text/html
content-language: en
set-cookie: A3=d=AQABBIVRimMCEFs0wChjPmQlnJnQ3QPs0UkFEgEBAQGji2OUYwAAAAAA_eMAAA&S=AQAAAopBH7vw7QQjnUpHYCxG_60; Expires=Sun, 3 Dec 2023 01:27:01 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 360
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58545/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58545/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58545/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 02 Dec 2022 19:27:01 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58545/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIVRimMCEOrS6GQNvt2BU9YnV4Hh7c4FEgEBAQGji2OUYwAAAAAA_eMAAA&S=AQAAAsYFig9w_vvSUtgb66a47EI; Expires=Sun, 3 Dec 2023 01:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-length: 0
X-Firefox-Spdy: h2
pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
204 No Content 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
date: Fri, 02 Dec 2022 19:27:00 GMT
server: AC1.1
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58545/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58545/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58545/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 19:27:01 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIVRimMCEG_VVbJFRofhBPVXHhqY-sUFEgEBAQGji2OUYwAAAAAA_eMAAA&S=AQAAAmIr35q4j0dTPj_sJETJ4LM; Expires=Sun, 3 Dec 2023 01:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58293/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 02 Dec 2022 19:27:01 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIVRimMCEINHjocLL7g1UKIq-eaUK24FEgEBAQGji2OUYwAAAAAA_eMAAA&S=AQAAAoQ8ixdw6j1jf67QfwnpR6I; Expires=Sun, 3 Dec 2023 01:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash f4a59e60f6e4ac85a5cfc184ae9574de
e1e4aab051d927a6386c53b4e6fdd4779056a716
056e7f9c8c0c44636311743fb133638e081a3794cc3319ad16b1cec07689ca1d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 19:27:01 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 06:38:18 GMT
Expires: Sat, 03 Dec 2022 06:38:18 GMT
ETag: "e1e4aab051d927a6386c53b4e6fdd4779056a716"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 19:27:01 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIVRimMCEKOb0rRBLxpUJ1J5GMPLlfsFEgEBAQGji2OUYwAAAAAA_eMAAA&S=AQAAAsGzlPm9QHpBAPOac6wAaYs; Expires=Sun, 3 Dec 2023 01:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
e1.emxdgt.com/hb_sync/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hb_sync/ HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://biddr.brealtime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Fri, 02 Dec 2022 19:27:01 GMT
content-length: 0
X-Firefox-Spdy: h2
usr.undertone.com/userPixel/sync?partnerId=57&uid=0
200 OK 0 B URL HTTP/2 usr.undertone.com/userPixel/sync?partnerId=57&uid=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userPixel/sync?partnerId=57&uid=0 HTTP/1.1
Host: usr.undertone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum-sec.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Fri, 02 Dec 2022 19:27:01 GMT
server: istio-envoy
x-envoy-upstream-service-time: 0
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gC1cRXiCljG5gaKaMGPGB9Jya09N_fXGnJufabo9qTka8qT1X5pGew==
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 192adf26ca7df91f58d24af84cbd4e44
0c7649962e14bce7add2bf2cee63a078894feb58
1a28ca675958c2049612faa801c2eebf61ba2774a39d28cbb6bef222abeada03
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 715
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 02 Dec 2022 19:27:03 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: 10d1c5d6-f472-47ce-9e40-c9fe40abdfbd
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 767
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Fri, 02 Dec 2022 19:27:03 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cfc1be67a18a68760601ae3255a427f9
a011279043ac84f58f68a44aaa1a2c19256f835c
287f4c23774612d616feaef18389dfa9a007fa2b86e971140a2810dc853d2c37
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 717
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 02 Dec 2022 19:27:03 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: f94e0a32-81ee-4aa0-8a82-22be920f3522
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 767
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Fri, 02 Dec 2022 19:27:02 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1
200 OK 217 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 9d09f05f5fd664aa70dd1c24223a9e08
505e84c25d5a2cc85cb15bbec3c7fee7bb3c4a34
328543099b6416959862dc1eaadc1c2bb29dd09b217487271f7d34e6e5f0faf9
GET /usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:27:01 GMT
content-type: text/html
cf-ray: 7736752248450af6-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FBE%2B6ySAIDR9egdiENNobPZm7aRstHpnWdqN86fE8CFBNSTGXaBmg01RIMd9rrt81tSKohhaYgzeDHtnfLqX8a0OtF263r8Dbw9G0iKsUZwedDJdgn4Yl89TGn8yeheg%2BHZ%2FzP64RLSB7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497848&size_id=15&alt_size_ids=9%2C10&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FRight_rail_sticky&tk_flint=pbjs_lite_v7.6.0&x_source.tid=a56f65db-f83c-46e3-bde7-e252fc5d298c&l_pb_bid_id=310b5223acc57e3&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FRight_rail_sticky&slots=1&rand=0.2169587166248408
200 OK 403 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497848&size_id=15&alt_size_ids=9%2C10&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FRight_rail_sticky&tk_flint=pbjs_lite_v7.6.0&x_source.tid=a56f65db-f83c-46e3-bde7-e252fc5d298c&l_pb_bid_id=310b5223acc57e3&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FRight_rail_sticky&slots=1&rand=0.2169587166248408
IP
File type JSON data\012- , ASCII text, with very long lines (403), with no line terminators
Hash 19d6c9b2a044c54d5c12431fb8b7c4e0
c491eca570adc7aaf6c54eb1ea6dd2b3e22112f2
b4a0e25e3c7e362741fe50ed352dd2d08e7dc5b4de3672e2007ea3754065a9bf
GET /a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497848&size_id=15&alt_size_ids=9%2C10&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FRight_rail_sticky&tk_flint=pbjs_lite_v7.6.0&x_source.tid=a56f65db-f83c-46e3-bde7-e252fc5d298c&l_pb_bid_id=310b5223acc57e3&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FRight_rail_sticky&slots=1&rand=0.2169587166248408 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Fri, 02 Dec 2022 19:27:03 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB6WDFSQ-7-BESU; Domain=.rubiconproject.com; Path=/; Expires=Sat, 02-Dec-2023 19:27:03 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/EhbQW6BW/sHH+9DtVM30fCgJ0MVX6Cj0Qe/jWivvPp2O+Zppt9Bb1XYHe6QAskPRNOJ9JBDhlS/zQTuCRPP99ay; Domain=.rubiconproject.com; Path=/; Expires=Sat, 02-Dec-2023 19:27:03 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 403
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 79152de86b727fc382afc8945284fd52
5accdc9a105a0df24b8662da5f6012f2cb972ffd
75dfc77b76468557d3d9d4260875b6328900105eeafa7aa55dc997e9c601c7af
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152406
Date: Fri, 02 Dec 2022 19:27:03 GMT
Etag: "6389f721-1d7"
Expires: Sun, 04 Dec 2022 13:47:09 GMT
Last-Modified: Fri, 02 Dec 2022 13:01:21 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CWR9CLpK56vhLOhlJGsdx8jSniiH2TbZAKQkY_DLDNyaMS9md2kppA==
Age: 2748
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 739
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Fri, 02 Dec 2022 19:27:03 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
a.teads.tv/hb/bid-request
200 OK 42 B URL HTTP/2 a.teads.tv/hb/bid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f646cd677a5283a600e1ca73c499877
979e9d54fa7ac635da0fb855a8ba40a0f74fe76e
d6e5f108622c778ca6bc5d246637b9a73585a670d46e15493b89f2915806174a
POST /hb/bid-request HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 571
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64
content-encoding: gzip
expires: Fri, 02 Dec 2022 19:27:03 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 02 Dec 2022 19:27:03 GMT
content-length: 42
vary: Accept-Encoding
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 995
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache, no-store, must-revalidate
date: Fri, 02 Dec 2022 19:27:03 GMT
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
200 OK 5.4 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (23577)
Hash 6663c37736e07fb14630da684a56d292
f90fb68072201bef0ef1308a563fe9e549f3bd6a
e4e9ffe658338c758d6d91a2b2da4455ce36025544a7819086bdce23500841d9
GET /font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 632, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 21:08:57
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e6a55b08fe5091f45c9e99ce9e9f98c2
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 15450814
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 773674fa6ba60b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 993
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache, no-store, must-revalidate
date: Fri, 02 Dec 2022 19:27:02 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e4360d73bce1e1e4f0dd11c434183dd3
76434f374239d989157ea43c444f60f01f2533c1
b8d4325255aef558916a0c25a54e571c7da9109e967820bfafa0f95f216e1497
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123558
Date: Fri, 02 Dec 2022 19:27:03 GMT
Etag: "6389867d-1d7"
Expires: Sun, 04 Dec 2022 05:46:21 GMT
Last-Modified: Fri, 02 Dec 2022 05:00:45 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hDdCG1GfLvOUq5E9M2V_zziPAxJFNpT1qcm4ZSyB2E04bKjn4-cWXw==
Age: 2736
ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
200 OK 100 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ed3e20acac04f6fc85a18d7d9121606f
090a85879c6823e18f9910a9c06aec00038dc701
1c8ff1efd639cb6f3ab2282c749157aa6959847b3ca3ccd05e0bd14d6f781766
POST /rtb/bid?src=prebid_prebid_7.6.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 625
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:27:03 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljt_reader=FwBPtBZHmc7LuvK9TQG5jBR8;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://perezhilton.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Content-Length: 100
X-Sovrn-Pod: ad_ap5ams1
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8ef5e37321665d92584fc9a209e47366
a4e4118782772fe5d48818070fe53aca51891f84
32592939dda0eb6af6e1c217226c4af3c411f8e070cb46c5fe34af4cc3a97e22
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 748
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 02 Dec 2022 19:27:03 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: c3106d88-68ac-4b98-b388-1c006bc2cb46
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
200 OK 98 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 171a5750af8985577888fb01cff13764
7e3830d8ad87f65e1fdaa5cb65963a08721cba46
0734e27d5da036d3817f8fbde6b787539ce6b8de321bcc0d0cd8b6f7e5f2fe2b
POST /rtb/bid?src=prebid_prebid_7.6.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 621
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 19:27:03 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljt_reader=FwBPsBZHCGzpTW7bTm641A0z;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://perezhilton.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Content-Length: 98
X-Sovrn-Pod: ad_ap4ams1
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 800
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Fri, 02 Dec 2022 19:27:02 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 79152de86b727fc382afc8945284fd52
5accdc9a105a0df24b8662da5f6012f2cb972ffd
75dfc77b76468557d3d9d4260875b6328900105eeafa7aa55dc997e9c601c7af
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152403
Date: Fri, 02 Dec 2022 19:27:03 GMT
Etag: "6389f721-1d7"
Expires: Sun, 04 Dec 2022 13:47:06 GMT
Last-Modified: Fri, 02 Dec 2022 13:01:21 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: t91nPVz0qpey2n8QYHfmdlePhgfyI3mIkPdAuegewYZOYymTF8-M7w==
Age: 2745
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1023
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache, no-store, must-revalidate
date: Fri, 02 Dec 2022 19:27:02 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e4360d73bce1e1e4f0dd11c434183dd3
76434f374239d989157ea43c444f60f01f2533c1
b8d4325255aef558916a0c25a54e571c7da9109e967820bfafa0f95f216e1497
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 02 Dec 2022 19:27:03 GMT
Last-Modified: Fri, 02 Dec 2022 18:41:06 GMT
Server: ECS (nyb/1D05)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: d44AwLsgcadb5rWb1BeONG1-YP0MOqUJhmGt4R_Zl0HQ09KORFOUpA==
Age: 2757
tlx.3lift.com/header/auction?lib=prebid&v=7.6.0&referrer=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tmax=2500&gdpr=false&us_privacy=1---
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.6.0&referrer=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tmax=2500&gdpr=false&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.6.0&referrer=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tmax=2500&gdpr=false&us_privacy=1--- HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 541
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:27:03 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua,sec-ch-ua-bitness,sec-ch-prefers-color-scheme,sec-ch-width,sec-ch-ect,user-agent,sec-ch-downlink,sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width,sec-ch-ua-platform,sec-ch-viewport-height,sec-ch-rtt,sec-ch-ua-arch
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash aa4bdc51ebfa69dcad3d418096cc7a27
c92a8fb377799278488b84eed124d66f3cdd7d50
e33b5b05380976ba3a7f0f93699ec4ad67808e3f1622e698dfc8a70102926957
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 02 Dec 2022 19:27:03 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: 0c0fa055-08ea-41c0-9a79-3fac233d089f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 966
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache, no-store, must-revalidate
date: Fri, 02 Dec 2022 19:27:03 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e4360d73bce1e1e4f0dd11c434183dd3
76434f374239d989157ea43c444f60f01f2533c1
b8d4325255aef558916a0c25a54e571c7da9109e967820bfafa0f95f216e1497
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123930
Date: Fri, 02 Dec 2022 19:27:03 GMT
Etag: "6389867d-1d7"
Expires: Sun, 04 Dec 2022 05:52:33 GMT
Last-Modified: Fri, 02 Dec 2022 05:00:45 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6ZDfiWc0eHUqZDHSXkItIhClGYf17G48DXGS5MwSkpRzwn07yY0S7A==
Age: 3108
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497856&size_id=2&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FClick_For_Details_Button&tk_flint=pbjs_lite_v7.6.0&x_source.tid=2fb6b733-ff06-4066-98ec-2a8844f3888c&l_pb_bid_id=56adf0d5902a8f2&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FClick_For_Details_Button&slots=1&rand=0.7884908275839816
200 OK 3.2 kB URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497856&size_id=2&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FClick_For_Details_Button&tk_flint=pbjs_lite_v7.6.0&x_source.tid=2fb6b733-ff06-4066-98ec-2a8844f3888c&l_pb_bid_id=56adf0d5902a8f2&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FClick_For_Details_Button&slots=1&rand=0.7884908275839816
IP
Hash fff7a9f64d65e6da35fbb45bd919ffe6
96f06eefb3bf9dd297596812df90981a9c9d6f96
f2a815ebbfa0a3a36bb3ac61dd380b6ddb34d8ed247d81361b31e91ce001eb8d
GET /a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497856&size_id=2&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FClick_For_Details_Button&tk_flint=pbjs_lite_v7.6.0&x_source.tid=2fb6b733-ff06-4066-98ec-2a8844f3888c&l_pb_bid_id=56adf0d5902a8f2&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FClick_For_Details_Button&slots=1&rand=0.7884908275839816 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Fri, 02 Dec 2022 19:27:03 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB6WDFUN-W-6PJB; Domain=.rubiconproject.com; Path=/; Expires=Sat, 02-Dec-2023 19:27:03 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/EjgVnHnyXU2le9DtVM30fCgJ0MVX6Cj0Qe/jWivvPp2O+Zppt9Bb1XYHe6QAskPRNOJ9JBDhlS/zQTuCRPP99ay; Domain=.rubiconproject.com; Path=/; Expires=Sat, 02-Dec-2023 19:27:03 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/son_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&uid=eb5637d2-d983-4797-81b2-13cf164cddb7&gdpr=0
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/son_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&uid=eb5637d2-d983-4797-81b2-13cf164cddb7&gdpr=0
IP
GET /api/v1/son_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&uid=eb5637d2-d983-4797-81b2-13cf164cddb7&gdpr=0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670009216-D5XTAEUN-874F; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 03 Dec 2022 07:26:59 GMT
set-cookie: au_id=AU1D-0100-001670009216-D5XTAEUN-874F; Expires=Sun, 01 Dec 2024 19:26:59 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/choice/GANCBjEfRH5Fe/perezhilton.com/choice.js?timestamp=1670009213556
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/choice/GANCBjEfRH5Fe/perezhilton.com/choice.js?timestamp=1670009213556
IP
GET /choice/GANCBjEfRH5Fe/perezhilton.com/choice.js?timestamp=1670009213556 HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 18 Oct 2021 12:25:10 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: gzip
date: Fri, 02 Dec 2022 19:26:55 GMT
cache-control: max-age=3600
etag: W/"95f6844442aedd0c7781a1eb1fc1c669"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Z0Zz4NfDeNnhTfhT0eFzisptt99bBCV3UhEyTl1OwmgL3uj4DDv8Ww==
age: 20
X-Firefox-Spdy: h2
test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
200 OK 0 B URL HTTP/2 test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
IP
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Fri, 02 Dec 2022 03:00:41 GMT
last-modified: Wed, 30 Nov 2022 19:52:29 GMT
etag: W/"8980f3096e8d1a15cdb9518354d546f7"
x-amz-server-side-encryption: AES256
x-amz-version-id: KZ_abct9fxSnQsZ4cInZdlEfLgTLD6XT
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EiD1zg5Zd1TERsqUJQbbFoQG7ayuzMW5m0oy0ULn0Zoah5yQ795APA==
age: 59177
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3
IP
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.5.3 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 12:22:11 GMT
etag: W/"5fe09373-37a6"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4710
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CWXoAcGddJtyVd37aYM%2FhCjbYWpJy2kElPhW6wzQLVNTYS2bY0UFN%2B0c4OUnzO85SkbKytgcuRAm51nMPTm86j%2Fp508V3%2FMf01zXrpMCJf2wUQa4%2Fd19%2BSdW2twKSHRkgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fbfbbeb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=96873
access-control-allow-origin: *
etag: W/"5fe09373-17a69"
last-modified: Mon, 21 Dec 2020 12:22:11 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4106
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WvnXbXCyqQVQ8Cge156dfdJqiBgPNsxW92Qcw8rJnsp6uJOfbzOW43UIa6DBOyEQaLcGwIgeUbZzjsuuauKufeEc%2B38nnBs9bKaTX3d2npr2nUilVB4CRI6TLk%2BZMqmp1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674f9f972b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js?ver=5.5.3
200 OK 0 B URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js?ver=5.5.3
IP
GET /sdks/OneSignalSDK.js?ver=5.5.3 HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 1854
expires: Mon, 05 Dec 2022 19:26:55 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 773674faafa2b503-OSL
content-encoding: br
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/beeswax_match?beeswax_id=&id=AU1D-0100-001670009216-D5XTAEUN-874F
202 Accepted 0 B URL HTTP/2 ids.ad.gt/api/v1/beeswax_match?beeswax_id=&id=AU1D-0100-001670009216-D5XTAEUN-874F
IP
GET /api/v1/beeswax_match?beeswax_id=&id=AU1D-0100-001670009216-D5XTAEUN-874F HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670009216-D5XTAEUN-874F; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 03 Dec 2022 07:26:59 GMT
set-cookie: au_id=AU1D-0100-001670009216-D5XTAEUN-874F; Expires=Sun, 01 Dec 2024 19:26:59 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
beeswax_id=; Expires=Sun, 01 Dec 2024 19:26:59 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
powerad.ai/script.js?ver=0.9.4.1636670677
200 OK 0 B URL HTTP/2 powerad.ai/script.js?ver=0.9.4.1636670677
IP
GET /script.js?ver=0.9.4.1636670677 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
accept-ranges: bytes
cache-control: public, max-age=172800
last-modified: Fri, 02 Dec 2022 14:16:41 GMT
etag: W/"33468-184d33253ba"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&ref=
200 OK 0 B URL HTTP/2 a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&ref=
IP
GET /api/v1/u/matches/251?url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&ref= HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: application/javascript
server: nginx/1.20.0
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
p.ad.gt/api/v1/p/251
200 OK 0 B IP
GET /api/v1/p/251 HTTP/1.1
Host: p.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: application/javascript
last-modified: Fri, 02 Dec 2022 11:48:02 GMT
cache-control: public, max-age=43200
expires: Sat, 03 Dec 2022 07:24:11 GMT
etag: W/"1669981682.0-41607-2710964840"
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 167
vary: Accept-Encoding
server: cloudflare
cf-ray: 7736750efd37b527-OSL
X-Firefox-Spdy: h2
dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-wrapper.js
200 OK 0 B URL HTTP/2 dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-wrapper.js
IP
GET /perezhilton-DxtDG5qb8P/default/prebid-wrapper.js HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 18:43:31 GMT
last-modified: Fri, 02 Dec 2022 17:54:16 GMT
etag: W/"eac44a67832425645a34c9d9239fb833"
cache-control: max-age=3600
x-amz-version-id: vbBtwlRwl_lhWE7ZtAmd7wB9vfREPM.u
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: j_ER6TRD13_QOttNsvDa2UQGSUSnzJgT_an8NNXxnl5ojMSeIYXfFQ==
age: 2606
X-Firefox-Spdy: h2
s.ntv.io/serve/load.js
200 OK 0 B IP
GET /serve/load.js HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: qFP2x5/1a0lAZ0LxP3Uh8O5wADLZpRDEbpL9hy/4qO1pXRByVMRrvtjSTynJ+g9uqazNYPh/aEj31XAlMwzvPw==
x-amz-request-id: 35TG0469KJ7GRXTT
Last-Modified: Fri, 02 Dec 2022 18:57:02 GMT
ETag: "1a22438819c745c82db2b2b8680b1908"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 19:26:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
perezhilton.com/wp-includes/js/wp-embed.min.js?ver=5.5.3
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/js/wp-embed.min.js?ver=5.5.3
IP
GET /wp-includes/js/wp-embed.min.js?ver=5.5.3 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
last-modified: Wed, 28 Oct 2020 11:54:14 GMT
etag: W/"5f995be6-59a"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3901
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=URg7bXhy3Ev7at%2BWuX7xL%2F59mVxaykYEuUia6CgGsKdSiy0E%2Fsxdk9VRYDZ1ir4u36HNaAVyScHYufYhp3vFAwB6nkLutuQqXAGUDRsJAcOD83hVjz75CwEwuL5wbYnMLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fa19a6b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
threetruck.com/v2ottNEyGq0p1mCsWUL35CzEebKPZB4BIhrwA3nqqE2Q6ZB5HD2uki1gUee0sTbli
200 OK 0 B URL HTTP/2 threetruck.com/v2ottNEyGq0p1mCsWUL35CzEebKPZB4BIhrwA3nqqE2Q6ZB5HD2uki1gUee0sTbli
IP
GET /v2ottNEyGq0p1mCsWUL35CzEebKPZB4BIhrwA3nqqE2Q6ZB5HD2uki1gUee0sTbli HTTP/1.1
Host: threetruck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private, must-revalidate, max-age=21600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "29b42aab09c0efcf42ec9d7fccb3666a072388162c3cdec6614eae25e80023e1"
strict-transport-security: max-age=15724800; preload
timing-allow-origin: *
vary: Accept-Encoding, Accept-Language
x-buildname: hoothoot
x-buildnumber: 694373797
x-datacenter: gce-europe-west1
x-hostname: fen-hoothoot-europe-west1-test-04vg
date: Fri, 02 Dec 2022 19:26:55 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/js/quantcast.js?ver=0.9.4.1636670677
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/js/quantcast.js?ver=0.9.4.1636670677
IP
GET /wp-content/themes/understrap-master/js/quantcast.js?ver=0.9.4.1636670677 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:55 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=3939
etag: W/"5f077cbb-f63"
last-modified: Thu, 09 Jul 2020 20:23:23 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2904
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SJJXOno%2FdBrSqe2z6hjfo4hNTv9eS%2FVr4zSUMv6IiQ0Bg7RbWE5OzlfzgTuLTh2xelInpvyj5OBRP2TG%2B4FxNAff5wEUB2BfHr%2F26p1TUVBHqhIGC%2FgDo8dh5GaOn9BRHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773674fa098cb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
d3div1mtym39ic.cloudfront.net/aax2/apstag.js
200 OK 0 B URL HTTP/2 d3div1mtym39ic.cloudfront.net/aax2/apstag.js
IP
GET /aax2/apstag.js HTTP/1.1
Host: d3div1mtym39ic.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 02 Dec 2022 19:18:44 GMT
last-modified: Wed, 09 Nov 2022 20:51:50 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
etag: W/"fa24fe2b94a2fc864b1ec67f32e8db32"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kCJZ-n4vCRQAHLvCX3rpr2hIifPBpVNoKAPeKUeiX5e1pSidoHkTRg==
age: 494
X-Firefox-Spdy: h2
cdn.undertone.com/js/usersync.html?ccpa=1---
200 OK 0 B URL HTTP/2 cdn.undertone.com/js/usersync.html?ccpa=1---
IP
GET /js/usersync.html?ccpa=1--- HTTP/1.1
Host: cdn.undertone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
date: Fri, 02 Dec 2022 06:18:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 07 Nov 2022 14:19:07 GMT
etag: W/"5622b32305c47b2be916a6c424eed515"
x-amz-version-id: FcgX1qjTYQoJcn.Q.j6.Q9icc5uN_Nnv
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: skHwDYe0nDgj8952SEPzzl2h3h4s6EcJbiRfV9uVa4ZtY-9FsWHuGQ==
age: 47314
X-Firefox-Spdy: h2
image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670009216-D5XTAEUN-874F
302 Found 0 B URL HTTP/2 image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670009216-D5XTAEUN-874F
IP
GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670009216-D5XTAEUN-874F HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 02 Dec 2022 19:26:58 GMT
set-cookie: KTPCACOOKIE=true; domain=pubmatic.com; secure; expires=Thu, 02-Mar-2023 19:26:58 GMT; path=/
location: https://image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670009216-D5XTAEUN-874F
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/tcfv2/23/cmp2.js?referer=perezhilton.com
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/tcfv2/23/cmp2.js?referer=perezhilton.com
IP
GET /tcfv2/23/cmp2.js?referer=perezhilton.com HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
last-modified: Fri, 18 Dec 2020 15:09:37 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-qc-ineu: True
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
cache-control: max-age=172800
date: Fri, 02 Dec 2022 16:37:18 GMT
etag: W/"1d55b13d85c9837da884d1e8594cc025"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Bm_zGcARUQ8dx8Ffcl1nUFjnkiuHgex4NHJF4CpKhZ-yCOWNCa9SJg==
age: 10178
X-Firefox-Spdy: h2
socialcanvas-cdn.kargo.com/js/scpb.js
200 OK 0 B URL HTTP/2 socialcanvas-cdn.kargo.com/js/scpb.js
IP
GET /js/scpb.js HTTP/1.1
Host: socialcanvas-cdn.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 18:54:34 GMT
server: AmazonS3
content-encoding: br
date: Fri, 02 Dec 2022 17:11:02 GMT
etag: W/"4102c8de7c45dc9353378b8f31a06708"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VkKEX59EFv1OQ3aV3yzonJ62e7CvbiNCVqAheeATdVwhrIZdsDpyoQ==
age: 8159
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "nAbmxtqHqaYrwBiADJAeFg=="
expires: Fri, 09 Dec 2022 19:26:56 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://perezhilton.com
server-processing-duration-in-ticks: 477221
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 18 Nov 2022 03:05:15 GMT
x-amz-version-id: vkCJAv2LVCiDvkjoOZrS5s9fefeFFUOq
server: AmazonS3
content-encoding: gzip
date: Fri, 02 Dec 2022 04:03:31 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XIg_idtaGwfv7qkoAHj-A3uM0M5j8g5tPoUXAYQZdRjvR_qBMEYHow==
age: 55407
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
IP
GET /GVL-v2/vendor-list.json HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Fri, 02 Dec 2022 03:02:10 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Fri, 02 Dec 2022 03:02:02 GMT
etag: W/"494a8ea139cc4d2e1de7e701f84abcfe"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: he7E1rm7L0nUoEMbHJR1YEHffSLaLMf2FieJC83tGYAZ4R39im8D3A==
age: 59089
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:58 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://perezhilton.com
server-processing-duration-in-ticks: 1376881
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670009216-D5XTAEUN-874F
200 OK 0 B URL HTTP/2 image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670009216-D5XTAEUN-874F
IP
GET /AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670009216-D5XTAEUN-874F HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2020/07/favicon.ico
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/uploads/2020/07/favicon.ico
IP
GET /wp-content/uploads/2020/07/favicon.ico HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/yummy-yummy-screw/
Cookie: ntvSession={}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: image/x-icon
last-modified: Tue, 21 Jul 2020 23:08:37 GMT
etag: W/"5f177575-103e"
expires: Thu, 08 Dec 2022 06:53:54 GMT
cache-control: max-age=691200
cf-cache-status: HIT
age: 217982
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=COISBe0V4DXJAp2kX2oFUIjhHC5VqRRyrxP3LqZw%2Fs8eFq91PbEa9uyEta9snBTJ5usPRqY3bFsosUAfO0NWsTM%2FQ1H3NS%2FqoyhHgAP3iZMuoWZP7%2F0mNVIFVmcd0sMh8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773675016b0cb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/gpt/pubads_impl_2022113001.js?cb=31071115
200 OK 0 B URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022113001.js?cb=31071115
IP
GET /gpt/pubads_impl_2022113001.js?cb=31071115 HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 133236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 12:00:56 GMT
expires: Fri, 01 Dec 2023 12:00:56 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Wed, 30 Nov 2022 09:36:50 GMT
content-type: text/javascript
age: 113160
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hb.brainlyads.com/pbjs_wrapper.v2.0.js
200 OK 0 B URL HTTP/2 hb.brainlyads.com/pbjs_wrapper.v2.0.js
IP
GET /pbjs_wrapper.v2.0.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 02 Dec 2022 19:26:56 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 07:17:56 GMT
vary: Accept-Encoding
etag: W/"63885524-c4a7"
expires: Fri, 09 Dec 2022 19:26:56 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/tcfv2/23/cmp2ui-en.js
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/tcfv2/23/cmp2ui-en.js
IP
GET /tcfv2/23/cmp2ui-en.js HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 604800
last-modified: Fri, 18 Dec 2020 15:09:43 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
date: Fri, 02 Dec 2022 15:45:15 GMT
cache-control: max-age=172800
etag: W/"b999c652510fc4edd897a1d667aaee33"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LaeTV_8GcAjFW4Rquji1Q83swY68jlHHk6P0JvOd51LlON9sY7hegQ==
age: 144813
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/g_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&google_error=3
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/g_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&google_error=3
IP
GET /api/v1/g_match?id=AU1D-0100-001670009216-D5XTAEUN-874F&google_error=3 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670009216-D5XTAEUN-874F; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 03 Dec 2022 07:26:59 GMT
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/g_match?google_error=3
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/g_match?google_error=3
IP
GET /api/v1/g_match?google_error=3 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670009216-D5XTAEUN-874F; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 19:26:59 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 03 Dec 2022 07:26:59 GMT
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497836&size_id=2&alt_size_ids=55%2C57&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FLeaderboard_728x90&tk_flint=pbjs_lite_v7.6.0&x_source.tid=9c034498-e3f3-48f9-86d3-c96804caa3af&l_pb_bid_id=16ed24969e4cb78&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FLeaderboard_728x90&slots=1&rand=0.8280648903848984
200 OK 0 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497836&size_id=2&alt_size_ids=55%2C57&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FLeaderboard_728x90&tk_flint=pbjs_lite_v7.6.0&x_source.tid=9c034498-e3f3-48f9-86d3-c96804caa3af&l_pb_bid_id=16ed24969e4cb78&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FLeaderboard_728x90&slots=1&rand=0.8280648903848984
IP
GET /a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497836&size_id=2&alt_size_ids=55%2C57&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fyummy-yummy-screw%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FLeaderboard_728x90&tk_flint=pbjs_lite_v7.6.0&x_source.tid=9c034498-e3f3-48f9-86d3-c96804caa3af&l_pb_bid_id=16ed24969e4cb78&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FLeaderboard_728x90&slots=1&rand=0.8280648903848984 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Fri, 02 Dec 2022 19:27:03 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB6WDFRK-1K-AJ7E; Domain=.rubiconproject.com; Path=/; Expires=Sat, 02-Dec-2023 19:27:03 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qohc1eFz/IrI+9DtVM30fCgJ0MVX6Cj0Qe/jWivvPp2O+Zppt9Bb1XYHe6QAskPRNOJ9JBDhlS/zQTuCRPP99ay; Domain=.rubiconproject.com; Path=/; Expires=Sat, 02-Dec-2023 19:27:03 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2
dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-library.js
200 OK 0 B URL HTTP/2 dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-library.js
IP
GET /perezhilton-DxtDG5qb8P/default/prebid-library.js HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 10 Nov 2022 00:28:37 GMT
x-amz-version-id: _FF.oKPwDK9piLNrcigEQWFUfxjp1uUH
server: AmazonS3
content-encoding: gzip
date: Fri, 02 Dec 2022 17:01:15 GMT
cache-control: max-age=86400
etag: W/"e70a6e6f9be79cf70620b94f395ff635"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: HzJg85yCHzsr3Q3jINK04OG6jO3OsPty2THgUz60jkNC5wxVcgHYaA==
age: 8744
X-Firefox-Spdy: h2
tags.crwdcntrl.net/lt/c/16576/sync.min.js
200 OK 0 B URL HTTP/2 tags.crwdcntrl.net/lt/c/16576/sync.min.js
IP
GET /lt/c/16576/sync.min.js HTTP/1.1
Host: tags.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
last-modified: Mon, 21 Nov 2022 18:55:24 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Fri, 02 Dec 2022 12:55:12 GMT
cache-control: max-age: 86400
etag: W/"51c5af7d71728569b41d03503fff2de7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bauDLuuV3rrEKpIIAt1MOyFTbwYFlXO7k5Ed1oja0TjqQe0MUNyGDw==
age: 23506
X-Firefox-Spdy: h2
104.26.0.93
18.194.206.47
51.38.120.206
23.36.76.160
185.64.189.112
104.18.20.226
3.248.128.187
147.75.85.234
2.21.206.244