GET trk.theonesstoodtheirground.com/15Gxg8?subid=251854&affid=20117
302 Found 147 B URL User Request GET HTTP/1.1 trk.theonesstoodtheirground.com/15Gxg8?subid=251854&affid=20117
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjecttrk.theonesstoodtheirground.com
Fingerprint61:EE:A4:2C:7A:87:97:5B:DA:73:F3:A1:49:C4:79:E8:37:B3:FB:09
ValidityWed, 07 Aug 2024 07:24:23 GMT - Tue, 05 Nov 2024 07:24:22 GMT
File type HTML document, ASCII text
Hash 8ccfcd376037eb4f892be93f390f4f90
1a7f667a2147126dde74d5164970495ebcafb0c2
2ec328dbecf5dc8eba72e1b4b02d32ae844bdd7c288ba99d35d6f538fd076826
GET /15Gxg8?subid=251854&affid=20117 HTTP/1.1
Host: trk.theonesstoodtheirground.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.25.2
Date: Sun, 20 Oct 2024 18:34:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 147
Connection: keep-alive
Location: https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Set-Cookie: 15Gxg8o=1; Path=/; Domain=trk.theonesstoodtheirground.com; Max-Age=86400; Secure; SameSite=None
pc-cid=743192342a69fc569795221a513194d5-4888-1020; Path=/; Domain=trk.theonesstoodtheirground.com; Max-Age=86400; Secure; SameSite=None
pc-campaign=15Gxg8; Path=/; Domain=trk.theonesstoodtheirground.com; Max-Age=86400; Secure; SameSite=None
pc-linf=; Path=/; Domain=trk.theonesstoodtheirground.com
GET jsc.mgid.com/c/l/click-push.com.1625960.js
200 OK 2.9 kB URL GET HTTP/2 jsc.mgid.com/c/l/click-push.com.1625960.js
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File type JavaScript source, ASCII text, with very long lines (7671)
Hash 25ba49250fe043afdd291bd21b4b8aca
1f54f44aed701a0538b9420e60ef754c7b4e291a
d1f6b398777f67f526a8be6d68d74e34b699e1300788896378ed7dc5a3b4f101
GET /c/l/click-push.com.1625960.js HTTP/1.1
Host: jsc.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://int.celebnewsuggestions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Oct 2024 18:34:23 GMT
content-type: text/javascript
content-length: 2863
x-amz-id-2: RuqWYtBE5vYA61HIr9RHtOUTnbvEEHSEFk5jUfVxVC8tnV/ZHv0Wb94JgLrBRrAXcvYfjXNHZ1k=
x-amz-request-id: KJR3N7C83WAVV9SH
last-modified: Fri, 04 Oct 2024 07:58:20 GMT
etag: "9556738c5688c7ce4542af757202a9c4"
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: MwEMQKsi7PIqSXvbwVx8OEYkgt3iTKNT
cf-cache-status: HIT
age: 1908
expires: Sun, 20 Oct 2024 21:34:23 GMT
cache-control: public, max-age=10800
accept-ranges: bytes
set-cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ; path=/; expires=Sun, 20-Oct-24 19:04:23 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
access-control-allow-origin: *
access-control-expose-headers: X-cntry
x-cntry: NO
server: cloudflare
cf-ray: 8d5b1a09afd5b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET jsc.mgid.com/c/l/click-push.com.1625960.es6.js
200 OK 105 kB URL GET HTTP/3 jsc.mgid.com/c/l/click-push.com.1625960.es6.js
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File type JavaScript source, ASCII text, with very long lines (32347)
Size 105 kB (105106 bytes)
Hash 013955045c45d7fdca525701492a8a82
ede85ba6d3c97dece34e28b720c159bc7a5770af
1a452344c3ed440f6fce67538ae32ad6c1f7f2de74bd6c0d4e5d4615654cf7c1
GET /c/l/click-push.com.1625960.es6.js HTTP/1.1
Host: jsc.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 20 Oct 2024 18:34:23 GMT
content-type: text/javascript
content-length: 105106
x-amz-id-2: nTpQMt2YunAJfBqxs18XqxFf5R+NyTMTWnsvqL3hxHUglcq4FphQ7XVD/RnD1aH5i6xh2T8MdOvIC6TjdONKqj17cplk9Xpr
x-amz-request-id: EX21QRN4CGYERY1H
last-modified: Fri, 04 Oct 2024 07:58:20 GMT
etag: "7ce28da8ca410d8f3c7695e499780a83"
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: u7W48NG181hlXy5j5UHgJXPePyAniMyp
cf-cache-status: HIT
age: 1908
expires: Sun, 20 Oct 2024 21:34:23 GMT
cache-control: public, max-age=10800
accept-ranges: bytes
set-cookie: __cf_bm=OFPQDo0.5UCBzG6I5ASiZ0r7.Fnwr5b_de0pieExASg-1729449263-1.0.1.1-GW9Qgbj96TJagpsJ6_h3QCRN84ONsidHUoYUdF7Nw2.WVKYM8DyiDYIoqmeI4iXqMzretxAkq6pFNl6dXTizMQ; path=/; expires=Sun, 20-Oct-24 19:04:23 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
access-control-allow-origin: *
access-control-expose-headers: X-cntry
x-cntry: NO
server: cloudflare
cf-ray: 8d5b1a0a880a7128-OSL
alt-svc: h3=":443"; ma=86400
GET int.celebnewsuggestions.com/favicon.ico
200 OK 5.4 kB URL GET HTTP/2 int.celebnewsuggestions.com/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerLet's Encrypt
Subject*.celebnewsuggestions.com
FingerprintAE:04:5A:95:B3:9C:0B:C4:73:5E:5C:52:71:18:72:5F:30:51:68:7E
ValidityTue, 08 Oct 2024 07:37:04 GMT - Mon, 06 Jan 2025 07:37:03 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 88edc459abdc8dc4706d0a7c8409b070
9c243408bab07516f123a55909c36fb1a4d2fe86
98e645b894353850a9cac9f488cbda0c867a51f7d3cb1f9b8261bc2c9a888d49
GET /favicon.ico HTTP/1.1
Host: int.celebnewsuggestions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Cookie: pc=data_1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 20 Oct 2024 18:34:23 GMT
content-type: image/x-icon
content-length: 5430
last-modified: Wed, 17 Oct 2018 08:05:59 GMT
etag: "5bc6ed67-1536"
expires: Tue, 19 Nov 2024 18:34:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
GET c.mgid.com/pv/?lu=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&cbuster=1729449263962539779204&pvid=192ab3583599a46f948&implVersion=11&cxurl=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&site=361112&i=1
200 OK 43 B URL GET HTTP/3 c.mgid.com/pv/?lu=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&cbuster=1729449263962539779204&pvid=192ab3583599a46f948&implVersion=11&cxurl=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&site=361112&i=1
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /pv/?lu=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&cbuster=1729449263962539779204&pvid=192ab3583599a46f948&implVersion=11&cxurl=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&site=361112&i=1 HTTP/1.1
Host: c.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://int.celebnewsuggestions.com/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 20 Oct 2024 18:34:24 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
x-robots-tag: noindex
server: cloudflare
cf-ray: 8d5b1a0bfb5d5699-OSL
alt-svc: h3=":443"; ma=86400
GET cdn.mgid.com/images/logos/Adchoices.svg
200 OK 1.0 kB URL GET HTTP/3 cdn.mgid.com/images/logos/Adchoices.svg
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File type SVG Scalable Vector Graphics image
Hash 7d59364b7ed2df3f02507c9f92560df9
d2a98d9a83d13d1c22d1dabeff5d90c93482301b
7992a4430843ef8b4bbae534358be3193aa1ae9c78f273e8e8a70b6af1244ac5
GET /images/logos/Adchoices.svg HTTP/1.1
Host: cdn.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 20 Oct 2024 18:34:24 GMT
content-type: image/svg+xml
x-amz-id-2: 0VQm8j1QchC5HxnE2fp3YE9wDfcijmkjCeR0wychNZaD175bgz3h1iP50Pg+0tkD9JqRHiKNu2tPxsJ8Haf0cQ==
x-amz-request-id: 5T6GEBMGN2CQFDK7
last-modified: Wed, 17 Feb 2021 18:15:53 GMT
etag: W/"7d59364b7ed2df3f02507c9f92560df9"
x-amz-meta-s3cmd-attrs: atime:1613585745/ctime:1613585745/gid:0/gname:root/md5:7d59364b7ed2df3f02507c9f92560df9/mode:33206/mtime:1613585745/uid:0/uname:root
x-amz-version-id: null
cf-cache-status: HIT
age: 1672
expires: Mon, 21 Oct 2024 18:34:24 GMT
cache-control: public, max-age=86400
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
access-control-allow-origin: *
server: cloudflare
cf-ray: 8d5b1a0c5bf65699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET int.celebnewsuggestions.com/plugin/js/bidder.js?boost=1727703209
200 OK 16 kB URL GET HTTP/2 int.celebnewsuggestions.com/plugin/js/bidder.js?boost=1727703209
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerLet's Encrypt
Subject*.celebnewsuggestions.com
FingerprintAE:04:5A:95:B3:9C:0B:C4:73:5E:5C:52:71:18:72:5F:30:51:68:7E
ValidityTue, 08 Oct 2024 07:37:04 GMT - Mon, 06 Jan 2025 07:37:03 GMT
File type gzip compressed data, max compression, from Unix
Hash dab543c7dcf13ddb452a52eb8f31db6f
4717e6e46a03fcd8ffc50c2597b417ef9e19075e
f2f4845679c8fddae728a72b2d62fe27f3d37a5187a3b5b5a38c759dd863daac
GET /plugin/js/bidder.js?boost=1727703209 HTTP/1.1
Host: int.celebnewsuggestions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Cookie: pc=data_1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 20 Oct 2024 18:34:23 GMT
content-type: application/javascript
last-modified: Mon, 30 Sep 2024 13:30:12 GMT
vary: Accept-Encoding
etag: W/"66faa7e4-47c6"
expires: Tue, 19 Nov 2024 18:34:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
content-encoding: gzip
X-Firefox-Spdy: h2
GET cm.mgid.com/i.js?cbuster=1729449265184234514792
200 OK 0 B URL GET HTTP/3 cm.mgid.com/i.js?cbuster=1729449265184234514792
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i.js?cbuster=1729449265184234514792 HTTP/1.1
Host: cm.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 20 Oct 2024 18:34:25 GMT
content-type: application/javascript
content-length: 0
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
x-robots-tag: noindex
server: cloudflare
cf-ray: 8d5b1a139f975699-OSL
alt-svc: h3=":443"; ma=86400
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
200 OK 3.4 kB URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
File type gzip compressed data, max speed, from Unix
Hash a1f22670165a3cfe3c06072ebb85eea7
c9980b250c2fa3b3217ad78f2002ae6a3fcdacd9
aef30478222d54af7b80919c65cbcbf20cb233e4b076b524635be84938c41d90
GET /offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:30 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1
200 OK 1.8 kB URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
File type New Line Delimited JSON text data
Hash 9cab71fcef29bbcf28b5d89fc8090287
258337dfd4bb02919f11bd77a995e2a909e8627f
9ff21b332c23829c14ba5b18352ffdc45981bfa5e11be6dc1ab6a0eaf99b8594
GET /offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1 HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:30 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1
200 OK 8.4 kB URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
File type gzip compressed data, max speed, from Unix
Hash e6b5c6e0247fa066484fefe0bc511696
9bc7e3807abfc36890a2c86f3853bb98c704df58
bcb1b7403e0f7cc30ca5586295c8b05ce1ee9e5085882591ab4b8169eba00ab1
GET /offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1 HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:33 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
200 OK 8.7 kB URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
File type gzip compressed data, max speed, from Unix
Hash e486c2f61fa8c5d376277d4991505a4f
dc8d8e04ec92509bd837711504c26fe4dc1acaf3
a97f4d24526be4c004419634dd260fbcc6ee5c8af7331ba4a3c388829980689a
GET /offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:35 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET crtv.wboptim.online/icon?url=https%3A%2F%2Fc.adskeeper.co.uk%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UfVQ8yfW_YOQsv0JmUNGgKG1JsBd6fqzHYKNKj0pfIj1rfk7oeaZwwoo0_7J_qv1givFccWv_m-wDBjHCELs0p0*%26cid%3D721394%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR%26rid%3Df6a20f5b-8f11-11ef-97a8-c84bd68370c0%26psid%3Dbid_20491%26iub%3DaHR0cHM6Ly9zLWltZy5hZHNrZWVwZXIuY28udWsvZy8xNDkzNjg2OC8zMjh4MzI4Ly0vYUhSMGNEb3ZMMk5zTG1sdFoyaHZjM1J6TG1OdmJTOXBiV2RvTDJsdFlXZGxMMlpsZEdOb0wyRnlYekU2TVN4algyWnBiR3dzWlY5emFHRnljR1Z1T2pFd01DeG1YMnB3Wnl4blgyWmhZMlZ6T21GMWRHOHNjVjloZFhSdk9tZHZiMlFzZDE4NU5qQXZhSFIwY0RvdkwybHRaMmh2YzNSekxtTnZiUzkwTHpJd01qSXRNVEV2TVRBeE9USTBMekF6WTJKbU5qazROamRtT1dObVkyRTNPVFV3WkRjM09HVmpZemszTkdZNExtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtX00zYmVoekJPbkpjRjN3UnVWMkxoLWxUSXNFUXFUQzlQQ0NsVGo0R3RQYw%3D%3D&s=1060&a=bid_onw_20117&uA=bid_20491&sub=undefined&d=13&ic=1
302 Found 0 B URL GET HTTP/2 crtv.wboptim.online/icon?url=https%3A%2F%2Fc.adskeeper.co.uk%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UfVQ8yfW_YOQsv0JmUNGgKG1JsBd6fqzHYKNKj0pfIj1rfk7oeaZwwoo0_7J_qv1givFccWv_m-wDBjHCELs0p0*%26cid%3D721394%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR%26rid%3Df6a20f5b-8f11-11ef-97a8-c84bd68370c0%26psid%3Dbid_20491%26iub%3DaHR0cHM6Ly9zLWltZy5hZHNrZWVwZXIuY28udWsvZy8xNDkzNjg2OC8zMjh4MzI4Ly0vYUhSMGNEb3ZMMk5zTG1sdFoyaHZjM1J6TG1OdmJTOXBiV2RvTDJsdFlXZGxMMlpsZEdOb0wyRnlYekU2TVN4algyWnBiR3dzWlY5emFHRnljR1Z1T2pFd01DeG1YMnB3Wnl4blgyWmhZMlZ6T21GMWRHOHNjVjloZFhSdk9tZHZiMlFzZDE4NU5qQXZhSFIwY0RvdkwybHRaMmh2YzNSekxtTnZiUzkwTHpJd01qSXRNVEV2TVRBeE9USTBMekF6WTJKbU5qazROamRtT1dObVkyRTNPVFV3WkRjM09HVmpZemszTkdZNExtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtX00zYmVoekJPbkpjRjN3UnVWMkxoLWxUSXNFUXFUQzlQQ0NsVGo0R3RQYw%3D%3D&s=1060&a=bid_onw_20117&uA=bid_20491&sub=undefined&d=13&ic=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wboptim.online
Fingerprint0C:88:E3:CF:73:DF:B9:00:53:AF:65:15:3D:7B:58:E8:73:18:52:67
ValidityMon, 19 Aug 2024 09:46:32 GMT - Sat, 20 Sep 2025 09:46:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /icon?url=https%3A%2F%2Fc.adskeeper.co.uk%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UfVQ8yfW_YOQsv0JmUNGgKG1JsBd6fqzHYKNKj0pfIj1rfk7oeaZwwoo0_7J_qv1givFccWv_m-wDBjHCELs0p0*%26cid%3D721394%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR%26rid%3Df6a20f5b-8f11-11ef-97a8-c84bd68370c0%26psid%3Dbid_20491%26iub%3DaHR0cHM6Ly9zLWltZy5hZHNrZWVwZXIuY28udWsvZy8xNDkzNjg2OC8zMjh4MzI4Ly0vYUhSMGNEb3ZMMk5zTG1sdFoyaHZjM1J6TG1OdmJTOXBiV2RvTDJsdFlXZGxMMlpsZEdOb0wyRnlYekU2TVN4algyWnBiR3dzWlY5emFHRnljR1Z1T2pFd01DeG1YMnB3Wnl4blgyWmhZMlZ6T21GMWRHOHNjVjloZFhSdk9tZHZiMlFzZDE4NU5qQXZhSFIwY0RvdkwybHRaMmh2YzNSekxtTnZiUzkwTHpJd01qSXRNVEV2TVRBeE9USTBMekF6WTJKbU5qazROamRtT1dObVkyRTNPVFV3WkRjM09HVmpZemszTkdZNExtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtX00zYmVoekJPbkpjRjN3UnVWMkxoLWxUSXNFUXFUQzlQQ0NsVGo0R3RQYw%3D%3D&s=1060&a=bid_onw_20117&uA=bid_20491&sub=undefined&d=13&ic=1 HTTP/1.1
Host: crtv.wboptim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
vary: Origin
access-control-allow-origin: *
location: https://c.adskeeper.co.uk/c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UfVQ8yfW_YOQsv0JmUNGgKG1JsBd6fqzHYKNKj0pfIj1rfk7oeaZwwoo0_7J_qv1givFccWv_m-wDBjHCELs0p0*&cid=721394&f=1&h2=bjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR&rid=f6a20f5b-8f11-11ef-97a8-c84bd68370c0&psid=bid_20491&iub=aHR0cHM6Ly9zLWltZy5hZHNrZWVwZXIuY28udWsvZy8xNDkzNjg2OC8zMjh4MzI4Ly0vYUhSMGNEb3ZMMk5zTG1sdFoyaHZjM1J6TG1OdmJTOXBiV2RvTDJsdFlXZGxMMlpsZEdOb0wyRnlYekU2TVN4algyWnBiR3dzWlY5emFHRnljR1Z1T2pFd01DeG1YMnB3Wnl4blgyWmhZMlZ6T21GMWRHOHNjVjloZFhSdk9tZHZiMlFzZDE4NU5qQXZhSFIwY0RvdkwybHRaMmh2YzNSekxtTnZiUzkwTHpJd01qSXRNVEV2TVRBeE9USTBMekF6WTJKbU5qazROamRtT1dObVkyRTNPVFV3WkRjM09HVmpZemszTkdZNExtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtX00zYmVoekJPbkpjRjN3UnVWMkxoLWxUSXNFUXFUQzlQQ0NsVGo0R3RQYw==
content-length: 0
date: Sun, 20 Oct 2024 18:34:39 GMT
X-Firefox-Spdy: h2
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&cbjs=1
200 OK 1.6 kB URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&cbjs=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
File type New Line Delimited JSON text data
Hash 0be8f1ddfdfa4976aee9182a2801032e
4d2576c2d7f1a1ac2d191ee78ead7f109df64589
ede493c1f89db8016afe7937f5b77bf15ac2c8bda558bb358bc1d8eb296edf41
GET /offer/client?affid=onw_20117&subid=undefined&days=8&cbjs=1 HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:24 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1
200 OK 5.4 kB URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
File type New Line Delimited JSON text data
Hash abc43cc26c22883a1fe0fcd61be97661
356cbe05b48d3c3cbc88347d87ab830e0df6a7af
efd3ca57fad7adc12bbd9fab87e8f62de64d0fce4491def3629bb251570be8e2
GET /offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1 HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:35 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
200 OK 22 B URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:32 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
200 OK 22 B URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:29 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET c.mgid.com/c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UbPrs_yLiqbKnba06G28Qvkf0r3YttPVRlxKIavRjaUxrfk7oeaZwwoo0_7J_qv1giUF129PxO6wrd0i10Phx6I*&cid=1674174&f=1&h2=bjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR&rid=f6a238c2-8f11-11ef-97a8-c84bd68370c0&psid=bid_20117&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzgxOTM1MzQvMzI4eDMyOC8xMjR4MTIxeDUyNHg1MjQvYUhSMGNEb3ZMMmx0WjJodmMzUnpMbU52YlM5MFpXMXdMekl3TVRndE1EY3RNRFF2TVRBeE9USTBMMlE1WlRoa05qZGhNMkk0TW1NeU1tSTRaamMzWlRnNU1EY3pNV1F3T1RabUxtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtOTRnOGQ1YXlSQno3SVE0UU1XU1M1b3dGZFJvSHprSmNPRmN1S2dqdWlTTQ==
301 Moved Permanently 0 B URL GET HTTP/3 c.mgid.com/c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UbPrs_yLiqbKnba06G28Qvkf0r3YttPVRlxKIavRjaUxrfk7oeaZwwoo0_7J_qv1giUF129PxO6wrd0i10Phx6I*&cid=1674174&f=1&h2=bjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR&rid=f6a238c2-8f11-11ef-97a8-c84bd68370c0&psid=bid_20117&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzgxOTM1MzQvMzI4eDMyOC8xMjR4MTIxeDUyNHg1MjQvYUhSMGNEb3ZMMmx0WjJodmMzUnpMbU52YlM5MFpXMXdMekl3TVRndE1EY3RNRFF2TVRBeE9USTBMMlE1WlRoa05qZGhNMkk0TW1NeU1tSTRaamMzWlRnNU1EY3pNV1F3T1RabUxtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtOTRnOGQ1YXlSQno3SVE0UU1XU1M1b3dGZFJvSHprSmNPRmN1S2dqdWlTTQ==
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UbPrs_yLiqbKnba06G28Qvkf0r3YttPVRlxKIavRjaUxrfk7oeaZwwoo0_7J_qv1giUF129PxO6wrd0i10Phx6I*&cid=1674174&f=1&h2=bjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR&rid=f6a238c2-8f11-11ef-97a8-c84bd68370c0&psid=bid_20117&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzgxOTM1MzQvMzI4eDMyOC8xMjR4MTIxeDUyNHg1MjQvYUhSMGNEb3ZMMmx0WjJodmMzUnpMbU52YlM5MFpXMXdMekl3TVRndE1EY3RNRFF2TVRBeE9USTBMMlE1WlRoa05qZGhNMkk0TW1NeU1tSTRaamMzWlRnNU1EY3pNV1F3T1RabUxtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtOTRnOGQ1YXlSQno3SVE0UU1XU1M1b3dGZFJvSHprSmNPRmN1S2dqdWlTTQ== HTTP/1.1
Host: c.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Sun, 20 Oct 2024 18:34:39 GMT
content-length: 0
location: https://s-img.mgid.com/g/8193534/328x328/124x121x524x524/aHR0cDovL2ltZ2hvc3RzLmNvbS90ZW1wLzIwMTgtMDctMDQvMTAxOTI0L2Q5ZThkNjdhM2I4MmMyMmI4Zjc3ZTg5MDczMWQwOTZmLmpwZWc.webp?v=1729449278-94g8d5ayRBz7IQ4QMWSS5owFdRoHzkJcOFcuKgjuiSM
x-mg-request-uuid: 21447857-f3dd-4912-8eae-6cb5fe368bc8
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
x-robots-tag: noindex
server: cloudflare
cf-ray: 8d5b1a6a5e4b5699-OSL
alt-svc: h3=":443"; ma=86400
GET c.mgid.com/c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UbasTN_wSlTjk3NlQKXZAoeazg5HdcHRg5TT3TvoaRxMrfk7oeaZwwoo0_7J_qv1ggdQdkwL9AwN9-5QBxJ0YDI*&cid=1674169&f=1&h2=bjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8&rid=f6a1fca8-8f11-11ef-855a-c84bd68370b4&psid=bid_20371&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE2MjYxNzMyLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDNoNVgyTmxiblJsY2l4eFgyRjFkRzg2WjI5dlpDeDNYemsyTUN4NFh6UTBPQ3g1WHpJd05DOW9kSFJ3T2k4dmFXMW5hRzl6ZEhNdVkyOXRMM1F2TWpBeU15MHdOUzh4TURFNU1qUXZOR1k0TnpVM1ptRTNNemRpTWpnMk1UZzNOekpsWlRCaE1HSTNZVE5oTURZdWFuQmxady53ZWJwP3Y9MTcyOTQ0OTI3OC0xSXNIbXNuUVlNc0VOTy1QVWxOYnF1NkU3aENnc2tzYnNUOE1fWHNqOGU4
301 Moved Permanently 0 B URL GET HTTP/3 c.mgid.com/c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UbasTN_wSlTjk3NlQKXZAoeazg5HdcHRg5TT3TvoaRxMrfk7oeaZwwoo0_7J_qv1ggdQdkwL9AwN9-5QBxJ0YDI*&cid=1674169&f=1&h2=bjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8&rid=f6a1fca8-8f11-11ef-855a-c84bd68370b4&psid=bid_20371&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE2MjYxNzMyLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDNoNVgyTmxiblJsY2l4eFgyRjFkRzg2WjI5dlpDeDNYemsyTUN4NFh6UTBPQ3g1WHpJd05DOW9kSFJ3T2k4dmFXMW5hRzl6ZEhNdVkyOXRMM1F2TWpBeU15MHdOUzh4TURFNU1qUXZOR1k0TnpVM1ptRTNNemRpTWpnMk1UZzNOekpsWlRCaE1HSTNZVE5oTURZdWFuQmxady53ZWJwP3Y9MTcyOTQ0OTI3OC0xSXNIbXNuUVlNc0VOTy1QVWxOYnF1NkU3aENnc2tzYnNUOE1fWHNqOGU4
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UbasTN_wSlTjk3NlQKXZAoeazg5HdcHRg5TT3TvoaRxMrfk7oeaZwwoo0_7J_qv1ggdQdkwL9AwN9-5QBxJ0YDI*&cid=1674169&f=1&h2=bjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8&rid=f6a1fca8-8f11-11ef-855a-c84bd68370b4&psid=bid_20371&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE2MjYxNzMyLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDNoNVgyTmxiblJsY2l4eFgyRjFkRzg2WjI5dlpDeDNYemsyTUN4NFh6UTBPQ3g1WHpJd05DOW9kSFJ3T2k4dmFXMW5hRzl6ZEhNdVkyOXRMM1F2TWpBeU15MHdOUzh4TURFNU1qUXZOR1k0TnpVM1ptRTNNemRpTWpnMk1UZzNOekpsWlRCaE1HSTNZVE5oTURZdWFuQmxady53ZWJwP3Y9MTcyOTQ0OTI3OC0xSXNIbXNuUVlNc0VOTy1QVWxOYnF1NkU3aENnc2tzYnNUOE1fWHNqOGU4 HTTP/1.1
Host: c.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Sun, 20 Oct 2024 18:34:39 GMT
content-length: 0
location: https://s-img.mgid.com/g/16261732/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3Xzk2MCx4XzQ0OCx5XzIwNC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMy0wNS8xMDE5MjQvNGY4NzU3ZmE3MzdiMjg2MTg3NzJlZTBhMGI3YTNhMDYuanBlZw.webp?v=1729449278-1IsHmsnQYMsENO-PUlNbqu6E7hCgsksbsT8M_Xsj8e8
x-mg-request-uuid: 0b6bd265-a63c-4a99-a109-3f633fbb02a6
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
x-robots-tag: noindex
server: cloudflare
cf-ray: 8d5b1a6a5e575699-OSL
alt-svc: h3=":443"; ma=86400
GET a.1td.eu/in?sid=7&data=Sk3Rh1vqDQfSgMrq%2Bs4gynXR%2Fawjm6WII55qgRQN5JpDlttLbAv6zDYOIV9wgvFyZwpWoAfZwZCmYEBT3%2Fu%2FxdaZUaIneaiDo9cdhvZreeNF%2BNpCKS5JbNleGCRRKSTLggrd3iW5lS8mx6Aey1YiZnP%2B9nG7bvvBop%2BQAoZ1HU8FMe3ZpOl2xJLubhHOMNS0w%2FhxUdywPaXdXTQWOPhAlfHn%2FJX%2BzA5JPiCtaLqSxhVLJhq5uVx%2F2SesDQLS0I06JSGR4Or1NU5Ak9ow02dhsm9gnpIL%2FHMioVaIkAukBX%2FXCFOwWduqgDDXbThwsonoAiYxCVeNos%2FZU8sVEhb0%2BuRhaQNowchcITomgmLf8udK1Rt%2B2qJZmGXAPEervFCpGhEIbb8GemRh3FSywCAZ6T%2FvNyh7DnMDEtpvnOnl5EPGNpmJzmYhIrbjecNUFDvN
302 Found 0 B URL GET HTTP/1.1 a.1td.eu/in?sid=7&data=Sk3Rh1vqDQfSgMrq%2Bs4gynXR%2Fawjm6WII55qgRQN5JpDlttLbAv6zDYOIV9wgvFyZwpWoAfZwZCmYEBT3%2Fu%2FxdaZUaIneaiDo9cdhvZreeNF%2BNpCKS5JbNleGCRRKSTLggrd3iW5lS8mx6Aey1YiZnP%2B9nG7bvvBop%2BQAoZ1HU8FMe3ZpOl2xJLubhHOMNS0w%2FhxUdywPaXdXTQWOPhAlfHn%2FJX%2BzA5JPiCtaLqSxhVLJhq5uVx%2F2SesDQLS0I06JSGR4Or1NU5Ak9ow02dhsm9gnpIL%2FHMioVaIkAukBX%2FXCFOwWduqgDDXbThwsonoAiYxCVeNos%2FZU8sVEhb0%2BuRhaQNowchcITomgmLf8udK1Rt%2B2qJZmGXAPEervFCpGhEIbb8GemRh3FSywCAZ6T%2FvNyh7DnMDEtpvnOnl5EPGNpmJzmYhIrbjecNUFDvN
IP
ASN #24940 Hetzner Online GmbH
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerLet's Encrypt
Subject*.1td.eu
Fingerprint3D:CF:D7:BC:0F:49:3D:39:7F:16:FE:DE:5C:11:DB:08:C6:35:18:C7
ValidityThu, 10 Oct 2024 06:15:57 GMT - Wed, 08 Jan 2025 06:15:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in?sid=7&data=Sk3Rh1vqDQfSgMrq%2Bs4gynXR%2Fawjm6WII55qgRQN5JpDlttLbAv6zDYOIV9wgvFyZwpWoAfZwZCmYEBT3%2Fu%2FxdaZUaIneaiDo9cdhvZreeNF%2BNpCKS5JbNleGCRRKSTLggrd3iW5lS8mx6Aey1YiZnP%2B9nG7bvvBop%2BQAoZ1HU8FMe3ZpOl2xJLubhHOMNS0w%2FhxUdywPaXdXTQWOPhAlfHn%2FJX%2BzA5JPiCtaLqSxhVLJhq5uVx%2F2SesDQLS0I06JSGR4Or1NU5Ak9ow02dhsm9gnpIL%2FHMioVaIkAukBX%2FXCFOwWduqgDDXbThwsonoAiYxCVeNos%2FZU8sVEhb0%2BuRhaQNowchcITomgmLf8udK1Rt%2B2qJZmGXAPEervFCpGhEIbb8GemRh3FSywCAZ6T%2FvNyh7DnMDEtpvnOnl5EPGNpmJzmYhIrbjecNUFDvN HTTP/1.1
Host: a.1td.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 20 Oct 2024 18:34:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Referrer-Policy: no-referrer
Location: https://pxrnbabes.com/?data=y6amjmUJvfiYfNY4SUGAyOzi4RVJSn5se4ztyheYur8Izk3LB7TIukoCZRRCbSn%2Fkxmo%2FkLbM5WUX6LdMxXMeqenGDrVTmCj3gmC9ROBIvvhBVKXRjMv%2BD5H6EskIlGj4nnngljgFs6l0%2B%2FB%2B%2BiPaFtxD6sopo4EYQQFkiS%2Fv4stQfVJB5t8YLALPMAeM6jJwWIjkRoPeM%2FUE3Dzy3sCYTRMZAOc%2B%2F4qEY6AS7mencFrKM1%2F61hYf9Sl%2BG10Oh28u3GlSthMmW9nu4IdZ5lMmw8nPjGgjdjLWmFnCxCVof8%3D
Access-Control-Allow-Origin: http://admin.local
Access-Control-Allow-Credentials: true
GET s-img.mgid.com/g/8193534/328x328/124x121x524x524/aHR0cDovL2ltZ2hvc3RzLmNvbS90ZW1wLzIwMTgtMDctMDQvMTAxOTI0L2Q5ZThkNjdhM2I4MmMyMmI4Zjc3ZTg5MDczMWQwOTZmLmpwZWc.webp?v=1729449278-94g8d5ayRBz7IQ4QMWSS5owFdRoHzkJcOFcuKgjuiSM
200 OK 10 kB URL GET HTTP/3 s-img.mgid.com/g/8193534/328x328/124x121x524x524/aHR0cDovL2ltZ2hvc3RzLmNvbS90ZW1wLzIwMTgtMDctMDQvMTAxOTI0L2Q5ZThkNjdhM2I4MmMyMmI4Zjc3ZTg5MDczMWQwOTZmLmpwZWc.webp?v=1729449278-94g8d5ayRBz7IQ4QMWSS5owFdRoHzkJcOFcuKgjuiSM
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 328x328, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 2e42738e1d5afee20c7680e49eff248f
38eeb3cbdcaaaf617d7828cb365342138c7eb08c
b5c7c661f4153dc1cc26c949a514025adb7ec86b60f049a7799d58793cf77207
GET /g/8193534/328x328/124x121x524x524/aHR0cDovL2ltZ2hvc3RzLmNvbS90ZW1wLzIwMTgtMDctMDQvMTAxOTI0L2Q5ZThkNjdhM2I4MmMyMmI4Zjc3ZTg5MDczMWQwOTZmLmpwZWc.webp?v=1729449278-94g8d5ayRBz7IQ4QMWSS5owFdRoHzkJcOFcuKgjuiSM HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 20 Oct 2024 18:34:39 GMT
content-type: image/webp
content-length: 10272
x-mg-request-uuid: eb56bd96-e7c5-412f-b631-33fe9f4ce54b
access-control-allow-origin: *
last-modified: Wed, 10 Aug 2022 18:58:31 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 1493512
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
server: cloudflare
cf-ray: 8d5b1a6aff4b5699-OSL
alt-svc: h3=":443"; ma=86400
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1
200 OK 21 kB URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
File type gzip compressed data, max speed, from Unix
Hash 95818b8920d60f2279a443abb53545f3
26aaab8fb40d82a3c068b05d21fb759e10b6a6c6
1ba0a008552dfdebbca74ba7f3bfb309368dc65cd91d1608e0b40783822e4f7f
GET /offer/client?affid=onw_20117&subid=undefined&days=8&count=3&adult=undefined&cbjs=1 HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:27 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET pxrnbabes.com/?data=y6amjmUJvfiYfNY4SUGAyOzi4RVJSn5se4ztyheYur8Izk3LB7TIukoCZRRCbSn%2Fkxmo%2FkLbM5WUX6LdMxXMeqenGDrVTmCj3gmC9ROBIvvhBVKXRjMv%2BD5H6EskIlGj4nnngljgFs6l0%2B%2FB%2B%2BiPaFtxD6sopo4EYQQFkiS%2Fv4stQfVJB5t8YLALPMAeM6jJwWIjkRoPeM%2FUE3Dzy3sCYTRMZAOc%2B%2F4qEY6AS7mencFrKM1%2F61hYf9Sl%2BG10Oh28u3GlSthMmW9nu4IdZ5lMmw8nPjGgjdjLWmFnCxCVof8%3D
302 Found 0 B URL GET HTTP/2 pxrnbabes.com/?data=y6amjmUJvfiYfNY4SUGAyOzi4RVJSn5se4ztyheYur8Izk3LB7TIukoCZRRCbSn%2Fkxmo%2FkLbM5WUX6LdMxXMeqenGDrVTmCj3gmC9ROBIvvhBVKXRjMv%2BD5H6EskIlGj4nnngljgFs6l0%2B%2FB%2B%2BiPaFtxD6sopo4EYQQFkiS%2Fv4stQfVJB5t8YLALPMAeM6jJwWIjkRoPeM%2FUE3Dzy3sCYTRMZAOc%2B%2F4qEY6AS7mencFrKM1%2F61hYf9Sl%2BG10Oh28u3GlSthMmW9nu4IdZ5lMmw8nPjGgjdjLWmFnCxCVof8%3D
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerLet's Encrypt
Subjectpxrnbabes.com
Fingerprint7B:64:72:62:AC:8F:A1:5D:FB:92:17:F2:1E:EA:BA:2B:38:34:B2:E8
ValidityWed, 18 Sep 2024 14:24:59 GMT - Tue, 17 Dec 2024 14:24:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?data=y6amjmUJvfiYfNY4SUGAyOzi4RVJSn5se4ztyheYur8Izk3LB7TIukoCZRRCbSn%2Fkxmo%2FkLbM5WUX6LdMxXMeqenGDrVTmCj3gmC9ROBIvvhBVKXRjMv%2BD5H6EskIlGj4nnngljgFs6l0%2B%2FB%2B%2BiPaFtxD6sopo4EYQQFkiS%2Fv4stQfVJB5t8YLALPMAeM6jJwWIjkRoPeM%2FUE3Dzy3sCYTRMZAOc%2B%2F4qEY6AS7mencFrKM1%2F61hYf9Sl%2BG10Oh28u3GlSthMmW9nu4IdZ5lMmw8nPjGgjdjLWmFnCxCVof8%3D HTTP/1.1
Host: pxrnbabes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sun, 20 Oct 2024 18:34:39 GMT
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
location: https://eu.boxif.xyz/nty/metrics/save.img?event=impressions&bid-id=v2-1729449278683-7-13808-1387304-aaaae5d3-0838-0c68-1b6a-56824157b453&img=https%3A%2F%2Fcdn.amnew.net%2Ffiles%2F670cf1ec599b1_2024_10_14_10_26_52_image.webp
X-Firefox-Spdy: h2
GET cdn.amnew.net/files/670cf1ec599b1_2024_10_14_10_26_52_image.webp
200 OK 1.4 kB URL GET HTTP/2 cdn.amnew.net/files/670cf1ec599b1_2024_10_14_10_26_52_image.webp
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerLet's Encrypt
Subject*.amnew.net
FingerprintEC:2C:91:13:48:B1:B1:FB:73:70:D3:36:24:24:58:0A:80:F8:A3:D6
ValidityMon, 02 Sep 2024 23:05:07 GMT - Sun, 01 Dec 2024 23:05:06 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp
Hash a7c85596ba929588ed57bec2235e1800
bae67ded6be70414d35e8528a788271e75e5bf07
455199342a2a9c66a001a1e742f9a8ffab63efc89c3810b4012e73e2ec7b12d4
GET /files/670cf1ec599b1_2024_10_14_10_26_52_image.webp HTTP/1.1
Host: cdn.amnew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 1424
last-modified: Mon, 14 Oct 2024 10:26:53 GMT
etag: "a7c85596ba929588ed57bec2235e1800"
accept-ranges: bytes
X-Firefox-Spdy: h2
GET crtv.wboptim.online/icon?url=https%3A%2F%2Fads16.adtelligent.com%2Ftracking%2Ficon%3Fadid%3DT1729449284U10FF4A33CF935CE2_432807_610019&s=2083&a=bid_onw_20117&uA=a_51700&sub=undefined&d=38&ic=1
302 Found 0 B URL GET HTTP/2 crtv.wboptim.online/icon?url=https%3A%2F%2Fads16.adtelligent.com%2Ftracking%2Ficon%3Fadid%3DT1729449284U10FF4A33CF935CE2_432807_610019&s=2083&a=bid_onw_20117&uA=a_51700&sub=undefined&d=38&ic=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wboptim.online
Fingerprint0C:88:E3:CF:73:DF:B9:00:53:AF:65:15:3D:7B:58:E8:73:18:52:67
ValidityMon, 19 Aug 2024 09:46:32 GMT - Sat, 20 Sep 2025 09:46:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /icon?url=https%3A%2F%2Fads16.adtelligent.com%2Ftracking%2Ficon%3Fadid%3DT1729449284U10FF4A33CF935CE2_432807_610019&s=2083&a=bid_onw_20117&uA=a_51700&sub=undefined&d=38&ic=1 HTTP/1.1
Host: crtv.wboptim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
vary: Origin
access-control-allow-origin: *
location: https://ads16.adtelligent.com/tracking/icon?adid=T1729449284U10FF4A33CF935CE2_432807_610019
content-length: 0
date: Sun, 20 Oct 2024 18:34:44 GMT
X-Firefox-Spdy: h2
GET ads16.adtelligent.com/tracking/icon?adid=T1729449284U10FF4A33CF935CE2_432807_610019
302 Found 0 B URL GET HTTP/1.1 ads16.adtelligent.com/tracking/icon?adid=T1729449284U10FF4A33CF935CE2_432807_610019
IP
ASN #24940 Hetzner Online GmbH
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerZeroSSL
Subjectads16.adtelligent.com
Fingerprint27:B0:5E:3A:F9:1B:1F:D6:23:DD:45:85:9E:B8:D5:36:DC:94:EC:EE
ValidityFri, 04 Oct 2024 00:00:00 GMT - Thu, 02 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tracking/icon?adid=T1729449284U10FF4A33CF935CE2_432807_610019 HTTP/1.1
Host: ads16.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: Adtelligent
Date: Sun, 20 Oct 2024 18:34:44 GMT
Content-Length: 0
Location: https://c.mgid.com/c?pv=2&v=0|0|0|MpSdR2CJ0ttxY29Z5sBBQsqiE1DDfSxUbOZcuhe3RkmwKELwwKf48YDKP89huqQdrfk7oeaZwwoo0_7J_qv1giJxm2zV6JpwRpX3lghmgcU*&cid=833487&f=1&h2=bjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8&rid=fa360ba7-8f11-11ef-855a-c84bd68370b4&psid=610019_a_51700&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzEzNDA0NzgzLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjRG92TDJsdFoyaHZjM1J6TG1OdmJTOTBMekl3TWpJdE1EWXZNVEF4T1RJMEwyRTVZbVV4WWpoaVpqTmpZVFJqT1dGbU5UazJZV0V5WldSaFlXRmpPRFZoTG1wd1pXYy53ZWJwP3Y9MTcyOTQ0OTI4NC1YUWd2MktwOEx3NFZVcU5ZN2hWbGVoTk5tb3loSzVSNjdVWEdUTDBIOTFr
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
Permissions-Policy: browsing-topics=()
X-Tte: 135
X-Server-Ip: 142.132.249.190
X-Server-Name: ads16
X-Robots-Tag: noindex
Set-Cookie: vmuid=a3b76ddf982c733e; expires=Tue, 21 Jan 2025 18:34:45 GMT; domain=.adtelligent.com; path=/; secure; SameSite=None
GET c.mgid.com/c?pv=2&v=0|0|0|MpSdR2CJ0ttxY29Z5sBBQsqiE1DDfSxUbOZcuhe3RkmwKELwwKf48YDKP89huqQdrfk7oeaZwwoo0_7J_qv1giJxm2zV6JpwRpX3lghmgcU*&cid=833487&f=1&h2=bjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8&rid=fa360ba7-8f11-11ef-855a-c84bd68370b4&psid=610019_a_51700&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzEzNDA0NzgzLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjRG92TDJsdFoyaHZjM1J6TG1OdmJTOTBMekl3TWpJdE1EWXZNVEF4T1RJMEwyRTVZbVV4WWpoaVpqTmpZVFJqT1dGbU5UazJZV0V5WldSaFlXRmpPRFZoTG1wd1pXYy53ZWJwP3Y9MTcyOTQ0OTI4NC1YUWd2MktwOEx3NFZVcU5ZN2hWbGVoTk5tb3loSzVSNjdVWEdUTDBIOTFr
301 Moved Permanently 0 B URL GET HTTP/3 c.mgid.com/c?pv=2&v=0|0|0|MpSdR2CJ0ttxY29Z5sBBQsqiE1DDfSxUbOZcuhe3RkmwKELwwKf48YDKP89huqQdrfk7oeaZwwoo0_7J_qv1giJxm2zV6JpwRpX3lghmgcU*&cid=833487&f=1&h2=bjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8&rid=fa360ba7-8f11-11ef-855a-c84bd68370b4&psid=610019_a_51700&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzEzNDA0NzgzLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjRG92TDJsdFoyaHZjM1J6TG1OdmJTOTBMekl3TWpJdE1EWXZNVEF4T1RJMEwyRTVZbVV4WWpoaVpqTmpZVFJqT1dGbU5UazJZV0V5WldSaFlXRmpPRFZoTG1wd1pXYy53ZWJwP3Y9MTcyOTQ0OTI4NC1YUWd2MktwOEx3NFZVcU5ZN2hWbGVoTk5tb3loSzVSNjdVWEdUTDBIOTFr
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c?pv=2&v=0|0|0|MpSdR2CJ0ttxY29Z5sBBQsqiE1DDfSxUbOZcuhe3RkmwKELwwKf48YDKP89huqQdrfk7oeaZwwoo0_7J_qv1giJxm2zV6JpwRpX3lghmgcU*&cid=833487&f=1&h2=bjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8&rid=fa360ba7-8f11-11ef-855a-c84bd68370b4&psid=610019_a_51700&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzEzNDA0NzgzLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDJaaFkyVnpPbUYxZEc4c2NWOWhkWFJ2T21kdmIyUXNkMTg1TmpBdmFIUjBjRG92TDJsdFoyaHZjM1J6TG1OdmJTOTBMekl3TWpJdE1EWXZNVEF4T1RJMEwyRTVZbVV4WWpoaVpqTmpZVFJqT1dGbU5UazJZV0V5WldSaFlXRmpPRFZoTG1wd1pXYy53ZWJwP3Y9MTcyOTQ0OTI4NC1YUWd2MktwOEx3NFZVcU5ZN2hWbGVoTk5tb3loSzVSNjdVWEdUTDBIOTFr HTTP/1.1
Host: c.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Sun, 20 Oct 2024 18:34:45 GMT
content-length: 0
location: https://s-img.mgid.com/g/13404783/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDYvMTAxOTI0L2E5YmUxYjhiZjNjYTRjOWFmNTk2YWEyZWRhYWFjODVhLmpwZWc.webp?v=1729449284-XQgv2Kp8Lw4VUqNY7hVlehNNmoyhK5R67UXGTL0H91k
x-mg-request-uuid: b39c99fe-d10e-4863-9a16-33e8d64ad045
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
x-robots-tag: noindex
server: cloudflare
cf-ray: 8d5b1a900b715699-OSL
alt-svc: h3=":443"; ma=86400
GET wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
200 OK 13 kB URL GET HTTP/2 wbidder323052024.com/offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wbidder323052024.com
Fingerprint50:7F:39:0B:28:16:54:7B:81:89:33:16:1C:D2:03:06:2B:0E:5E:C9
ValidityThu, 23 May 2024 14:39:11 GMT - Tue, 24 Jun 2025 14:39:10 GMT
File type gzip compressed data, max speed, from Unix
Hash 7fff5eb644944626b5f9b53a37a79c70
fe030dc91347fa51c60dee337d827a26832a5219
812fc2a7808ce447adbe42c5c54dfe1dffe7cb6fad0268b4a4af4c4ce8cb330c
GET /offer/client?affid=onw_20117&subid=undefined&days=72&count=4&adult=null&plugin=bidder-interval HTTP/1.1
Host: wbidder323052024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://int.celebnewsuggestions.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin,Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Sun, 20 Oct 2024 18:34:38 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET crtv.wboptim.online/icon?url=https%3A%2F%2Fc.mgid.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UbPrs_yLiqbKnba06G28Qvkf0r3YttPVRlxKIavRjaUxrfk7oeaZwwoo0_7J_qv1giUF129PxO6wrd0i10Phx6I*%26cid%3D1674174%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR%26rid%3Df6a238c2-8f11-11ef-97a8-c84bd68370c0%26psid%3Dbid_20117%26iub%3DaHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzgxOTM1MzQvMzI4eDMyOC8xMjR4MTIxeDUyNHg1MjQvYUhSMGNEb3ZMMmx0WjJodmMzUnpMbU52YlM5MFpXMXdMekl3TVRndE1EY3RNRFF2TVRBeE9USTBMMlE1WlRoa05qZGhNMkk0TW1NeU1tSTRaamMzWlRnNU1EY3pNV1F3T1RabUxtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtOTRnOGQ1YXlSQno3SVE0UU1XU1M1b3dGZFJvSHprSmNPRmN1S2dqdWlTTQ%3D%3D&s=2328&a=bid_onw_20117&uA=bid_20117&sub=undefined&d=9&ic=1
302 Found 10 kB URL GET HTTP/2 crtv.wboptim.online/icon?url=https%3A%2F%2Fc.mgid.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UbPrs_yLiqbKnba06G28Qvkf0r3YttPVRlxKIavRjaUxrfk7oeaZwwoo0_7J_qv1giUF129PxO6wrd0i10Phx6I*%26cid%3D1674174%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR%26rid%3Df6a238c2-8f11-11ef-97a8-c84bd68370c0%26psid%3Dbid_20117%26iub%3DaHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzgxOTM1MzQvMzI4eDMyOC8xMjR4MTIxeDUyNHg1MjQvYUhSMGNEb3ZMMmx0WjJodmMzUnpMbU52YlM5MFpXMXdMekl3TVRndE1EY3RNRFF2TVRBeE9USTBMMlE1WlRoa05qZGhNMkk0TW1NeU1tSTRaamMzWlRnNU1EY3pNV1F3T1RabUxtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtOTRnOGQ1YXlSQno3SVE0UU1XU1M1b3dGZFJvSHprSmNPRmN1S2dqdWlTTQ%3D%3D&s=2328&a=bid_onw_20117&uA=bid_20117&sub=undefined&d=9&ic=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wboptim.online
Fingerprint0C:88:E3:CF:73:DF:B9:00:53:AF:65:15:3D:7B:58:E8:73:18:52:67
ValidityMon, 19 Aug 2024 09:46:32 GMT - Sat, 20 Sep 2025 09:46:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /icon?url=https%3A%2F%2Fc.mgid.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UbPrs_yLiqbKnba06G28Qvkf0r3YttPVRlxKIavRjaUxrfk7oeaZwwoo0_7J_qv1giUF129PxO6wrd0i10Phx6I*%26cid%3D1674174%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR%26rid%3Df6a238c2-8f11-11ef-97a8-c84bd68370c0%26psid%3Dbid_20117%26iub%3DaHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzgxOTM1MzQvMzI4eDMyOC8xMjR4MTIxeDUyNHg1MjQvYUhSMGNEb3ZMMmx0WjJodmMzUnpMbU52YlM5MFpXMXdMekl3TVRndE1EY3RNRFF2TVRBeE9USTBMMlE1WlRoa05qZGhNMkk0TW1NeU1tSTRaamMzWlRnNU1EY3pNV1F3T1RabUxtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtOTRnOGQ1YXlSQno3SVE0UU1XU1M1b3dGZFJvSHprSmNPRmN1S2dqdWlTTQ%3D%3D&s=2328&a=bid_onw_20117&uA=bid_20117&sub=undefined&d=9&ic=1 HTTP/1.1
Host: crtv.wboptim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
vary: Origin
access-control-allow-origin: *
location: https://c.mgid.com/c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UbPrs_yLiqbKnba06G28Qvkf0r3YttPVRlxKIavRjaUxrfk7oeaZwwoo0_7J_qv1giUF129PxO6wrd0i10Phx6I*&cid=1674174&f=1&h2=bjao6ykRJ-s3uDIzFfBH-CxCJ4D1AozEENtwRNNo8mLWb24HCSkUT6RVFjaDfmvR&rid=f6a238c2-8f11-11ef-97a8-c84bd68370c0&psid=bid_20117&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzgxOTM1MzQvMzI4eDMyOC8xMjR4MTIxeDUyNHg1MjQvYUhSMGNEb3ZMMmx0WjJodmMzUnpMbU52YlM5MFpXMXdMekl3TVRndE1EY3RNRFF2TVRBeE9USTBMMlE1WlRoa05qZGhNMkk0TW1NeU1tSTRaamMzWlRnNU1EY3pNV1F3T1RabUxtcHdaV2Mud2VicD92PTE3Mjk0NDkyNzgtOTRnOGQ1YXlSQno3SVE0UU1XU1M1b3dGZFJvSHprSmNPRmN1S2dqdWlTTQ==
content-length: 0
date: Sun, 20 Oct 2024 18:34:39 GMT
X-Firefox-Spdy: h2
GET crtv.wboptim.online/icon?url=https%3A%2F%2Fc.adskeeper.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UVIQhgReDpyTuJjJMeArN6J_7EAwitmz7bf-tpl4WXZYrfk7oeaZwwoo0_7J_qv1gsZER9SbPcMifJ1JVt2bRxk*%26cid%3D1467805%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CYQsFJsnjIsEQmocBzqP4Rzg6a1110Tj-QGSZbflQEw%26rid%3Df6a237e5-8f11-11ef-97a8-c84bd68370c0%26psid%3Dbid_20373&s=2288&a=bid_onw_20117&uA=bid_20373&sub=undefined&d=9&ic=1
302 Found 0 B URL GET HTTP/2 crtv.wboptim.online/icon?url=https%3A%2F%2Fc.adskeeper.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UVIQhgReDpyTuJjJMeArN6J_7EAwitmz7bf-tpl4WXZYrfk7oeaZwwoo0_7J_qv1gsZER9SbPcMifJ1JVt2bRxk*%26cid%3D1467805%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CYQsFJsnjIsEQmocBzqP4Rzg6a1110Tj-QGSZbflQEw%26rid%3Df6a237e5-8f11-11ef-97a8-c84bd68370c0%26psid%3Dbid_20373&s=2288&a=bid_onw_20117&uA=bid_20373&sub=undefined&d=9&ic=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wboptim.online
Fingerprint0C:88:E3:CF:73:DF:B9:00:53:AF:65:15:3D:7B:58:E8:73:18:52:67
ValidityMon, 19 Aug 2024 09:46:32 GMT - Sat, 20 Sep 2025 09:46:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /icon?url=https%3A%2F%2Fc.adskeeper.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UVIQhgReDpyTuJjJMeArN6J_7EAwitmz7bf-tpl4WXZYrfk7oeaZwwoo0_7J_qv1gsZER9SbPcMifJ1JVt2bRxk*%26cid%3D1467805%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CYQsFJsnjIsEQmocBzqP4Rzg6a1110Tj-QGSZbflQEw%26rid%3Df6a237e5-8f11-11ef-97a8-c84bd68370c0%26psid%3Dbid_20373&s=2288&a=bid_onw_20117&uA=bid_20373&sub=undefined&d=9&ic=1 HTTP/1.1
Host: crtv.wboptim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
vary: Origin
access-control-allow-origin: *
location: https://c.adskeeper.com/c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UVIQhgReDpyTuJjJMeArN6J_7EAwitmz7bf-tpl4WXZYrfk7oeaZwwoo0_7J_qv1gsZER9SbPcMifJ1JVt2bRxk*&cid=1467805&f=1&h2=bjao6ykRJ-s3uDIzFfBH-CYQsFJsnjIsEQmocBzqP4Rzg6a1110Tj-QGSZbflQEw&rid=f6a237e5-8f11-11ef-97a8-c84bd68370c0&psid=bid_20373
content-length: 0
date: Sun, 20 Oct 2024 18:34:39 GMT
X-Firefox-Spdy: h2
GET servicer.mgid.com/1625960/1?cmpreason=wvz&w=1264&h=831&ident_p=true&sz=303x254&szp=1,2,3,4,5,6,7,8,9,10,11,12&szl=1,2,3,4;5,6,7,8;9,10,11,12&cols=4&scale_metric_1=80.00&scale_metric_2=256.00&scale_metric_3=100.00&sessionId=67154d31-08432&sessionPage=1&sessionNumberWeek=1&sessionNumber=1&lu=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&cbuster=1729449265079480994998&pvid=192ab3583599a46f948&implVersion=11&cxurl=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&mp4=0&ap=0&consentStrLen=0&src_id=20117&uniqId=182b8&pv=5&lct=1728028680&jsv=es6&pageView=1&dpr=1&ref=&hashCommit=388fb454&tfre=1836
200 OK 410 B URL GET HTTP/3 servicer.mgid.com/1625960/1?cmpreason=wvz&w=1264&h=831&ident_p=true&sz=303x254&szp=1,2,3,4,5,6,7,8,9,10,11,12&szl=1,2,3,4;5,6,7,8;9,10,11,12&cols=4&scale_metric_1=80.00&scale_metric_2=256.00&scale_metric_3=100.00&sessionId=67154d31-08432&sessionPage=1&sessionNumberWeek=1&sessionNumber=1&lu=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&cbuster=1729449265079480994998&pvid=192ab3583599a46f948&implVersion=11&cxurl=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&mp4=0&ap=0&consentStrLen=0&src_id=20117&uniqId=182b8&pv=5&lct=1728028680&jsv=es6&pageView=1&dpr=1&ref=&hashCommit=388fb454&tfre=1836
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File type ASCII text, with very long lines (470), with no line terminators
Hash c65db09e48308a10c23a78a79f49ef4c
34324b665bd8b09551ebd76a9dafb7d277cfe88e
1bd361859ea1b331c821769ad254df7ba5d7538376357b49c087ff8d7809df87
GET /1625960/1?cmpreason=wvz&w=1264&h=831&ident_p=true&sz=303x254&szp=1,2,3,4,5,6,7,8,9,10,11,12&szl=1,2,3,4;5,6,7,8;9,10,11,12&cols=4&scale_metric_1=80.00&scale_metric_2=256.00&scale_metric_3=100.00&sessionId=67154d31-08432&sessionPage=1&sessionNumberWeek=1&sessionNumber=1&lu=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&cbuster=1729449265079480994998&pvid=192ab3583599a46f948&implVersion=11&cxurl=https%3A%2F%2Fint.celebnewsuggestions.com%2Fcommon%2Fcontent%2Fcontentforyou6.php%3Fcc%3DNO%26FTO%3Dtrue%26tn%3D20%26tx%3D30%26affid%3D20117&mp4=0&ap=0&consentStrLen=0&src_id=20117&uniqId=182b8&pv=5&lct=1728028680&jsv=es6&pageView=1&dpr=1&ref=&hashCommit=388fb454&tfre=1836 HTTP/1.1
Host: servicer.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://int.celebnewsuggestions.com/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Oct 2024 18:34:25 GMT
content-type: application/x-javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-origin: *
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-robots-tag: noindex
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8d5b1a12fe695699-OSL
alt-svc: h3=":443"; ma=86400
GET int.celebnewsuggestions.com/plugin/js/bidder-interval.js?boost=1722423641
200 OK 14 kB URL GET HTTP/2 int.celebnewsuggestions.com/plugin/js/bidder-interval.js?boost=1722423641
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerLet's Encrypt
Subject*.celebnewsuggestions.com
FingerprintAE:04:5A:95:B3:9C:0B:C4:73:5E:5C:52:71:18:72:5F:30:51:68:7E
ValidityTue, 08 Oct 2024 07:37:04 GMT - Mon, 06 Jan 2025 07:37:03 GMT
File type JavaScript source, ASCII text, with very long lines (14086)
Hash ab4580b448deee6539cf822b5cc5bd6b
08380cdefd231ed4f65dc7e794b7deb4ff07ab2d
1fd0e0cf48ce65275c1f9b7965de47216e8266e635012fc1fe05a05c23e88a95
GET /plugin/js/bidder-interval.js?boost=1722423641 HTTP/1.1
Host: int.celebnewsuggestions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Cookie: pc=data_1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 20 Oct 2024 18:34:23 GMT
content-type: application/javascript
last-modified: Wed, 31 Jul 2024 11:19:17 GMT
vary: Accept-Encoding
etag: W/"66aa1db5-3735"
expires: Tue, 19 Nov 2024 18:34:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
content-encoding: gzip
X-Firefox-Spdy: h2
GET cdn.mgid.com/images/mgid/mgid_ua.svg
200 OK 2.3 kB URL GET HTTP/3 cdn.mgid.com/images/mgid/mgid_ua.svg
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File type SVG Scalable Vector Graphics image
Hash b066f5afee750110b07082a2ccaff7ae
5c68e2ff5119cb89c2e866e273e198c6884bd9ed
8d2fe852ca66f19b4e44a9afa6d5c208ac5f7492f898ae5e059ff388b0316ccc
GET /images/mgid/mgid_ua.svg HTTP/1.1
Host: cdn.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Oct 2024 18:34:24 GMT
content-type: image/svg+xml
x-amz-id-2: 1NJTamvNyPVUT141rtBhpapiMrR5JQbvug8enieDKCfs73FrvcujhaCoILNijCgP305IqKtAXEI5ODihjmpd7svLbTD3UlW8
x-amz-request-id: JMM3EDXT9Y6KHZYD
last-modified: Tue, 08 Mar 2022 17:05:01 GMT
etag: W/"617c205137825561208ef7c1a2d8f319"
x-amz-meta-s3cmd-attrs: atime:1646759091/ctime:1646759091/gid:0/gname:root/md5:617c205137825561208ef7c1a2d8f319/mode:33206/mtime:1646759091/uid:0/uname:root
x-amz-version-id: null
cf-cache-status: HIT
age: 677
expires: Mon, 21 Oct 2024 18:34:24 GMT
cache-control: public, max-age=86400
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
access-control-allow-origin: *
server: cloudflare
cf-ray: 8d5b1a0c5bf95699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET s-img.mgid.com/g/13404783/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDYvMTAxOTI0L2E5YmUxYjhiZjNjYTRjOWFmNTk2YWEyZWRhYWFjODVhLmpwZWc.webp?v=1729449284-XQgv2Kp8Lw4VUqNY7hVlehNNmoyhK5R67UXGTL0H91k
200 OK 9.1 kB URL GET HTTP/3 s-img.mgid.com/g/13404783/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDYvMTAxOTI0L2E5YmUxYjhiZjNjYTRjOWFmNTk2YWEyZWRhYWFjODVhLmpwZWc.webp?v=1729449284-XQgv2Kp8Lw4VUqNY7hVlehNNmoyhK5R67UXGTL0H91k
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 328x328, Scaling: [none]x[none], YUV color, decoders should clamp
Hash cfdb67421aa94a2055872643a737cf62
d18f440eee091490fa493f8e573c3955f7a6fb26
24ae58ba5d0fd345e616cea8fce06dde6e526f179950a7e2946e1a4356d6f9c3
GET /g/13404783/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd185NjAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDYvMTAxOTI0L2E5YmUxYjhiZjNjYTRjOWFmNTk2YWEyZWRhYWFjODVhLmpwZWc.webp?v=1729449284-XQgv2Kp8Lw4VUqNY7hVlehNNmoyhK5R67UXGTL0H91k HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Oct 2024 18:34:45 GMT
content-type: image/webp
content-length: 9146
x-mg-request-uuid: cbf33077-6787-45a0-91b7-ea3b17a7209f
access-control-allow-origin: *
last-modified: Fri, 01 Jul 2022 07:14:08 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 9274259
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
server: cloudflare
cf-ray: 8d5b1a906c215699-OSL
alt-svc: h3=":443"; ma=86400
GET crtv.wboptim.online/icon?url=https%3A%2F%2Fc.adskeeper.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CeLDDUXPpXEAR-gth0HUPq6AYDVuUkZ1pEu40EQdjsn0Yl4RFCbjCQJlpuKxudTpWrfk7oeaZwwoo0_7J_qv1govJB1yhKNHQyp4RlbkBT1I*%26cid%3D1467805%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CYQsFJsnjIsEQmocBzqP4Rzg6a1110Tj-QGSZbflQEw%26rid%3Df30c28b6-8f11-11ef-b71e-c84bd6836428%26psid%3Dbid_21080&s=2288&a=bid_onw_20117&uA=bid_21080&sub=undefined&d=80&ic=1
302 Found 0 B URL GET HTTP/2 crtv.wboptim.online/icon?url=https%3A%2F%2Fc.adskeeper.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CeLDDUXPpXEAR-gth0HUPq6AYDVuUkZ1pEu40EQdjsn0Yl4RFCbjCQJlpuKxudTpWrfk7oeaZwwoo0_7J_qv1govJB1yhKNHQyp4RlbkBT1I*%26cid%3D1467805%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CYQsFJsnjIsEQmocBzqP4Rzg6a1110Tj-QGSZbflQEw%26rid%3Df30c28b6-8f11-11ef-b71e-c84bd6836428%26psid%3Dbid_21080&s=2288&a=bid_onw_20117&uA=bid_21080&sub=undefined&d=80&ic=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wboptim.online
Fingerprint0C:88:E3:CF:73:DF:B9:00:53:AF:65:15:3D:7B:58:E8:73:18:52:67
ValidityMon, 19 Aug 2024 09:46:32 GMT - Sat, 20 Sep 2025 09:46:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /icon?url=https%3A%2F%2Fc.adskeeper.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CeLDDUXPpXEAR-gth0HUPq6AYDVuUkZ1pEu40EQdjsn0Yl4RFCbjCQJlpuKxudTpWrfk7oeaZwwoo0_7J_qv1govJB1yhKNHQyp4RlbkBT1I*%26cid%3D1467805%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-CYQsFJsnjIsEQmocBzqP4Rzg6a1110Tj-QGSZbflQEw%26rid%3Df30c28b6-8f11-11ef-b71e-c84bd6836428%26psid%3Dbid_21080&s=2288&a=bid_onw_20117&uA=bid_21080&sub=undefined&d=80&ic=1 HTTP/1.1
Host: crtv.wboptim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
vary: Origin
access-control-allow-origin: *
location: https://c.adskeeper.com/c?pv=2&v=0|0|0|eLDDUXPpXEAR-gth0HUPq6AYDVuUkZ1pEu40EQdjsn0Yl4RFCbjCQJlpuKxudTpWrfk7oeaZwwoo0_7J_qv1govJB1yhKNHQyp4RlbkBT1I*&cid=1467805&f=1&h2=bjao6ykRJ-s3uDIzFfBH-CYQsFJsnjIsEQmocBzqP4Rzg6a1110Tj-QGSZbflQEw&rid=f30c28b6-8f11-11ef-b71e-c84bd6836428&psid=bid_21080
content-length: 0
date: Sun, 20 Oct 2024 18:34:33 GMT
X-Firefox-Spdy: h2
GET crtv.wboptim.online/icon?url=https%3A%2F%2Fa.1td.eu%2Fin%3Fsid%3D7%26data%3DSk3Rh1vqDQfSgMrq%252Bs4gynXR%252Fawjm6WII55qgRQN5JpDlttLbAv6zDYOIV9wgvFyZwpWoAfZwZCmYEBT3%252Fu%252FxdaZUaIneaiDo9cdhvZreeNF%252BNpCKS5JbNleGCRRKSTLggrd3iW5lS8mx6Aey1YiZnP%252B9nG7bvvBop%252BQAoZ1HU8FMe3ZpOl2xJLubhHOMNS0w%252FhxUdywPaXdXTQWOPhAlfHn%252FJX%252BzA5JPiCtaLqSxhVLJhq5uVx%252F2SesDQLS0I06JSGR4Or1NU5Ak9ow02dhsm9gnpIL%252FHMioVaIkAukBX%252FXCFOwWduqgDDXbThwsonoAiYxCVeNos%252FZU8sVEhb0%252BuRhaQNowchcITomgmLf8udK1Rt%252B2qJZmGXAPEervFCpGhEIbb8GemRh3FSywCAZ6T%252FvNyh7DnMDEtpvnOnl5EPGNpmJzmYhIrbjecNUFDvN&s=2286&a=bid_onw_20117&uA=bid_20618&sub=undefined&d=9&ic=1
302 Found 1.4 kB URL GET HTTP/2 crtv.wboptim.online/icon?url=https%3A%2F%2Fa.1td.eu%2Fin%3Fsid%3D7%26data%3DSk3Rh1vqDQfSgMrq%252Bs4gynXR%252Fawjm6WII55qgRQN5JpDlttLbAv6zDYOIV9wgvFyZwpWoAfZwZCmYEBT3%252Fu%252FxdaZUaIneaiDo9cdhvZreeNF%252BNpCKS5JbNleGCRRKSTLggrd3iW5lS8mx6Aey1YiZnP%252B9nG7bvvBop%252BQAoZ1HU8FMe3ZpOl2xJLubhHOMNS0w%252FhxUdywPaXdXTQWOPhAlfHn%252FJX%252BzA5JPiCtaLqSxhVLJhq5uVx%252F2SesDQLS0I06JSGR4Or1NU5Ak9ow02dhsm9gnpIL%252FHMioVaIkAukBX%252FXCFOwWduqgDDXbThwsonoAiYxCVeNos%252FZU8sVEhb0%252BuRhaQNowchcITomgmLf8udK1Rt%252B2qJZmGXAPEervFCpGhEIbb8GemRh3FSywCAZ6T%252FvNyh7DnMDEtpvnOnl5EPGNpmJzmYhIrbjecNUFDvN&s=2286&a=bid_onw_20117&uA=bid_20618&sub=undefined&d=9&ic=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wboptim.online
Fingerprint0C:88:E3:CF:73:DF:B9:00:53:AF:65:15:3D:7B:58:E8:73:18:52:67
ValidityMon, 19 Aug 2024 09:46:32 GMT - Sat, 20 Sep 2025 09:46:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /icon?url=https%3A%2F%2Fa.1td.eu%2Fin%3Fsid%3D7%26data%3DSk3Rh1vqDQfSgMrq%252Bs4gynXR%252Fawjm6WII55qgRQN5JpDlttLbAv6zDYOIV9wgvFyZwpWoAfZwZCmYEBT3%252Fu%252FxdaZUaIneaiDo9cdhvZreeNF%252BNpCKS5JbNleGCRRKSTLggrd3iW5lS8mx6Aey1YiZnP%252B9nG7bvvBop%252BQAoZ1HU8FMe3ZpOl2xJLubhHOMNS0w%252FhxUdywPaXdXTQWOPhAlfHn%252FJX%252BzA5JPiCtaLqSxhVLJhq5uVx%252F2SesDQLS0I06JSGR4Or1NU5Ak9ow02dhsm9gnpIL%252FHMioVaIkAukBX%252FXCFOwWduqgDDXbThwsonoAiYxCVeNos%252FZU8sVEhb0%252BuRhaQNowchcITomgmLf8udK1Rt%252B2qJZmGXAPEervFCpGhEIbb8GemRh3FSywCAZ6T%252FvNyh7DnMDEtpvnOnl5EPGNpmJzmYhIrbjecNUFDvN&s=2286&a=bid_onw_20117&uA=bid_20618&sub=undefined&d=9&ic=1 HTTP/1.1
Host: crtv.wboptim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
vary: Origin
access-control-allow-origin: *
location: https://a.1td.eu/in?sid=7&data=Sk3Rh1vqDQfSgMrq%2Bs4gynXR%2Fawjm6WII55qgRQN5JpDlttLbAv6zDYOIV9wgvFyZwpWoAfZwZCmYEBT3%2Fu%2FxdaZUaIneaiDo9cdhvZreeNF%2BNpCKS5JbNleGCRRKSTLggrd3iW5lS8mx6Aey1YiZnP%2B9nG7bvvBop%2BQAoZ1HU8FMe3ZpOl2xJLubhHOMNS0w%2FhxUdywPaXdXTQWOPhAlfHn%2FJX%2BzA5JPiCtaLqSxhVLJhq5uVx%2F2SesDQLS0I06JSGR4Or1NU5Ak9ow02dhsm9gnpIL%2FHMioVaIkAukBX%2FXCFOwWduqgDDXbThwsonoAiYxCVeNos%2FZU8sVEhb0%2BuRhaQNowchcITomgmLf8udK1Rt%2B2qJZmGXAPEervFCpGhEIbb8GemRh3FSywCAZ6T%2FvNyh7DnMDEtpvnOnl5EPGNpmJzmYhIrbjecNUFDvN
content-length: 0
date: Sun, 20 Oct 2024 18:34:39 GMT
X-Firefox-Spdy: h2
GET crtv.wboptim.online/icon?url=https%3A%2F%2Fc.mgid.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UbasTN_wSlTjk3NlQKXZAoeazg5HdcHRg5TT3TvoaRxMrfk7oeaZwwoo0_7J_qv1ggdQdkwL9AwN9-5QBxJ0YDI*%26cid%3D1674169%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8%26rid%3Df6a1fca8-8f11-11ef-855a-c84bd68370b4%26psid%3Dbid_20371%26iub%3DaHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE2MjYxNzMyLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDNoNVgyTmxiblJsY2l4eFgyRjFkRzg2WjI5dlpDeDNYemsyTUN4NFh6UTBPQ3g1WHpJd05DOW9kSFJ3T2k4dmFXMW5hRzl6ZEhNdVkyOXRMM1F2TWpBeU15MHdOUzh4TURFNU1qUXZOR1k0TnpVM1ptRTNNemRpTWpnMk1UZzNOekpsWlRCaE1HSTNZVE5oTURZdWFuQmxady53ZWJwP3Y9MTcyOTQ0OTI3OC0xSXNIbXNuUVlNc0VOTy1QVWxOYnF1NkU3aENnc2tzYnNUOE1fWHNqOGU4&s=2327&a=bid_onw_20117&uA=bid_20371&sub=undefined&d=9&ic=1
302 Found 19 kB URL GET HTTP/2 crtv.wboptim.online/icon?url=https%3A%2F%2Fc.mgid.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UbasTN_wSlTjk3NlQKXZAoeazg5HdcHRg5TT3TvoaRxMrfk7oeaZwwoo0_7J_qv1ggdQdkwL9AwN9-5QBxJ0YDI*%26cid%3D1674169%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8%26rid%3Df6a1fca8-8f11-11ef-855a-c84bd68370b4%26psid%3Dbid_20371%26iub%3DaHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE2MjYxNzMyLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDNoNVgyTmxiblJsY2l4eFgyRjFkRzg2WjI5dlpDeDNYemsyTUN4NFh6UTBPQ3g1WHpJd05DOW9kSFJ3T2k4dmFXMW5hRzl6ZEhNdVkyOXRMM1F2TWpBeU15MHdOUzh4TURFNU1qUXZOR1k0TnpVM1ptRTNNemRpTWpnMk1UZzNOekpsWlRCaE1HSTNZVE5oTURZdWFuQmxady53ZWJwP3Y9MTcyOTQ0OTI3OC0xSXNIbXNuUVlNc0VOTy1QVWxOYnF1NkU3aENnc2tzYnNUOE1fWHNqOGU4&s=2327&a=bid_onw_20117&uA=bid_20371&sub=undefined&d=9&ic=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGlobalSign nv-sa
Subject*.wboptim.online
Fingerprint0C:88:E3:CF:73:DF:B9:00:53:AF:65:15:3D:7B:58:E8:73:18:52:67
ValidityMon, 19 Aug 2024 09:46:32 GMT - Sat, 20 Sep 2025 09:46:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /icon?url=https%3A%2F%2Fc.mgid.com%2Fc%3Fpv%3D2%26v%3D0%7C0%7C0%7CprH77mJhsYHeZSLPaVM5UbasTN_wSlTjk3NlQKXZAoeazg5HdcHRg5TT3TvoaRxMrfk7oeaZwwoo0_7J_qv1ggdQdkwL9AwN9-5QBxJ0YDI*%26cid%3D1674169%26f%3D1%26h2%3Dbjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8%26rid%3Df6a1fca8-8f11-11ef-855a-c84bd68370b4%26psid%3Dbid_20371%26iub%3DaHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE2MjYxNzMyLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDNoNVgyTmxiblJsY2l4eFgyRjFkRzg2WjI5dlpDeDNYemsyTUN4NFh6UTBPQ3g1WHpJd05DOW9kSFJ3T2k4dmFXMW5hRzl6ZEhNdVkyOXRMM1F2TWpBeU15MHdOUzh4TURFNU1qUXZOR1k0TnpVM1ptRTNNemRpTWpnMk1UZzNOekpsWlRCaE1HSTNZVE5oTURZdWFuQmxady53ZWJwP3Y9MTcyOTQ0OTI3OC0xSXNIbXNuUVlNc0VOTy1QVWxOYnF1NkU3aENnc2tzYnNUOE1fWHNqOGU4&s=2327&a=bid_onw_20117&uA=bid_20371&sub=undefined&d=9&ic=1 HTTP/1.1
Host: crtv.wboptim.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
vary: Origin
access-control-allow-origin: *
location: https://c.mgid.com/c?pv=2&v=0|0|0|prH77mJhsYHeZSLPaVM5UbasTN_wSlTjk3NlQKXZAoeazg5HdcHRg5TT3TvoaRxMrfk7oeaZwwoo0_7J_qv1ggdQdkwL9AwN9-5QBxJ0YDI*&cid=1674169&f=1&h2=bjao6ykRJ-s3uDIzFfBH-NFOPJ6mfRdcsLUNHMWy24GsABetbCw-530DrygaDoz8&rid=f6a1fca8-8f11-11ef-855a-c84bd68370b4&psid=bid_20371&iub=aHR0cHM6Ly9zLWltZy5tZ2lkLmNvbS9nLzE2MjYxNzMyLzMyOHgzMjgvLS9hSFIwY0RvdkwyTnNMbWx0WjJodmMzUnpMbU52YlM5cGJXZG9MMmx0WVdkbEwyWmxkR05vTDJGeVh6RTZNU3hqWDJacGJHd3NaVjl6YUdGeWNHVnVPakV3TUN4bVgycHdaeXhuWDNoNVgyTmxiblJsY2l4eFgyRjFkRzg2WjI5dlpDeDNYemsyTUN4NFh6UTBPQ3g1WHpJd05DOW9kSFJ3T2k4dmFXMW5hRzl6ZEhNdVkyOXRMM1F2TWpBeU15MHdOUzh4TURFNU1qUXZOR1k0TnpVM1ptRTNNemRpTWpnMk1UZzNOekpsWlRCaE1HSTNZVE5oTURZdWFuQmxady53ZWJwP3Y9MTcyOTQ0OTI3OC0xSXNIbXNuUVlNc0VOTy1QVWxOYnF1NkU3aENnc2tzYnNUOE1fWHNqOGU4
content-length: 0
date: Sun, 20 Oct 2024 18:34:39 GMT
X-Firefox-Spdy: h2
GET int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
200 OK 3.1 kB URL User Request GET HTTP/2 int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subject*.celebnewsuggestions.com
FingerprintAE:04:5A:95:B3:9C:0B:C4:73:5E:5C:52:71:18:72:5F:30:51:68:7E
ValidityTue, 08 Oct 2024 07:37:04 GMT - Mon, 06 Jan 2025 07:37:03 GMT
File type JavaScript source, ASCII text, with very long lines (3209), with no line terminators
Hash 267bdd59248e445d1aeec0322d5a5039
e84a0dcbf77a1c3dd7ebf555b2c5b1e972fea0be
a18694d03ccd559bce207287312ac40ee23e7ea4ce87003f8fe5417a038e6785
GET /common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117 HTTP/1.1
Host: int.celebnewsuggestions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 20 Oct 2024 18:34:23 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: pc=data_1; expires=Tue, 29-Aug-2034 18:34:23 GMT; Max-Age=311040000; path=/
x-frame-options: SAMEORIGIN
content-encoding: gzip
X-Firefox-Spdy: h2
GET eu.boxif.xyz/nty/metrics/save.img?event=impressions&bid-id=v2-1729449278683-7-13808-1387304-aaaae5d3-0838-0c68-1b6a-56824157b453&img=https%3A%2F%2Fcdn.amnew.net%2Ffiles%2F670cf1ec599b1_2024_10_14_10_26_52_image.webp
302 Found 1.4 kB URL GET HTTP/2 eu.boxif.xyz/nty/metrics/save.img?event=impressions&bid-id=v2-1729449278683-7-13808-1387304-aaaae5d3-0838-0c68-1b6a-56824157b453&img=https%3A%2F%2Fcdn.amnew.net%2Ffiles%2F670cf1ec599b1_2024_10_14_10_26_52_image.webp
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerLet's Encrypt
Subject*.boxif.xyz
Fingerprint40:17:63:41:62:EC:8E:BE:76:C2:9D:06:95:E3:E6:06:29:7C:35:1C
ValidityWed, 25 Sep 2024 23:06:33 GMT - Tue, 24 Dec 2024 23:06:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nty/metrics/save.img?event=impressions&bid-id=v2-1729449278683-7-13808-1387304-aaaae5d3-0838-0c68-1b6a-56824157b453&img=https%3A%2F%2Fcdn.amnew.net%2Ffiles%2F670cf1ec599b1_2024_10_14_10_26_52_image.webp HTTP/1.1
Host: eu.boxif.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty/1.21.4.1
date: Sun, 20 Oct 2024 18:34:39 GMT
content-length: 0
location: https://cdn.amnew.net/files/670cf1ec599b1_2024_10_14_10_26_52_image.webp
X-Firefox-Spdy: h2
GET s-img.mgid.com/g/16261732/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3Xzk2MCx4XzQ0OCx5XzIwNC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMy0wNS8xMDE5MjQvNGY4NzU3ZmE3MzdiMjg2MTg3NzJlZTBhMGI3YTNhMDYuanBlZw.webp?v=1729449278-1IsHmsnQYMsENO-PUlNbqu6E7hCgsksbsT8M_Xsj8e8
200 OK 19 kB URL GET HTTP/3 s-img.mgid.com/g/16261732/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3Xzk2MCx4XzQ0OCx5XzIwNC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMy0wNS8xMDE5MjQvNGY4NzU3ZmE3MzdiMjg2MTg3NzJlZTBhMGI3YTNhMDYuanBlZw.webp?v=1729449278-1IsHmsnQYMsENO-PUlNbqu6E7hCgsksbsT8M_Xsj8e8
IP
Requested by https://int.celebnewsuggestions.com/common/content/contentforyou6.php?cc=NO&FTO=true&tn=20&tx=30&affid=20117
Certificate IssuerGoogle Trust Services
Subjectmgid.com
Fingerprint90:0B:51:D1:01:15:89:6D:C3:95:58:18:43:90:C9:6D:85:1A:BC:05
ValidityWed, 04 Sep 2024 02:46:17 GMT - Tue, 03 Dec 2024 02:46:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 328x328, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 2792c353c1b02d311a0d66d00d367f87
1f5f4e5326afb303f12919a69fed03702a135e4b
2f941fcd98dc0d7ca27ca6c3ca35a4595820d9067c246aaed79b806def20eda7
GET /g/16261732/328x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE6MSxjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3Xzk2MCx4XzQ0OCx5XzIwNC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyMy0wNS8xMDE5MjQvNGY4NzU3ZmE3MzdiMjg2MTg3NzJlZTBhMGI3YTNhMDYuanBlZw.webp?v=1729449278-1IsHmsnQYMsENO-PUlNbqu6E7hCgsksbsT8M_Xsj8e8 HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9ycQYgV5O0jWRN3aeTU4mZG.dmq1YIy75WGn9I3RAEg-1729449263-1.0.1.1-Is12pcW9Jb.3DMuGixf8bl9d1Bhcw65Cu51Dd6g.e673rXpolzPM4i4WBOP17YXjdpSKqnEz9tg3socDbIQ0OQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Oct 2024 18:34:39 GMT
content-type: image/webp
content-length: 19026
x-mg-request-uuid: 9ab5395d-fbda-4ea4-bb70-9739e46ec202
access-control-allow-origin: *
last-modified: Mon, 22 May 2023 08:41:42 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 11167332
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
server: cloudflare
cf-ray: 8d5b1a6aff505699-OSL
alt-svc: h3=":443"; ma=86400
88.99.166.117
213.227.139.73
104.19.130.76
109.200.199.110