perezhilton.com/category/exclusives/
301 Moved Permanently 0 B URL HTTP/1.1 perezhilton.com/category/exclusives/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /category/exclusives/ HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 30 Nov 2022 23:32:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 01 Dec 2022 00:32:09 GMT
Location: https://perezhilton.com/category/exclusives/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1ADt53o3CGXzHLeTkBchPKhYe4FMohS3O0DsiDNdLIzCeF4vR8hyzP54rX5sB3jwL5tgocTvpIKBn7tzjeeq6ZNrjuNREktfsW5QA7kFDyTPAf%2FglOl5ZxxrIIeXadeYRg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772761762c910af6-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8435
Expires: Thu, 01 Dec 2022 01:52:44 GMT
Date: Wed, 30 Nov 2022 23:32:09 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3014
Cache-Control: max-age=128964
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:09 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 11:21:33 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9062
Expires: Thu, 01 Dec 2022 02:03:11 GMT
Date: Wed, 30 Nov 2022 23:32:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ylE2KAYF6kkDcFONSShPIMiGAlr+jli63I0fqj4pRJmCzJRWAnSDCcyzUEJa/HGR0jpCyVdVOZs=
x-amz-request-id: KHS0KYK41008RVSF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 22:45:24 GMT
age: 2805
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 23:18:04 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 845
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 23:32:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 23:08:56 GMT
cache-control: public,max-age=3600
age: 1393
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3016
Cache-Control: max-age=123897
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Etag: "63871d2b-1d7"
Expires: Fri, 02 Dec 2022 09:57:07 GMT
Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 7e8cd73c758ca6307b135b3d15ea36e6
41cb1eb686b0415b438c3668decfc314506f62fa
d7a82074159287773979b486cf418424d7c1ed1e55e521d4200cea2a26cebbb5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2984
Cache-Control: max-age=116339
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Etag: "6386ffc5-117"
Expires: Fri, 02 Dec 2022 07:51:09 GMT
Last-Modified: Wed, 30 Nov 2022 07:01:25 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 16c3ad4a2bc7f419fb354b37778f8b2f
d193a1336556dcf6b4975a057e7c849037eef0ff
5993deb5a53b2e844b9027a6b6906c718f6e9f69c27388199c4343a80ef067f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 15ac5a39cbea97560ec6f547f62177a8
fe73e21beb43d0bb41ef25b7003a5f640dfed679
15e8ae4df5ddbb69105d58f3b72a4ce32fc918f4cc9602c5adb3908d88b64aae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3002
Cache-Control: max-age=119568
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Etag: "63870c50-117"
Expires: Fri, 02 Dec 2022 08:44:58 GMT
Last-Modified: Wed, 30 Nov 2022 07:54:56 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
200 OK 57 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
IP
File type Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Hash 97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: font/woff2
content-length: 56780
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 632, 617, 617, 617, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 21:22:06
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 43c2b10ed4caafc278f6f5ebec7cdfe5
cdn-cache: HIT
cf-cache-status: HIT
age: 12325485
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7727617b5806b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-338092-8
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-338092-8
IP
File type ASCII text, with very long lines (1921)
Hash ad3438b2b18a212732eac7fc8de8a640
db375a8b748a8d7c310fe473fb846494e6f28499
d87c89c30bd7106af33bb64e8d81cf917b8a77fb4518327897057f690014ce96
GET /gtag/js?id=UA-338092-8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 30 Nov 2022 23:32:10 GMT
expires: Wed, 30 Nov 2022 23:32:10 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44545
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.ntv.io/serve/load.js
200 OK 148 kB IP
File type Unicode text, UTF-8 text, with very long lines (65442)
Size 148 kB (147991 bytes)
Hash 5770f1855556c3a94ed5beab0b90d04a
b17c9865f44517489e8d49cd67965c6586a8859a
f01cf1ecb8017c3f32d772d10c92b0a0cca1e533cd10402b52ad5fd918dc8fcc
GET /serve/load.js HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 92FZTiLACqP8HLsk0Hjh1PjLQs+msI6P+S4TlwiEyiiuNVvAIK24Qx9creKQrPpuWe3ifIB8tDE=
x-amz-request-id: 38D4MZHEAHA9GAGX
Last-Modified: Tue, 29 Nov 2022 23:27:27 GMT
ETag: "e290763d5b8f1ce7d1a1b7afb7c0bd38"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 23:32:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
www.google.com/recaptcha/api.js?render=6Lel6LwZAAAAAOWBQsyuijMbyGWGbJCfx8DOYNnc&ver=3.0
200 OK 583 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6Lel6LwZAAAAAOWBQsyuijMbyGWGbJCfx8DOYNnc&ver=3.0
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash df3d63f706ae2447104b59bcaee07507
7f587c7d3d71b4c15e44c50b4463684be0b87c0a
d5055a374ec37853848bcebb9cd4b523f05a4e0b6ed6bdf5db73abd18db8f097
GET /recaptcha/api.js?render=6Lel6LwZAAAAAOWBQsyuijMbyGWGbJCfx8DOYNnc&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 30 Nov 2022 23:32:10 GMT
date: Wed, 30 Nov 2022 23:32:10 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 583
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
200 OK 4.4 kB URL HTTP/2 perezhilton.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
IP
File type ASCII text, with very long lines (12987), with no line terminators
Hash 1f0afc9fd88e04387fe5294b13c0a736
4b56bbe59d0de2042c341426a2577706a7768d1c
9cb26db7b448f890dc64f7229992aab3d1faf4d968bacd2e01b666d53957bc63
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/javascript
cf-bgj: minify
access-control-allow-origin: *
etag: W/"6103ec5e-32bb"
last-modified: Fri, 30 Jul 2021 12:11:10 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=96B0Y%2BvO%2BF%2BQe5NNty9rsOXr0cHus%2FDyPtXsJfcQKpDdQo1FsmVcsSYEU%2FYdyAelhfEM4oNKizN8c3Ea6TUBLoOFvpsYz%2FUcxnsfkktfELBReRocdHlKDNTQbPTMQClSbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a6f1cb4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.googletagservices.com/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40310)
Hash 6283a81f17f108d8a5b14f9e542efd0b
f3b5855b65161a228bedec6c5cebc5b4e2fbb95a
5da609cee6a6f63be812cde9535f17c2322aa6af3b1d9331d44234d83d69c3fd
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27340
date: Wed, 30 Nov 2022 23:32:10 GMT
expires: Wed, 30 Nov 2022 23:32:10 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1408 / 156 of 1000 / last-modified: 1669849881"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 15ac5a39cbea97560ec6f547f62177a8
fe73e21beb43d0bb41ef25b7003a5f640dfed679
15e8ae4df5ddbb69105d58f3b72a4ce32fc918f4cc9602c5adb3908d88b64aae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3002
Cache-Control: max-age=119568
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Etag: "63870c50-117"
Expires: Fri, 02 Dec 2022 08:44:58 GMT
Last-Modified: Wed, 30 Nov 2022 07:54:56 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8738fe702f9a3c4f690e67a277ea5912
4a9c09f4e470f8aba237e056989d21adcfdbf1b3
2b6fda380e95c43933e8fb9ea2435ae1b0e02498550fd6a307165dd206dfabb2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2B6FDA380E95C43933E8FB9EA2435AE1B0E02498550FD6A307165DD206DFABB2"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3994
Expires: Thu, 01 Dec 2022 00:38:44 GMT
Date: Wed, 30 Nov 2022 23:32:10 GMT
Connection: keep-alive
perezhilton.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3
200 OK 5.0 kB URL HTTP/2 perezhilton.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3
IP
File type ASCII text, with very long lines (11287)
Hash c029d081649cc8680fd89590dc0d1eed
7dfdf56e8c5a29940e3bb0bcf8981931b72418fa
c25e28027161e1fbab7f689959451c3e3d4eb506affe2ea1fe895584430944f5
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.5.3 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 12:22:11 GMT
etag: W/"5fe09373-37a6"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1232
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5vNwIWmKGwsxcyyiaIhvssmaEIsuv8D5OPDGfAIKjoEg7k3%2BI0066eK1Sjhs98NmWkwc5J33IUtnUWlMRYuwkqepslC7WdOobcagfGlYRy9LyKETHaBnqOYau525nwREDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617bf80db4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 60a4a02ee8baa32a05a7b7e61d79ce3b
6291a67c73c5a5d8cffd778155d0e9a7a789b43c
f22cf9dac3bc8b6b6f19c3135024c5d2d6cb47b6beacb0eb6df284d5e8ed7dda
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 23:32:10 GMT
Last-Modified: Wed, 30 Nov 2022 22:45:38 GMT
Server: ECS (nyb/1D2B)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8C7KIazXN1HL189ge_gtl76A_Yxp2lTVKgsGSwKoaJKVmF_19VyZjA==
Age: 2795
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d3409b85a098c1c5a6041b42743a5bac
ae293f3b45042dbadb9799e1d248ef5a7ddebc45
d42d8cad0c6b3db0defe2c10a0e488f3297b7e121041e4d056932f562eba09f6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169048
Date: Wed, 30 Nov 2022 23:32:10 GMT
Etag: "6387ce58-1d7"
Expires: Fri, 02 Dec 2022 22:29:38 GMT
Last-Modified: Wed, 30 Nov 2022 21:42:48 GMT
Server: ECS (dcb/7F14)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0WHgohOR3VZ0r8Vtvb6F-SvQhVg1RpX2BldBSkHMrMtV7hwRzHTtsw==
Age: 2810
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7bz8FsVT1zy2TwawhKWOiQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: c/8PeHoPUApLVt1zOAM/5akRCcE=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8738fe702f9a3c4f690e67a277ea5912
4a9c09f4e470f8aba237e056989d21adcfdbf1b3
2b6fda380e95c43933e8fb9ea2435ae1b0e02498550fd6a307165dd206dfabb2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2B6FDA380E95C43933E8FB9EA2435AE1B0E02498550FD6A307165DD206DFABB2"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3994
Expires: Thu, 01 Dec 2022 00:38:44 GMT
Date: Wed, 30 Nov 2022 23:32:10 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b93d24dbdadcab92dece73d904b968ec
b932da334047292ff8caa8ab0f65f436c8e0bcaf
e60e435ea2bf281dd306381a75ed682a8b4d65ca9a3a01974e628a5e14e3e781
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150784
Date: Wed, 30 Nov 2022 23:32:10 GMT
Etag: "638791fa-1d7"
Expires: Fri, 02 Dec 2022 17:25:14 GMT
Last-Modified: Wed, 30 Nov 2022 17:25:14 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iGshw1tHERR4g4s0F9QjNRiq3jKg5WntqwDtOVAzb8DB6Flwx7n1Eg==
polyfill.io/v3/polyfill.min.js?features=IntersectionObserver
200 OK 94 B URL HTTP/2 polyfill.io/v3/polyfill.min.js?features=IntersectionObserver
IP
Hash eb8b0ba88b3acfb11ea81d5c02be9108
4b7f14cc2db25abdbe25472934b7469b2488f9d4
7237f15a97fe102c6ed13eadc0f7980da03cd06a20dfb7c7b8050e60dada617d
GET /v3/polyfill.min.js?features=IntersectionObserver HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
last-modified: Wed, 16 Nov 2022 09:56:10 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/105.0.0
date: Wed, 30 Nov 2022 23:32:10 GMT
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1677, PASS, fastly;desc="Edge time";dur=12
content-length: 94
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d3409b85a098c1c5a6041b42743a5bac
ae293f3b45042dbadb9799e1d248ef5a7ddebc45
d42d8cad0c6b3db0defe2c10a0e488f3297b7e121041e4d056932f562eba09f6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=168234
Date: Wed, 30 Nov 2022 23:32:10 GMT
Etag: "6387ce58-1d7"
Expires: Fri, 02 Dec 2022 22:16:04 GMT
Last-Modified: Wed, 30 Nov 2022 21:42:48 GMT
Server: ECS (dcb/7F15)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fHTbV_Tr3nnfclU15-dq0RV-Pu7ZYf2JEGb5kK-_8Ta_4nOIooOPpw==
Age: 1996
perezhilton.com/wp-content/themes/understrap-master/fonts/Hollywood/Hollywood.woff2
200 OK 3.5 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/fonts/Hollywood/Hollywood.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 3540, version 1.0\012- data
Hash ccb0304f5eb8f61dcc88bac5e417c9ce
04083d798ce3fd7b1298d56d05749f76dad2a794
e43ad82cd9be246ca0f3594e733d326c83177eb92422e185f9c38bdc4fa49b12
GET /wp-content/themes/understrap-master/fonts/Hollywood/Hollywood.woff2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/octet-stream
content-length: 3540
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
etag: "5eecd0d9-dd4"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iqVIMRDxL%2FpY4S9XMbQQ3XuNOH98eq2QTAtBJSvExR7AAun057uGti%2B6coJidSKpaGaqBbA8mc8opAjdl72hBZY7O80ua0Dom5nA%2BJa16nOk9AyaZNsEaVLhfY1qfF44uw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a5f06b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/holiday-bg.jpeg
200 OK 4.2 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/holiday-bg.jpeg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c4bf61324c8f3532c6fce61349018750
0df6c432c4a1b5db0bdaf15fe11c1a6b7de73634
52d383b14ad1636a13de204c30313e8cb433228168f89e964edc889079255c8b
GET /wp-content/themes/understrap-master/images/holiday-bg.jpeg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: image/webp
content-length: 4204
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=8607
content-disposition: inline; filename="holiday-bg.webp"
vary: Accept
etag: "61a7284c-219f"
expires: Wed, 07 Dec 2022 22:12:47 GMT
last-modified: Wed, 01 Dec 2021 07:46:20 GMT
cf-cache-status: HIT
age: 91163
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NIEGGuCE07giR4ITBJV9X6wfqsrlxlzkItmplYKz9iaLjL4ISGDH56cJvazp3mGlH%2BL4cCo8uIvHiSMeNu8teKyIWVJchRGNFclVWSto2ju93hpxlhniwDUmHVfSJTIIaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7727617fcab8b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/bread-bg.png
200 OK 4.4 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/bread-bg.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b0b9014f035b304b92a2e59cbf0170d5
692da235efb0da6dbf1e86d57c4be6991aca6feb
348c0cec7aab1cdfe976bfca6e08fd70f92bdd5d429dc1855b98194251b4b877
GET /wp-content/themes/understrap-master/images/bread-bg.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: image/webp
content-length: 4390
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6625
content-disposition: inline; filename="bread-bg.webp"
vary: Accept
etag: "5eecd0d9-19e1"
expires: Wed, 07 Dec 2022 19:43:47 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 100103
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XKf%2F7h9hlc0kaagIEywmQtOdnwkx78zVZbzQfYyz8kFD0KWfS6ZBW1XQHzUDzN0wp0m5xkEfMTQRV2k9GhgrPu4CS5rSuwTwAEN%2BsSWzwIFcIPMppVWKy34buhxCyQMSug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7727617fcac4b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/title-bg-2.png
200 OK 5.2 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/title-bg-2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5a2507841bf0c3ab7b782f03dd8f072d
7f096d31acc09a8797938acb88c551ddc47c1e11
c3b4080893c7e9e66a04a2ae020a196b933e5bb522e7c7a97ce488c3c6f58a70
GET /wp-content/themes/understrap-master/images/title-bg-2.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: image/webp
content-length: 5240
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=8774
content-disposition: inline; filename="title-bg-2.webp"
vary: Accept
etag: "5eecd0d9-2246"
expires: Sun, 04 Dec 2022 16:19:41 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 371549
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y9SpMmIZK7uv5rOA4WV%2BVYN2b%2FpDRu7xS8PXmWYVbNcWbMTuahm6%2FpJX5cJuEa2Ny1n4qUdgsA7A4x7xwS7nllFAObdcgCM%2BMNv%2FeRy5ChYD77DFqQY9KdGk6NA9MHmpjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7727617fcac2b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/crisscross-purple.png
200 OK 2.3 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/crisscross-purple.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7412caede939ddfae209483ab63e3406
bba7ed13b78b455475339ad432dfddc45788d89d
6946f8592c617a94793044c37f57ecdf546763106207d4edf5b6dfbc3f023adf
GET /wp-content/themes/understrap-master/images/crisscross-purple.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: image/webp
content-length: 2292
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5393
content-disposition: inline; filename="crisscross-purple.webp"
vary: Accept
etag: "5eecd0d9-1511"
expires: Thu, 08 Dec 2022 00:06:00 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 84370
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F%2BIt9ECuCLPXhVLs6EvrmaoI6xD2JuZbqT64lL0IEHnr6navTgl0xACpQnnHftug0b0hn4RDza5A2Spq0I9tIF8uIQOLXjve4T3uNBErKNYWBSj23vh%2FZSItiA0Tu%2Fe4pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7727617fcac9b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/crisscross-orange.png
200 OK 2.3 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/crisscross-orange.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash aa46a8bb898f86320ef71e7b9f4e8e91
810206fe93b48a7079f7f39720214d9af5b6233d
30294b8e857cdbb98bf7a49c45f36d3e8d686818bea4dace4ba738b28eef4aee
GET /wp-content/themes/understrap-master/images/crisscross-orange.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: image/webp
content-length: 2260
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5395
content-disposition: inline; filename="crisscross-orange.webp"
vary: Accept
etag: "5efd0b3b-1513"
expires: Wed, 07 Dec 2022 18:42:22 GMT
last-modified: Wed, 01 Jul 2020 22:16:27 GMT
cf-cache-status: HIT
age: 103788
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OMJrqiEcVnJLWl84V%2Fy09ObzhE%2BCe2sINOKuA%2B4P2hSFrpoZLQUjRzuRYAJRHcr0xJe%2Bg57wzKA72yjaaL6B0A%2FFTtESHdVk%2BDZeA7malO5Ue9Pqn5yD5dKm%2BJ201fAsHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7727617fdacbb4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/04.jpg
200 OK 5.1 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/04.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x274, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 527e2f7da6908cca1386339a19f1e3ac
92f2b65e69ea43c037f5c60b98c26da707cdc7b3
eba32bc5ef70516ebba66efde63a169dc4696cd642ad06a7a2feabc2996963a7
GET /wp-content/themes/understrap-master/images/04.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: image/webp
content-length: 5096
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=22076
content-disposition: inline; filename="04.webp"
vary: Accept
etag: "5eecd0d9-563c"
expires: Wed, 07 Dec 2022 23:29:37 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 86553
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kqpUmeoZth4xsD5U2J8Sbob77iGJjJJdfHIaAFiiC8gT2gjCwjnoDM5ZI24ix6MAaynO6knX%2FCKCXYlUEgNz47QmYe1C3yS3qn%2Brpf1uujpZlKGCGu9TWvDZrA1vZS1BUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7727617fdaccb4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/crisscross-gray.png
200 OK 2.2 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/crisscross-gray.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a03fb0fde924e5fabc05341b01adb130
1e7de3ac5249e49cf5279df86d09d5befe691e1d
9f260c4f8d8228f453020efebcbb9a2a05218cf107956ea65d359e70fa27bba4
GET /wp-content/themes/understrap-master/images/crisscross-gray.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: image/webp
content-length: 2194
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5382
content-disposition: inline; filename="crisscross-gray.webp"
vary: Accept
etag: "5efd0b3b-1506"
expires: Thu, 08 Dec 2022 21:18:39 GMT
last-modified: Wed, 01 Jul 2020 22:16:27 GMT
cf-cache-status: HIT
age: 8011
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m3eA0h%2FCMl%2F%2B1wXm5iS0r7RB4cBLoWeuAao%2BIzQhX8FyJ5H8P3xsht3I4hreOXqO1kS6cz50LthxbRp0E5zbrdzR2QSAro3JdzZiQdXkC3TWXRQjx0ATlWw3bi%2FmDGMgBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7727617fcac8b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/side-video-title-bg.png
200 OK 110 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/side-video-title-bg.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7ce66afe1631031bb516d7773f506026
e45739542414189b9b9a46aec9aaa0925d62ae5e
3e6643c0f263147cc6cfeeb25b7dbcec9c8146e811eed36173fd152e4fe4ba46
GET /wp-content/themes/understrap-master/images/side-video-title-bg.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: image/webp
content-length: 110
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=214
content-disposition: inline; filename="side-video-title-bg.webp"
vary: Accept
etag: "5eecd0d9-d6"
expires: Wed, 07 Dec 2022 22:12:47 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 91163
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FPjexJ7sGwgk65Z%2BJEvr%2BnDy3YyfeSUyBlVZ9cM%2FIjHipoi7jJmvpcaHbD4rClqsH3kaXQ%2B3tEEZWdEYgICBKUHRsqmZxX0m%2FCefuIgQ3kYFEZZOGUFYCi1ITkhJ5qCkyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7727617fdacfb4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/play-button-6.png
200 OK 5.0 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/play-button-6.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 09d6662e05a5682985f14cee49ffae23
02683261eb54226be9c9ce190594a4a8d3e7dba0
dd23ee2d447749cbbc982f7ee9cc9a88fbf70dd9a712324c8b1bdbea05209f0c
GET /wp-content/themes/understrap-master/images/play-button-6.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: image/webp
content-length: 4996
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=8970
content-disposition: inline; filename="play-button-6.webp"
vary: Accept
etag: "5eecd0d9-230a"
expires: Wed, 07 Dec 2022 21:57:34 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 92076
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kUJX8RLma2o2aB4frYgdI0Gjz8M6uCDzkREZC4GgR9qnAeAL37FtexfGG6uDuQ1lYtjyJ6VKhObtGKeuwujwqkewYFwkZqfwX%2BOfjS151l%2Fi6YvtPywT8HIMIe2kNYcLxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7727617fdaceb4f3-OSL
X-Firefox-Spdy: h2
mcd-sdk.playbuzz.com/embed/sdk.js?embedId=7bf0df57-3cb6-41b5-be24-76e9e5f90af4
200 OK 359 kB URL HTTP/2 mcd-sdk.playbuzz.com/embed/sdk.js?embedId=7bf0df57-3cb6-41b5-be24-76e9e5f90af4
IP
File type Unicode text, UTF-8 text, with very long lines (50197)
Size 359 kB (358843 bytes)
Hash 0469b965def5be261b1aff06d6ccfdce
68db84fb5bd872b24000d87d3fda48b5500bb88d
f3a279c0f7030a603cb543a020b3011d390f4107b2f0d597357e50e7527521be
GET /embed/sdk.js?embedId=7bf0df57-3cb6-41b5-be24-76e9e5f90af4 HTTP/1.1
Host: mcd-sdk.playbuzz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
server: nginx
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: Accept, Authorization, Content-Type
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-max-age: 600
cache-control: no-cache
etag: W/"11a440-hihqZB7SHkxKWOOEIxIa48fHTmc"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 30 Nov 2022 23:32:10 GMT
age: 62618
x-served-by: cache-iad-kcgs7200031-IAD, cache-bma1648-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1669851131.851465,VS0,VE1
vary: Accept-Encoding, x-pb-country, x-pb-connection, x-pb-embedid, x-pb-itemid, x-pb-videoid, x-pb-player, x-pb-bot-name, x-pb-is-bot, x-pb-country, x-pb-connection, x-pb-embedid, x-pb-itemid, x-pb-videoid, x-pb-player, x-pb-bot-name, x-pb-is-bot
content-length: 358843
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/choice/GANCBjEfRH5Fe/perezhilton.com/choice.js?timestamp=1669851129470
200 OK 79 kB URL HTTP/2 quantcast.mgr.consensu.org/choice/GANCBjEfRH5Fe/perezhilton.com/choice.js?timestamp=1669851129470
IP
Hash ec4163e43655de54821316f01c43f191
1fad759491bb83b843d101c4caed8672487ba5bf
0afe7b2682836746fc4ffaca36c67b1e5b70856c0836ad41f5d5b8a88a0af590
GET /choice/GANCBjEfRH5Fe/perezhilton.com/choice.js?timestamp=1669851129470 HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 18 Oct 2021 12:25:10 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: gzip
date: Wed, 30 Nov 2022 23:32:10 GMT
cache-control: max-age=3600
etag: W/"95f6844442aedd0c7781a1eb1fc1c669"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oE5EwKh0nmpBMorbhWHontBrXnWey-LVUFsXYMn7gbIelmyrSEquWA==
age: 3
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perezhilton.com/wp-content/themes/understrap-master/js/theme.min.js?ver=0.9.4.1636670677
200 OK 36 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/js/theme.min.js?ver=0.9.4.1636670677
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3dcbedfad19ae1cfda5ab52149ddbbba
c52b81ff72b0e132bed5554fb5dbbbc03a83d35a
372b0246373e0f63bc74c612ff992152153ffc749393312f5862536a73e9d98c
GET /wp-content/themes/understrap-master/js/theme.min.js?ver=0.9.4.1636670677 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/javascript
last-modified: Thu, 11 Nov 2021 22:44:37 GMT
etag: W/"618d9cd5-1f54e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=73cWnMzhO5NZjJJQTO8v98H8oeHJ9T7MEqszG9Q3itUlLD4hbmPMxYDEVaQ7ESjQQDY69OOGBGN10VwMK8JzlIKcFdTkJ8hF9WdbzdLqJZiS4yRaEaA56BtVNbJgNCYm6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a6f1fb4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25672, version 1.0\012- data
Hash fe3e5be2baa0126122ba9367ebab73c8
40bec99106dfab5f3721ed725483eb618a9016cd
8b166007d6f54c33b3ea10ea23572bc3166f55f365840d3cbd6ef7b5dcf6674e
GET /s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25672
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:56:28 GMT
expires: Fri, 24 Nov 2023 21:56:28 GMT
cache-control: public, max-age=31536000
age: 524142
last-modified: Mon, 18 Jul 2022 19:12:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 14296
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 14276
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 14276
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perezhilton.com/wp-content/themes/understrap-master/css/ajax-loader.gif
200 OK 2.6 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/css/ajax-loader.gif
IP
File type GIF image data, version 89a, 32 x 32\012- data
Hash 7929b973556ab589cb85cefad65d7fe0
8b3a78a0ee64dde94f617a40631735cbc8e23a76
568d7b83659993469a2d729ad98daba3a7de2568f74d670d18ae618f118fe353
GET /wp-content/themes/understrap-master/css/ajax-loader.gif HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/gif
content-length: 2592
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=4178, status=webp_bigger
etag: "5eecd0d9-1052"
expires: Thu, 08 Dec 2022 21:16:55 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 8116
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GJzyfemXzw409VsI%2BJPSbPyY1fGgZlZyNexZzeCUjHQ1UCO8SGMNGyyxfEmQMWX62OjTIcgg7tQf29x0Rb21rLN54j0W04c2fjhUePyFew4KGrf7YrNydrIHlXwB8bJSmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761811bccb4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317375802_529623438814468_1789473371724008673_nthumb.jpg
200 OK 8.1 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317375802_529623438814468_1789473371724008673_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x173, components 3\012- data
Hash b006dd3742a4ee27d90de70bf217a9ed
71625ff98140b31d65d533bdda2f6a31221c1e75
c90bee8e0ce3dd117f6650361a129c389797b3639834d7b87285778fa2f4eda0
GET /wp-content/uploads/sb-instagram-feed-images/317375802_529623438814468_1789473371724008673_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/jpeg
content-length: 8079
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8282, status=webp_bigger
etag: "6387b641-205a"
expires: Thu, 08 Dec 2022 20:07:33 GMT
last-modified: Wed, 30 Nov 2022 20:00:01 GMT
cf-cache-status: HIT
age: 12277
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rU2eJ6cH6wMuWiMxhoQnX0v9DaoeoZiQ9VfSa5ToMbBgCsR4Gas37b4%2Bo38834L%2Fkq28eODybXYg9tyyuNTS8LJh9FAUAMDTvfGOBxziWN7DCLfO6RhA1cuEbeTeASUDdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761816c03b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317566811_899982074501406_1566051669605401597_nthumb.jpg
200 OK 8.6 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317566811_899982074501406_1566051669605401597_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x187, components 3\012- data
Hash 7e9305dfb710ebc872e440b26ffe1c20
06de5a2dd7384b8264106be83cf5089687801789
b4c089521f90f979bd63880b2fdc295c6f20bc33eb2fa687382a8afe941e213d
GET /wp-content/uploads/sb-instagram-feed-images/317566811_899982074501406_1566051669605401597_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/jpeg
content-length: 8563
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8774, status=webp_bigger
etag: "6387b641-2246"
expires: Thu, 08 Dec 2022 20:07:34 GMT
last-modified: Wed, 30 Nov 2022 20:00:01 GMT
cf-cache-status: HIT
age: 12277
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mpb93Onoh5CBjihoD0bviN%2F38DTuDLTAVfvBcZs2SAiTW5gTKdqFpBi7WwQ%2BmNHAaJe1WMW0dqI5qKSpq%2FEjlFUubl2%2B0i9wmRBGXv4Q3qipw%2BYeIiQ6pp6SFTnWGI0hNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761816c06b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.1
200 OK 16 kB URL HTTP/2 perezhilton.com/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.1
IP
File type ASCII text, with very long lines (27578)
Hash 4b7cc00e450b54cd732e1aa72f42b599
e0de283fb10e2cd77dc2d9e385e586ce7495fd8e
3655359b8f96e23b90511c1b3b82c70ded16ef06c76e33cfd2d48d275e3da0d5
GET /wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.1 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:09 GMT
content-type: application/javascript
last-modified: Thu, 22 Sep 2022 13:10:59 GMT
etag: W/"632c5ee3-6bbb"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3746
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lXtJNtaNq6JhvZZm80ZcoEsZFkkzXwnS5YrtnkaaNSHfQzCldwTsYTY6D1jtK7XDdzGfKlRDROkCn1mKXQsRXWdYH6MPwRQF5Ow4N0hJNJ4X8iu8qVslkqE6NQzaGxvd5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a7f2fb4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317607547_542096880758432_4809835986780399996_nthumb.jpg
200 OK 8.5 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317607547_542096880758432_4809835986780399996_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x180, components 3\012- data
Hash f896de0e748f95f72708f1571ebe9210
7d1ccb587e6abb7b0f35a21a8fd31190ad946b98
3553513b7abef44e81d4a761ff937d71197425a582f1513a0499505c91329bcc
GET /wp-content/uploads/sb-instagram-feed-images/317607547_542096880758432_4809835986780399996_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/jpeg
content-length: 8531
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8756, status=webp_bigger
etag: "6387b642-2234"
expires: Thu, 08 Dec 2022 20:07:34 GMT
last-modified: Wed, 30 Nov 2022 20:00:02 GMT
cf-cache-status: HIT
age: 12277
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=78W60GOUXPxtVnEpAi75aJIoo4kJUXUffP9VCwRms5FVPdnloRDfBt2TUJrZf%2BiIcW4BKqajGn2kHim8XC8%2BjiAai4SVoW2YmLiRZ%2BPzHnOh1dCxo%2FPOhzTvIIh%2F8Y%2BVSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761817c0ab4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317285254_817098352683140_2499334019879670274_nthumb.jpg
200 OK 4.8 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317285254_817098352683140_2499334019879670274_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x267, components 3\012- data
Hash 729e6f45c5fabea3a5b3efbe3f1618eb
673825da7ab5dc02a7725b3e7b36dea98630311f
4197a78991c352107148efa73a0d7cb399b270c7db9ebae6a7192f012704b465
GET /wp-content/uploads/sb-instagram-feed-images/317285254_817098352683140_2499334019879670274_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/jpeg
content-length: 4795
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "6387b644-12bb"
expires: Thu, 08 Dec 2022 20:07:35 GMT
last-modified: Wed, 30 Nov 2022 20:00:04 GMT
cf-cache-status: HIT
age: 12276
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=panzbXCk5vJ%2BrDBHjwHIb7S2YfQ96xeQLvlZcI0fPX1ckYe6NnilRuotqs4L5LZIQSvL5LB9EY%2B8WFz1ZOztriVkCNFCCIfEOnzLob2BxYynZY4MzUo7ZX0t1ADElDZi%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761817c10b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317316602_1120918671945661_4534183486047358767_nthumb.jpg
200 OK 8.3 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317316602_1120918671945661_4534183486047358767_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x185, components 3\012- data
Hash eebebcb619d03fb45ea3b21531b96d73
4c32b96d42a96d393e82dbc1b72f05439c848d2e
bc00b7ff2195945fd2c80fb71db87357d10f554ce787adc3585a4d0a591a98e9
GET /wp-content/uploads/sb-instagram-feed-images/317316602_1120918671945661_4534183486047358767_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/jpeg
content-length: 8294
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8499, status=webp_bigger
etag: "6387b644-2133"
expires: Thu, 08 Dec 2022 20:07:34 GMT
last-modified: Wed, 30 Nov 2022 20:00:04 GMT
cf-cache-status: HIT
age: 12276
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k9i00sbYvhl0DxFOpgEAFp%2FIR9EvsRlflHmiZNWaE78d06dZ7OqN%2BU%2F4I7t76NjEUNuqW2akoP5JQWBnGtKOQqxlsiuaDtDTCxAsbiC7vuur1YKtW4v0J1WxcX3rLqGO9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761817c0fb4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.4.2
200 OK 8.8 kB URL HTTP/2 perezhilton.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.4.2
IP
File type ASCII text, with very long lines (1849), with no line terminators
Hash 7e69420cda50d2f11a19a127a48e33f1
a478af7a95410a7a2204448fe08a7bb348281d63
e5e871ac0fd16f6524fccb736e1bb51074c95c22576b91d4f2fbfaaf98cb7d34
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.4.2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:09 GMT
content-type: application/javascript
cf-bgj: minify
access-control-allow-origin: *
etag: W/"6103ec5e-739"
last-modified: Fri, 30 Jul 2021 12:11:10 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1232
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=83aKiGGrqO%2FSx5hakhf9KpOkoaQnEA1AmMBYqJ9NevN7LD%2BhlNZAjRzyVI8H07ZsTHtCe988AZPPDuHaGXqW7Fy3iPt4tpAvFhDE8NfTqtdAgEwoehBeqH6uwWBIbkEyOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a6f23b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317231650_809449890144818_4212010714623583129_nthumb.jpg
200 OK 8.1 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317231650_809449890144818_4212010714623583129_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x184, components 3\012- data
Hash 5fd2bcf020dbebd7183c718f5a99348d
c1452edac53f6e49568d62540020302e3a9da06b
3f3dbd7d6058da49b1b881aaa3f2bfb0fc56122e47985cb4ebb4f3a3a34719ee
GET /wp-content/uploads/sb-instagram-feed-images/317231650_809449890144818_4212010714623583129_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/jpeg
content-length: 8054
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8297, status=webp_bigger
etag: "63870d81-2069"
expires: Thu, 08 Dec 2022 08:04:18 GMT
last-modified: Wed, 30 Nov 2022 08:00:01 GMT
cf-cache-status: HIT
age: 55673
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lUfriPuKUvTA1NHA%2FoWoVDb0I3fVtART6O1UiPIIw9pmVouM420vmN2YabDWDjl2oMjV9g1SwueSJwXrWvCvWo7csTe73oSVewSIqdB2ABMABAtw%2FRiEMTOOcf7DfgUB0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761817c1eb4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317550222_1865404403799329_4758211557403025163_nthumb.jpg
200 OK 8.5 kB URL HTTP/2 perezhilton.com/wp-content/uploads/sb-instagram-feed-images/317550222_1865404403799329_4758211557403025163_nthumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x186, components 3\012- data
Hash f4483e6ed13274a3184d41ef7176fcfb
161dffd0ecea9997afcc83a1e5e4549f4795d95c
f2ca1fab2bbf519a80138eb5f4284abd6df5590bc65eb874c5fbbd4e4a26cf42
GET /wp-content/uploads/sb-instagram-feed-images/317550222_1865404403799329_4758211557403025163_nthumb.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/jpeg
content-length: 8522
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8711, status=webp_bigger
etag: "6387b646-2207"
expires: Thu, 08 Dec 2022 20:07:35 GMT
last-modified: Wed, 30 Nov 2022 20:00:06 GMT
cf-cache-status: HIT
age: 12276
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QuXd1C9WhJauc0yqVplV%2F%2FS2uTQKHYRu7xdDs%2FmHjTYzk3IQjZbPQW2tpjreq80CFHfBKNvW5xJztf6DcMcqghtTac08qEQ1vn0c8m6J5LInA06PQWTgV0Y14grnDmxnbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761817c1db4f3-OSL
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 0b975d0d76965c9bc0c48152e4e4657a
179294b2424acbe9c844d175e2fdeaad96583af2
1afe7a3fea3956be097c6de5e8ab4c2cc6125f9e57ff427ef001cce4c2bf7642
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 30 Nov 2022 23:32:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 30 Nov 2022 20:11:44 GMT
Expires: Thu, 01 Dec 2022 20:11:44 GMT
ETag: "179294b2424acbe9c844d175e2fdeaad96583af2"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
powerad.ai/detect-aau?ch=2
200 OK 2 B URL HTTP/2 powerad.ai/detect-aau?ch=2
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /detect-aau?ch=2 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
X-Firefox-Spdy: h2
powerad.ai/detect-aau?ch=1
200 OK 2 B URL HTTP/2 powerad.ai/detect-aau?ch=1
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /detect-aau?ch=1 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
X-Firefox-Spdy: h2
reporting.powerad.ai/
200 OK 2 B IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST / HTTP/1.1
Host: reporting.powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 156
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
X-Firefox-Spdy: h2
a.teads.tv/analytics/tag.js
200 OK 3.4 kB URL HTTP/2 a.teads.tv/analytics/tag.js
IP
File type ASCII text, with very long lines (4822)
Hash 6ddfb3a828a563a7719081ff9aeedaba
80286455b7c85311df5f997714b83380ac02fd6d
826524e59a21d4190f923f804a17db1513e1ee3cb4a5ed12f3bb6a5b4f370835
GET /analytics/tag.js HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +hi3J8gLh7odTbzzwPTTi1cNLRiMIMeCbLwhFS3fdhvnkPc6F/KidF+aylAlaVgqP4umQC5X3TY=
x-amz-request-id: VYTSDGA8QVA7F7Y0
last-modified: Wed, 02 Nov 2022 09:38:15 GMT
etag: "6ddfb3a828a563a7719081ff9aeedaba"
x-amz-server-side-encryption: AES256
x-amz-version-id: Y6qsPmt0o95KDo3Ibo2euzqSnxQebNV8
accept-ranges: bytes
content-type: text/javascript;charset=utf-8
content-length: 3391
cache-control: private, max-age=3600
date: Wed, 30 Nov 2022 23:32:11 GMT
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
static.adsafeprotected.com/skeleton.js
200 OK 17 B URL HTTP/2 static.adsafeprotected.com/skeleton.js
IP
File type ASCII text, with no line terminators
Hash 53fab767ecbd3bf07990b10246befbd4
49044085bb137d175d261b5fb9617c6f0f302c49
bdeed1e1c0751610c8f3dc2a5c78c93f841c366b36a7f7a54f5e6752c2656c05
GET /skeleton.js HTTP/1.1
Host: static.adsafeprotected.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 17
date: Tue, 20 Sep 2022 03:50:24 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Aug 2020 23:54:35 GMT
etag: "53fab767ecbd3bf07990b10246befbd4"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _BeJzL_Eayh-ceGkXT7q6EuyBkdQ6fD5rT24JZvOA0G8ikbyDfdS7A==
age: 6205308
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2020/07/favicon.ico
200 OK 920 B URL HTTP/2 perezhilton.com/wp-content/uploads/2020/07/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 9ce6a38ad3dd1e6689b6cce66a274aec
971296cb41d18dc3fdc2f0409efb18ba17fc511d
9780b0a81286605c9aee2470a8f023e9b518a176243c400930f1c9ddd3363b8d
GET /wp-content/uploads/2020/07/favicon.ico HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Cookie: ntvSession={}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/x-icon
last-modified: Tue, 21 Jul 2020 23:08:37 GMT
etag: W/"5f177575-103e"
expires: Thu, 08 Dec 2022 06:53:54 GMT
cache-control: max-age=691200
cf-cache-status: HIT
age: 59897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rDJhI6g1ERBgV1oC%2F6T3%2B0pp2TzzApVUGKfXGhdEI31qvEbFeR6chloOyzy%2FY2g5nEDUdlRm8R%2BXPZbhNhCIW5rEFt4lmj77N5zI6PPn3s4tz5DNHZL%2FMQbBco6XuzhJew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761823caab4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pagead/ppub_config?ippd=perezhilton.com
200 OK 167 B URL HTTP/2 securepubads.g.doubleclick.net/pagead/ppub_config?ippd=perezhilton.com
IP
File type JSON data\012- , ASCII text, with very long lines (396), with no line terminators
Hash fafcdf2429f92aede80c85de385f960e
0260ed48157550148e3ff44c173c243fa9c2e630
3b54171af49653c22bd6bd81242b73a14f3ff501dbe4fd74d056e7d9332d4238
GET /pagead/ppub_config?ippd=perezhilton.com HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
date: Wed, 30 Nov 2022 23:32:11 GMT
expires: Wed, 30 Nov 2022 23:32:11 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 167
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 30-Nov-2022 23:47:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 19:09:57 GMT
expires: Tue, 28 Nov 2023 19:09:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 188534
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/gpt/pubads_impl_2022111501.js?cb=31071037
200 OK 132 kB URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022111501.js?cb=31071037
IP
File type ASCII text, with very long lines (65395)
Size 132 kB (132177 bytes)
Hash 3308ca8addf332f89a8f9ae5fada3b60
69a0af021add1aa44292528532ef632aff2ab1d0
7c1c9e093bf8e56cf2ba9af1d8cfc092f7a98c4b9472abc3257147aa97ec0ee3
GET /gpt/pubads_impl_2022111501.js?cb=31071037 HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 132177
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 09:39:34 GMT
expires: Thu, 30 Nov 2023 09:39:34 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 15 Nov 2022 09:35:23 GMT
content-type: text/javascript
age: 49957
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f65b77252530d5d5283b9e6b6c203d3f
c9e6aaebb160a57788445e3f1de4cb5d24550d6a
3a31724cbef429ef660c038321a5a580ce15a807dca1060e50bae6161debb492
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=170722
Date: Wed, 30 Nov 2022 23:32:11 GMT
Etag: "6387d40d-1d7"
Expires: Fri, 02 Dec 2022 22:57:33 GMT
Last-Modified: Wed, 30 Nov 2022 22:07:09 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1iztNo9T2tA3NeyGu4OcEueu0CCa108NSjmSGgkbHzn1rntVHNxPcw==
Age: 3024
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash d3ad909c9c4f90ed00cf90a04e6852a8
f21c250373343e637e14adac3ce819205563c609
580673c1c60b6e11fc8efe947ea33911316a25e8797fe60f612c2628ae35c188
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 30 Nov 2022 23:32:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 30 Nov 2022 19:24:25 GMT
Expires: Thu, 01 Dec 2022 19:24:25 GMT
ETag: "f21c250373343e637e14adac3ce819205563c609"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 21d56acbd14749bdd4e4da6a3c403946
c91c7faf23ee71c7f8aa22055a3cd93700c71905
2aaf1088289b05de1be058e9e15d0e006345a52be9d77f75ae1281380ee9a75a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 30 Nov 2022 23:32:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 30 Nov 2022 20:51:36 GMT
Expires: Thu, 01 Dec 2022 20:51:36 GMT
ETag: "c91c7faf23ee71c7f8aa22055a3cd93700c71905"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
rules.quantcount.com/rules-p-GANCBjEfRH5Fe.js
200 OK 160 B URL HTTP/2 rules.quantcount.com/rules-p-GANCBjEfRH5Fe.js
IP
Hash 7602c05be39825c3fad02a96f76db456
db61024519befad6dc15191bcfe8090ca3a7ee18
a67bbdc13dec7d78a2a262845fb14cec2007d8dfad2743c3ffa666e7dbc3111f
GET /rules-p-GANCBjEfRH5Fe.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 160
last-modified: Fri, 14 Oct 2022 00:20:54 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Wed, 30 Nov 2022 22:48:40 GMT
cache-control: max-age=3600
etag: "7602c05be39825c3fad02a96f76db456"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b2pTRi4oygjfC5CX2huKnXKIdsLjWIUJAUO_P5hnz-ozrEnE-o-M-g==
age: 2696
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eba8a86a5b513b457f94b4d199057018
1c996cb55b2658dfcdcabade9888044f3b9b9cd9
94ab23c67acc6c8218791949b51c0991feb9224e62ebb2819edfb99ef4930cc2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=160616
Date: Wed, 30 Nov 2022 23:32:11 GMT
Etag: "6387b390-1d7"
Expires: Fri, 02 Dec 2022 20:09:07 GMT
Last-Modified: Wed, 30 Nov 2022 19:48:32 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jZyKMk32zsngQPOgx7MMK1Rage03ULNsOFjobmRssmcWI499g5RSNw==
Age: 1235
perezhilton.com/wp-content/uploads/2020/07/perez-hilton-logo-300x49-1.png
200 OK 3.8 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2020/07/perez-hilton-logo-300x49-1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c7764c24e2de3456874de6498526d64f
3eba45267451f1f7207775df71e25646a2f39b42
2d420940dd06b215993e088c1fa5e041093186882e0c5533f67b4d696f34fbc0
GET /wp-content/uploads/2020/07/perez-hilton-logo-300x49-1.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Cookie: ntvSession={}; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0; _pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/webp
content-length: 3834
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6439
content-disposition: inline; filename="perez-hilton-logo-300x49-1.webp"
vary: Accept
etag: "5f177546-1927"
expires: Wed, 07 Dec 2022 23:06:47 GMT
last-modified: Tue, 21 Jul 2020 23:07:50 GMT
cf-cache-status: HIT
age: 87924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SaCpf%2FdhGOweGD1KNFwkcjupdSBJ3LiS%2BIbrsfD9ZffMz6A%2Ft6%2FNOPQRhcD8xuJV6x0wdXi%2BgYFig6AuScXht1fxPeEYpg9CiL9jbm8g7ce%2BX2nIJP7uxb7vQSUsoe0VdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772761855fabb4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/feature-bg-holiday-2.jpeg
200 OK 33 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/feature-bg-holiday-2.jpeg
IP
File type JPEG image data, progressive, precision 8, 1584x634, components 3\012- data
Hash f8df43724c7b37f7679dea45e5d79517
b6b2d2d746ee5aab3a8027bef8e53bcecad50e82
ed4528db17b4e83313f696cb7268e09c141c23ed99a1cc9ed3b561feb3c0c7ef
GET /wp-content/themes/understrap-master/images/feature-bg-holiday-2.jpeg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Cookie: ntvSession={}; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0; _pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/jpeg
content-length: 33081
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=40451, status=webp_bigger
etag: "61a7284c-9e03"
expires: Sat, 03 Dec 2022 15:33:48 GMT
last-modified: Wed, 01 Dec 2021 07:46:20 GMT
cf-cache-status: HIT
age: 460703
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ULXnMTsa54lTCBjYLVvWO6w9G4N9b80wlae2imveCAtgimde0GkZrG1FKBHRS86gV22KSfMAybmrLm9DzW%2F%2FbmsXL5grQyAW22ViGHUy%2FlW2AiIqQ5k2XCLdD1v7%2BUrzQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761855fafb4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/11/Bethenny-Frankel-RHONY-Sonja-Morgan-Tea-1024x646.jpg
200 OK 73 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/11/Bethenny-Frankel-RHONY-Sonja-Morgan-Tea-1024x646.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1024x646, components 3\012- data
Hash b72f4f09570980fa62caa1c1b858c44b
0040550e5befff3caae987b9ab19f91e95f5c75a
2fa51b36a54142615ed02e22d90869c7148e89795203cf10e1d6a1d8d1577398
GET /wp-content/uploads/2022/11/Bethenny-Frankel-RHONY-Sonja-Morgan-Tea-1024x646.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Cookie: ntvSession={}; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0; _pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: image/jpeg
content-length: 72936
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=82752, status=webp_bigger
etag: "636c54db-14340"
expires: Mon, 05 Dec 2022 14:58:28 GMT
last-modified: Thu, 10 Nov 2022 01:33:15 GMT
cf-cache-status: HIT
age: 290022
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QzdHRLOd8mcqEU4pt6iDsHZlpoOrGPPDcXAwmq%2BVU7m%2BxlWaegEW%2BU8g8DJZJUOaY25CMX1vbd5Jnqm3BVPSj4PcQGyOoJZyCkEQS61kaRn0NX4c86bimTq9lY442ZrfPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761855fb3b4f3-OSL
X-Firefox-Spdy: h2
socialcanvas-cdn.kargo.com/js/rh.min.js
200 OK 164 kB URL HTTP/2 socialcanvas-cdn.kargo.com/js/rh.min.js
IP
Size 164 kB (163880 bytes)
Hash 358bf9b4d03eb4fd3e28631d8c4b9214
d8c0b62f203ffc2c99cbf9a42a8567be089c384c
e72fcdf619aa88220b939ee83ff74d3b954acf2bc4d5f1db573bd5456757d2bd
GET /js/rh.min.js HTTP/1.1
Host: socialcanvas-cdn.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sat, 26 Nov 2022 19:14:06 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 30 Nov 2022 19:14:34 GMT
etag: W/"6c131e213ea3789a1cad47af0b0592f8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SIDgxYicS_tgPeMPCvSDvk_ZcMoaXkvVUPzFHt9SBkVIzM8w6W4p4A==
age: 15457
X-Firefox-Spdy: h2
prd-collector-anon.ex.co/main/events
200 OK 0 B URL HTTP/2 prd-collector-anon.ex.co/main/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /main/events HTTP/1.1
Host: prd-collector-anon.ex.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 668
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: text/plain; charset=utf-8
content-length: 0
vary: Origin
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
socialcanvas-cdn.kargo.com/js/scpb.js
200 OK 89 kB URL HTTP/2 socialcanvas-cdn.kargo.com/js/scpb.js
IP
File type ASCII text, with very long lines (64979)
Hash a5a5bdaf0ada6299275cb169dce26a86
5e35c31edd02627c5f819137731bc6c28f89b7c2
1f3e5879d16114236b890d43b7eeda49b7682421317736f4bfdfd4ecdf89fa4f
GET /js/scpb.js HTTP/1.1
Host: socialcanvas-cdn.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 18:54:34 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 30 Nov 2022 19:14:18 GMT
etag: W/"4102c8de7c45dc9353378b8f31a06708"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X3e3wa1_Cd_kEwZ91A8bpNJcUkPnPp5PqMmU8OhXkzS4MdWIyKslDg==
age: 16126
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 533f66ef53706466ce20dc9aebf11812
0c0d713d538eb224deeb9241917a117205f16cb2
8ce7b68022c847b59b9a132ada3a75eea73bb57bae4683901c8df08fa255ba79
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hb.brainlyads.com/pbjs_wrapper.v2.0.js
200 OK 28 kB URL HTTP/2 hb.brainlyads.com/pbjs_wrapper.v2.0.js
IP
Hash 477468e9cfa3cafd75bf93646b44683e
6746805c2cfa9ebf01d0c43c18df5667a400764b
fc4b49a469ce9a0307814798b4a0cd059372e24ea27ba76a20aa336f9c07e572
GET /pbjs_wrapper.v2.0.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: application/javascript
last-modified: Mon, 07 Nov 2022 07:54:24 GMT
vary: Accept-Encoding
etag: W/"6368b9b0-c22f"
expires: Wed, 07 Dec 2022 23:32:11 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
i3.ytimg.com/vi/vn0hXkG2xuE/hqdefault.jpg
200 OK 12 kB URL HTTP/2 i3.ytimg.com/vi/vn0hXkG2xuE/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash bb9d052e569885ea22af77387772b8a0
37ca0e29e3041061705955336144ee736b1689b9
75638571f001df322ce93ee0aca0427c2df5b755f717ee86b2ad44f11bef1690
GET /vi/vn0hXkG2xuE/hqdefault.jpg HTTP/1.1
Host: i3.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 12135
date: Wed, 30 Nov 2022 23:32:11 GMT
expires: Thu, 01 Dec 2022 01:32:11 GMT
cache-control: public, max-age=7200
etag: "1669081438"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18023
Expires: Thu, 01 Dec 2022 04:32:34 GMT
Date: Wed, 30 Nov 2022 23:32:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18023
Expires: Thu, 01 Dec 2022 04:32:34 GMT
Date: Wed, 30 Nov 2022 23:32:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18023
Expires: Thu, 01 Dec 2022 04:32:34 GMT
Date: Wed, 30 Nov 2022 23:32:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18023
Expires: Thu, 01 Dec 2022 04:32:34 GMT
Date: Wed, 30 Nov 2022 23:32:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18023
Expires: Thu, 01 Dec 2022 04:32:34 GMT
Date: Wed, 30 Nov 2022 23:32:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1039182464db1365a476dd88029b97d8
06b395b4fbad5ad9c9fb6a4fb24c1eee607aa8ac
2e081da1464a18d755a841558f63303634a9e22df888c9c43246565abfc3d48d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c95c82f-93f9-4783-a6c2-2c737a51d52c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12655
x-amzn-requestid: beeeccd0-a494-4d0c-91e9-0d1e2ab37b6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb0YoFmMIAMFT4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cdd0-60f5e2286cf3965a42ab31b9;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:40:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CiGOvF7Lmz8cICQcjUcE6QGokbAIAd3WClI4PK_aDSxo-yHVcPPA7w==
via: 1.1 49cdeca097624936e070b73619df7da8.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:29 GMT
age: 6402
etag: "06b395b4fbad5ad9c9fb6a4fb24c1eee607aa8ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bbca075-74f3-4647-8b00-66430fff5397.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bbca075-74f3-4647-8b00-66430fff5397.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70afa08b7d0b64772b90ae190689e6c1
527cf32104041423176fadd3cfc2120fe63f6bfc
31ebf9decb53b8180922c4b10d0427aba95a802246a5ced8ec368d814a33b843
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bbca075-74f3-4647-8b00-66430fff5397.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9993
x-amzn-requestid: 7d7febbc-2bdf-44e9-9727-9c56b5bcb138
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1VNFZiIAMFV-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cf54-1f89231026a9b5c467324134;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:47:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qK6AAXX3bqNSjQerE2jNysmMWX6X5j4Mm-MRQfG06YU7YmklFfE3NQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:50:08 GMT
age: 6123
etag: "527cf32104041423176fadd3cfc2120fe63f6bfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
socialcanvas-api.kargo.com/v2/request
200 OK 1.3 kB URL HTTP/1.1 socialcanvas-api.kargo.com/v2/request
IP
File type JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1289), with no line terminators
Hash e8b25f21e561a8407514dcce6569f421
5c0dcdfbaa38b18a48d0b9fac6760052df220b22
37899332c1e04d19168935a3dde5fec4d0504371087fdde176eeae36d0f23194
POST /v2/request HTTP/1.1
Host: socialcanvas-api.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 247
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.0
Date: Wed, 30 Nov 2022 23:32:11 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 1289
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With
ETag: W/"509-XA3N+6o4sYpI0Ln6xnYAUt8iCyI"
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1e6b6ba4f82221b41c3d9129008c76d
2f9532d698b4c28df23e18bbb66399ec776d5b9f
218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: c08f55b2-7ac6-4dec-b53c-fd3f4533f9c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpBiGoHIAMFR2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bba3-69c2c2d05e55fd745caf1dce;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:09:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w_Mb-0pBwp-pUyU2bdJ8MhrGHkk6VQgJmcGV9MfHwj_yGUMIYZkyrg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 10:53:00 GMT
age: 45551
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9768b9bd-d7a9-4426-a5b2-ea1a71860733.jpeg
200 OK 38 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9768b9bd-d7a9-4426-a5b2-ea1a71860733.jpeg
IP
Hash 70156ddb30cffc57404a28343b1da533
d4cc23c3ac317e3dd4f5f2e6a7b4d7d855898634
cce194983135fe442583d9ac55347a0390b83376f2d1733ca446335f3badefae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9768b9bd-d7a9-4426-a5b2-ea1a71860733.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2150
x-amzn-requestid: 59ef9edf-d9c1-45d0-b084-adf8e2f0738d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cXQcKGPXoAMFbWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6385fab4-693e8d7d5632d48722e31757;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 12:27:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iO-jUNMNzAM6zHh1oEftgZcW18vxdgaFGpNe4a1WHU97pRMMuHIKaQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 17:51:49 GMT
age: 20422
etag: "9bc2e9039e9340b83ffcfb90e4e2c631a8723e60"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/lazy-load-optimizer/assets/frontend/js/lazysizes.min.js?ver=1.4.7
200 OK 20 kB URL HTTP/2 perezhilton.com/wp-content/plugins/lazy-load-optimizer/assets/frontend/js/lazysizes.min.js?ver=1.4.7
IP
File type ASCII text, with very long lines (7209)
Hash 3d2ac144754096be2a4234e0abd6854c
e71a4495c855fd2c754fb5b6bc38ec15fa27852a
887dc9eb48528835eb7df5d95b2fa111186e733b18d6cadb8c4eefe8265ee29f
GET /wp-content/plugins/lazy-load-optimizer/assets/frontend/js/lazysizes.min.js?ver=1.4.7 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/javascript
last-modified: Wed, 01 Jul 2020 22:16:26 GMT
etag: W/"5efd0b3a-1c43"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FgFzQnm32GZ%2BPlepJCuS6iwtIC6RkvbA5t9uupKVUx9w9ogfWTZlIP8sTHU0tew5Dj4ujXEuHrFIJ%2Bgv9ypjlttJVS9BCdUIuJFDyUmZItwmcdqEfk0tt3RwWbBHmJg%2FFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a6f21b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc2c1d47-fc4a-4f23-a6f7-5ac8f3a68490.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc2c1d47-fc4a-4f23-a6f7-5ac8f3a68490.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash acffcb88ce68b2d70c9c046a7b5a4aa8
cd016e6c0bf5c6eef06e933c9a5257ff4fca9bc1
692d782ac1d812de6dadbcfe46034b6b5d8bbd586e56beedd96dc4d65445dd4c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc2c1d47-fc4a-4f23-a6f7-5ac8f3a68490.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12035
x-amzn-requestid: eef7d417-c6ca-4e3f-ac00-1425f3d5c4a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb0TSGHDIAMF_jA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cdae-467c79a805dfb5622687f628;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:39:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: haFJ2LZecbT4HRbkvcaZxR4SAIx5cGxNyghKiDOJVX6xDkPwzc2wNQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:34 GMT
age: 6397
etag: "cd016e6c0bf5c6eef06e933c9a5257ff4fca9bc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 30 Nov 2022 22:46:55 GMT
expires: Thu, 01 Dec 2022 00:46:55 GMT
cache-control: public, max-age=7200
age: 2716
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f1817048a125145c8b68dbe8f1a4553f
890bac4a7c0229270c6e368549854920994aadff
2ae9c0414b5db41ea6174a4b2c78836a9ee5ab309ece9d08bd8e5dbf189ab6fd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 23:32:12 GMT
Last-Modified: Wed, 30 Nov 2022 22:43:24 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 70kp9O2n7oOK7ABkg5WaRlXHOtT6l-al3BK-FnKN_Ef0Fh3qUr46GQ==
Age: 2929
rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&se=e30&dtstmp=1669851130365
302 Found 0 B URL HTTP/2 rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&se=e30&dtstmp=1669851130365
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&se=e30&dtstmp=1669851130365 HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 30 Nov 2022 23:32:12 GMT
content-length: 0
trace-id: cc45bd5542a31b1a
vary: Origin
location: /j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&se=e30&dtstmp=1669851130365&n3pc=true
set-cookie: lidid=c623acf2-850b-4dc3-84be-a9060d32e038; Max-Age=63072000; Expires=Fri, 29 Nov 2024 23:32:12 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0e11992aa759974631ff2aadbbbaed13
d34ea26cdf03936460bf04683aeb9d55ce6bc15a
31e5e76f28905d1277bc56b23531721acb077f5ff16373078e2ee1ff81609cec
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 23:32:12 GMT
Last-Modified: Wed, 30 Nov 2022 22:41:43 GMT
Server: ECS (bsa/EB1B)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5jf8Cne9z5syef8RXSIvi7WF16kzpiJBGUKXvvqLlmPbNh4r2bVj_Q==
Age: 3029
rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&se=e30&dtstmp=1669851130365&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&se=e30&dtstmp=1669851130365&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&se=e30&dtstmp=1669851130365&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Content-Type: text/plain
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:12 GMT
content-type: application/json
content-length: 13
trace-id: ed88ef070f938a4c
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: b9fc3af3-b449-4a6b-a964-bfb78882450e
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
301 Moved Permanently 167 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 167
location: https://d3div1mtym39ic.cloudfront.net/aax2/apstag.js
server: CloudFront
date: Wed, 30 Nov 2022 00:42:38 GMT
via: 1.1 36cd2d0f34e25c2dc5099656a60bedac.cloudfront.net (CloudFront), 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-C1
x-amz-cf-id: x2yaiMn5jsgf76UAd9hxJuyGXaqH77RGHEqnbDfCb7uWzECa6wRwiA==
age: 82174
X-Firefox-Spdy: h2
jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F
200 OK 2.9 kB URL HTTP/2 jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F
IP
File type Unicode text, UTF-8 text, with very long lines (15096), with no line terminators
Hash 2c93fa2e3a7a85f86b613bb719c343eb
db3d29dcb1a08c4445d58658ef20463221f72cd3
b2bfdf7d35500a1f097d6dd68ccc1933fcf5d8e39b9f808960d0780f9e172066
GET /t?ntv_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:12 GMT
content-type: text/javascript;charset=UTF-8
content-length: 2907
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Thu, 30-Nov-2023 23:32:12 GMT; Path=/; Secure; SameSite=None;
content-encoding: gzip
X-Firefox-Spdy: h2
s.ntv.io/css/click-out-icon.css
200 OK 618 B URL HTTP/1.1 s.ntv.io/css/click-out-icon.css
IP
File type ASCII text, with very long lines (618), with no line terminators
Hash 43c31858c9aac81661d142577cb1fc68
8a736cfb2890869ccca3a08a0fee958db9065e49
8e41a8e6b02e146fe25fa71262a12a24c80ee7e0debfcae0757a4fe6c67de5a9
GET /css/click-out-icon.css HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: L+7Dni3Dair+fW/8ocWuYL/NaUFoV+hx3vOaVlgEpoT66xJpnMwjDXuX9530dIUTy5iPTf5TMMc=
x-amz-request-id: HJ96NMDZYRWSV0KK
Last-Modified: Wed, 13 Sep 2017 22:37:26 GMT
ETag: "43c31858c9aac81661d142577cb1fc68"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 618
Date: Wed, 30 Nov 2022 23:32:12 GMT
Connection: keep-alive
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
hb.brainlyads.com/prebid.js
200 OK 182 kB URL HTTP/2 hb.brainlyads.com/prebid.js
IP
Size 182 kB (181796 bytes)
Hash 05ac16bce14653feae0669d179fbb66f
905066ef52446b2622ad1830678fd4354c4719d4
962eccb052c9b5bd8377a25f61a4ad691f76c8c00642ac05749e2901743ff5dd
GET /prebid.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: application/javascript
last-modified: Fri, 18 Nov 2022 11:56:40 GMT
vary: Accept-Encoding
etag: W/"637772f8-91c6c"
expires: Wed, 07 Dec 2022 23:32:11 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
s.ntv.io/font/click-out-icon.ttf?sjshwd
200 OK 1.1 kB URL HTTP/1.1 s.ntv.io/font/click-out-icon.ttf?sjshwd
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash f587575d5d6dc5e7dc296da77fb11396
126b3b2fba2568c14db1fa29bbd43a2c531fd68e
ee2214a948aa510978878e09453b21c85f1bcfe78a7c55412268ad85a5fb147d
GET /font/click-out-icon.ttf?sjshwd HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://s.ntv.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: i8nh5aPLPmXLN4QzOJ7GANgCoGDjXVmGrCY6WciZFBMk301tSFeukdbHgBxbAA8hvjeSCzmZ2oY=
x-amz-request-id: 7RCC3AM58BFB44M1
Last-Modified: Tue, 04 Oct 2016 00:20:40 GMT
ETag: "f587575d5d6dc5e7dc296da77fb11396"
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 1092
Date: Wed, 30 Nov 2022 23:32:12 GMT
Connection: keep-alive
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
region1.google-analytics.com/g/collect?v=2&tid=G-9JS9Z0NFL0>m=2oebs0&_p=2072228918&cid=438927426.1669851131&ul=en-us&sr=1280x1024&_s=1&sid=1669851130&sct=1&seg=0&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&dt=Exclusives!%20Archives%20-%20Perez%20Hilton&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-9JS9Z0NFL0>m=2oebs0&_p=2072228918&cid=438927426.1669851131&ul=en-us&sr=1280x1024&_s=1&sid=1669851130&sct=1&seg=0&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&dt=Exclusives!%20Archives%20-%20Perez%20Hilton&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9JS9Z0NFL0>m=2oebs0&_p=2072228918&cid=438927426.1669851131&ul=en-us&sr=1280x1024&_s=1&sid=1669851130&sct=1&seg=0&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&dt=Exclusives!%20Archives%20-%20Perez%20Hilton&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://perezhilton.com
date: Wed, 30 Nov 2022 23:32:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 20861c61e0c7fd9cba68ae23a6850378
b32a3c5490a0ff301cf2854d1642284bb2ed541e
207dea743bd3640dd2c825cb866c746ae33b151943d9674459f96e16d1805b6c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 23:32:12 GMT
Last-Modified: Wed, 30 Nov 2022 22:47:24 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CWthlilNo6t7ZcM30vwXOrzHKTXZjPqXBijy1JB507m_fh56PZKZUg==
Age: 2688
ocsp.digicert.com/
200 OK 471 B IP
Hash ad24f872846f58c28c94dba770fd9bff
346ee4427235f4fd2313f2d2bf0a6e355da8eb50
e8b60be8f2b23158324c850cdf19d90d902edd72d474d42f51f2947340d92627
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3039
Cache-Control: max-age=95125
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:12 GMT
Etag: "6386acb2-1d7"
Expires: Fri, 02 Dec 2022 01:57:37 GMT
Last-Modified: Wed, 30 Nov 2022 01:06:58 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ntvcld-a.akamaihd.net/image/upload/w_860,h_860,c_fill,g_auto:text,f_auto,fl_lossy,e_sharpen:70/assets/8892DB09B2354AA69FD693D1E4C03DCF.png
200 OK 108 kB URL HTTP/1.1 ntvcld-a.akamaihd.net/image/upload/w_860,h_860,c_fill,g_auto:text,f_auto,fl_lossy,e_sharpen:70/assets/8892DB09B2354AA69FD693D1E4C03DCF.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Size 108 kB (108276 bytes)
Hash 974cb0ad12a39c96b2f028d58fa5bbde
1f3185f361914bb722b2be6681f6831dcb2b7864
834890445ea49235eafda2c536207a97e6fb1a1b1b16d2d638365d5400fdad10
GET /image/upload/w_860,h_860,c_fill,g_auto:text,f_auto,fl_lossy,e_sharpen:70/assets/8892DB09B2354AA69FD693D1E4C03DCF.png HTTP/1.1
Host: ntvcld-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
ETag: "dd194daf2bb3d7ca6f03ebc67ecbb897"
Last-Modified: Sun, 30 Oct 2022 18:09:48 GMT
Server: Akamai Image Manager
X-Serial: 939
X-Check-Cacheable: YES
Content-Length: 108276
Content-Type: image/webp
Cache-Control: private, no-transform, max-age=2227091
Expires: Mon, 26 Dec 2022 18:10:23 GMT
Date: Wed, 30 Nov 2022 23:32:12 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
ocsp.digicert.com/
200 OK 312 B IP
Hash 52c84e1e59627a121e6261c081076a4c
e269d1f1e192a8028b57fe163fcfa0fe60b4207f
64839566e0d7103b29cf8e500d06b3768699f2d8a0a1c7025f7921665ca16f28
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2972
Cache-Control: max-age=92557
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:12 GMT
Etag: "6386a2ed-138"
Expires: Fri, 02 Dec 2022 01:14:49 GMT
Last-Modified: Wed, 30 Nov 2022 00:25:17 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 312
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cd742f29536dabafd8fcb6ab574cf06
a22cf75118be986be460f3c5393d6606fd6f62d2
ae1c41e69bda0402e8bbbdf3e07bfe9faf75a083031c65da8d11c464c16b02cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE1C41E69BDA0402E8BBBDF3E07BFE9FAF75A083031C65DA8D11C464C16B02CF"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6458
Expires: Thu, 01 Dec 2022 01:19:50 GMT
Date: Wed, 30 Nov 2022 23:32:12 GMT
Connection: keep-alive
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5
200 OK 699 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5
IP
File type JSON data\012- , ASCII text, with very long lines (699), with no line terminators
Hash c3ae1582883189831fc9d2b110aad0ad
b401c55f9459b3c1c9dbeabf34fd4404002099b3
6d54aecd2bd9fef0d74763ef48135aded46f2a190546075cf9466b9e5296c8a9
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 699
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Wed, 30 Nov 2022 19:24:34 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _tONeoyoQCvECb8P1oFxYe6vgJtFFq5CtdhR1fVwjqVH9d5iLzHhPg==
age: 14858
X-Firefox-Spdy: h2
htlb.casalemedia.com/openrtb/pbjs?s=501529&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22178bb35ac20b92b8%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2218b52f65df0d76f8%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22501529%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22e9914bf1-4a71-4fd1-a682-d478d58deab0%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
200 OK 38 B URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=501529&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22178bb35ac20b92b8%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2218b52f65df0d76f8%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22501529%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22e9914bf1-4a71-4fd1-a682-d478d58deab0%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 902a965fb39fcebbba639e3f1cd7f57d
04fe6c7538afbe696b3c0e793283391eeb45a530
3af35f4945b4ef9df2b600637bea73bc6ce6fc1a988a3578e6725e2916178cdb
GET /openrtb/pbjs?s=501529&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22178bb35ac20b92b8%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2218b52f65df0d76f8%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22501529%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22e9914bf1-4a71-4fd1-a682-d478d58deab0%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:12 GMT
content-type: application/json
content-length: 38
cf-ray: 7727618b6b2a0af6-OSL
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EwnXo0TUkyZ8cL7SF%2Fl6zdQsBV7IYKsTgi%2BW5xgvp%2FIbH0atehZ%2B%2B5QPTaX6zeOl4UMj8E5NqFNqYddctVFMqVJpSmFkazCEiOuANZBBht2Hde2eBE1%2B0kW%2F7%2FmyVo695Mz%2Bkxh2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 831
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Wed, 30 Nov 2022 23:32:12 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
200 OK 2.8 kB URL HTTP/2 pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
IP
File type C source, ASCII text, with very long lines (2658)
Hash bf5da1c2137a9f95540c5c865952c04b
d07a569ff37d68467841990cad5d2a99e1a2e37d
8e521ebeb6ce59914c54f532b1577efd671f4b02bb3c331e01b4a7e79a02cfea
GET /v5/pixeljs/Hc6PdfQeAi.js?dne=1 HTTP/1.1
Host: pixel.zprk.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:12 GMT
content-type: text/plain;charset=UTF-8
content-length: 2753
access-control-allow-methods: POST, GET, DELETE, PUT
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 128 kB URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
Size 128 kB (128190 bytes)
Hash 2c5b358aea5abaecc4ccdeb53ef728e9
e245e6ed684ab8f038f7ee4a0cd04c292f8e5672
0be77abdb94d3832d9355ebb9cc108b3064bdfb052cd6c6b8412bafd799b2827
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 18 Nov 2022 03:05:15 GMT
x-amz-version-id: vkCJAv2LVCiDvkjoOZrS5s9fefeFFUOq
server: AmazonS3
content-encoding: gzip
date: Wed, 30 Nov 2022 04:10:11 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i--xmMWXhWGqHJ5fAEilaWHxxmmIg1nbF2i-caR5i1nWC6ZwgIJXgg==
age: 70124
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17888&site_id=442788&zone_id=2548858&size_id=2&p_pos=atf&us_privacy=1---&rp_schain=1.0,1!nextmillennium.io,15042,1,,,&eid_pubcid.org=e9914bf1-4a71-4fd1-a682-d478d58deab0%5E1&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tk_flint=pbjs_lite_v6.29.0&x_source.tid=81f990b2-019b-455c-bd11-f3890b420032&l_pb_bid_id=10a8d9433278ef&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5140480639039442
200 OK 240 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17888&site_id=442788&zone_id=2548858&size_id=2&p_pos=atf&us_privacy=1---&rp_schain=1.0,1!nextmillennium.io,15042,1,,,&eid_pubcid.org=e9914bf1-4a71-4fd1-a682-d478d58deab0%5E1&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tk_flint=pbjs_lite_v6.29.0&x_source.tid=81f990b2-019b-455c-bd11-f3890b420032&l_pb_bid_id=10a8d9433278ef&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5140480639039442
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fb9ba48461f6b42dceb136d1f9f0ae83
07362da3a24f9ae759a2c2557da1fdd7ba9f44cd
11951b3a1e492b4f2615594bf35408676ea183b29fe469d120549ce3a7414303
GET /a/api/fastlane.json?account_id=17888&site_id=442788&zone_id=2548858&size_id=2&p_pos=atf&us_privacy=1---&rp_schain=1.0,1!nextmillennium.io,15042,1,,,&eid_pubcid.org=e9914bf1-4a71-4fd1-a682-d478d58deab0%5E1&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tk_flint=pbjs_lite_v6.29.0&x_source.tid=81f990b2-019b-455c-bd11-f3890b420032&l_pb_bid_id=10a8d9433278ef&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5140480639039442 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Wed, 30 Nov 2022 23:32:12 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB4A907C-1M-5MIZ; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:12 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqTUbJPQ9j9/u9DtVM30fCgeJct9d5f2un1uMjrlrBFl+Zppt9Bb1XYHe6QAskPRNMx+FptCLf6SgD0N5xGbqay; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:12 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 240
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash dc36a33da93069b50f5c8a0865315dba
4ca43809500f60bd7de693bec3d8db8f6ad37110
91376a5c5eb91db572f1ddf8a50bd6e9ba299c4e37e8bdfd02dc1ca0e711c0bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2959
Cache-Control: max-age=135016
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:12 GMT
Etag: "638748d5-117"
Expires: Fri, 02 Dec 2022 13:02:28 GMT
Last-Modified: Wed, 30 Nov 2022 12:13:09 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
onetag-sys.com/prebid-request
200 OK 41 B URL HTTP/2 onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c15203d1319c02fe2a06d78bc45eccf
40386992654bdda331c8f6eb21ac79de396119ee
cc81a9c5e7147dba347b0ffd34f64e9a7c40f25782569fec5c3fc68b4017badb
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 942
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://perezhilton.com
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 9f102c815e39d6274b08199e22fbf9fa
bee276a9e8cddd145a90e4540d8ccdeaf394a07e
2f3993ebc474a556786e526301eebf4e39eb751c72ba140912d5f7f7661f2eae
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 30 Nov 2022 23:32:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 30 Nov 2022 20:55:32 GMT
Expires: Thu, 01 Dec 2022 20:55:32 GMT
ETag: "bee276a9e8cddd145a90e4540d8ccdeaf394a07e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
200 OK 471 B IP
Hash 1af43ae95c2550187ccfc072367d57ce
80022d79b55c6dc914fd24287ab8ed32d322ce0f
74eecd329935c36344eb8606686551d9a58b02ff7206675aee6562058fb5235f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2959
Cache-Control: max-age=135016
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:12 GMT
Etag: "638748d5-117"
Expires: Fri, 02 Dec 2022 13:02:28 GMT
Last-Modified: Wed, 30 Nov 2022 12:13:09 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
hb.undertone.com/hb?pid=3757&domain=perezhilton.com&ccpa=1---
204 No Content 0 B URL HTTP/2 hb.undertone.com/hb?pid=3757&domain=perezhilton.com&ccpa=1---
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /hb?pid=3757&domain=perezhilton.com&ccpa=1--- HTTP/1.1
Host: hb.undertone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 650
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: private, max-age=0, no-cache
date: Wed, 30 Nov 2022 23:32:12 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSDo OUR BUS UNI COM NAV"
pragma: no-cache
server: istio-envoy
set-cookie: UTID=7f455268594845c1a75e886d7d6fe9d7; Path=/; Domain=undertone.com; Max-Age=31536000; Expires=Thu, 30 Nov 2023 23:32:12 GMT; Secure; SameSite=None
UTID_ENC=7j90rp7u9h508ngmcbhtrvnx3; Path=/; Domain=undertone.com; Max-Age=31536000; Expires=Thu, 30 Nov 2023 23:32:12 GMT; Secure; SameSite=None
x-envoy-upstream-service-time: 2
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F8bZ4YXjZR4Rwyc-n8Kc6d4m4NxE_q-WjQBVrPviQJ2z9IZRr8qJLg==
accept-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.29.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.29.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0468968116d3f39a4a478e5d0770e672
585cb203d27de6dfff2915204c698d99ed4d0997
f6a5b0f33e3c36ab4cd297da7f0656279063daa5378590608865fc2f9531c16f
POST /rtb/bid?src=prebid_prebid_6.29.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 753
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:12 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://perezhilton.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Content-Length: 99
X-Sovrn-Pod: ad_ap1ams1
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7d456684c78e7fca7ac95acb2c50f0c4
3feef4f0691d4c99c781e4c57fba9e49aa53c336
2562244991ea22cfb9fdd2fedf4100796e23e48205bed9fd1ba720dc775add98
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88966
Date: Wed, 30 Nov 2022 23:32:12 GMT
Etag: "638694cd-1d7"
Expires: Fri, 02 Dec 2022 00:14:58 GMT
Last-Modified: Tue, 29 Nov 2022 23:25:01 GMT
Server: ECS (nyb/1D31)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0c3bBsHLnAD-DCjMoHIp0l5jIhSCYKHE1uRYOjJip6urRy7rUUoixg==
Age: 2997
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3aec724957d672d711ed8cb35cdec077
6e70c128f823970af205d3c5f8537bbe6fc5f034
f4a5dc391366cebdf4eb77dbb66ca0c10b19478e5e1ff673185b586c8f7446dc
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 655
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 30 Nov 2022 23:32:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: f1475cf3-2057-4b3c-846e-56593f785742
Set-Cookie: icu=ChgI195jEAoYASABKAEw_M-fnAY4AUABSAEQ_M-fnAYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=8140033622228162210; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.sectigo.com/
200 OK 472 B IP
Hash 7bb7a9e05d9175acfed67cf1000a5fce
d46c3ed61290110a2162cfbd73639a825f01e136
f0ac081e3ae61a9283f4e6a3e7ca4f75273f28f60b1673193fa907ed72935ea2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:12 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 00:11:59 GMT
Expires: Tue, 06 Dec 2022 00:11:58 GMT
Etag: "d46c3ed61290110a2162cfbd73639a825f01e136"
Cache-Control: max-age=433785,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7727618a2d82fab8-OSL
hb.emxdgt.com/?t=1500&ts=1669851131320&src=pbjs
204 No Content 0 B URL HTTP/2 hb.emxdgt.com/?t=1500&ts=1669851131320&src=pbjs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?t=1500&ts=1669851131320&src=pbjs HTTP/1.1
Host: hb.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 744
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 23:32:12 GMT
cache-control: no-cache
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
access-control-allow-headers: security, Content-Type
X-Firefox-Spdy: h2
p.cpx.to/p/12967/px.js
200 OK 2.0 kB IP
File type ASCII text, with very long lines (1990), with no line terminators
Hash 5dbddde1d9530a933894a8cefd6890d2
2539ba49075ba661adeaecb49aa4b88f75ce4959
f266acb707c5b2704c3b6e18e0888d7995bad0ba0ffec4a125146f7e3d058583
GET /p/12967/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2419200, public
Content-Type: application/javascript; charset=UTF-8
Date: Wed, 30 Nov 2022 23:32:12 GMT
Content-Length: 1990
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c3b0ef9e33cb946faf8b983026df9fa1
abdd7c70e1a908933d2e97ecd286cba81eee0753
9de9e35c87bd787c4ccf4a71e4f0782729ae741d905d246ed3537b7f4bfe4577
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 23:32:12 GMT
Etag: "6386f45a-1d7"
Last-Modified: Wed, 30 Nov 2022 22:43:55 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZNdIiKHwcIlRFVqLTMZJw_TEhjqTLqK1tlrOE9R5Y9SMLf3bvlzofg==
Age: 2897
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&pid=hUBSKYlnV4MMR&cb=0&ws=0x0&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22fdb1-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%5D&schain=1.0%2C1!nextmillennium.io%2C15042%2C1%2C%2C%2C&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 182 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&pid=hUBSKYlnV4MMR&cb=0&ws=0x0&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22fdb1-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%5D&schain=1.0%2C1!nextmillennium.io%2C15042%2C1%2C%2C%2C&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash 03206b3becd3f319748be27fac14e41e
de0bf799d74c58057efc333d7d44b443e17cbfa0
9ef6333d9a5248ee0a6db9b1a66792f5ae0c79f9588040fb555bb888bc5ea2de
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&pid=hUBSKYlnV4MMR&cb=0&ws=0x0&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22fdb1-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%5D&schain=1.0%2C1!nextmillennium.io%2C15042%2C1%2C%2C%2C&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 182
server: Server
date: Wed, 30 Nov 2022 23:32:12 GMT
x-amz-rid: 60CXFY60DFM86ZRWTCSV
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZzXztMrV-ppZgTTDNfFytchJcWk85OasI4cNDcpwPh9rOMFrJdRsOA==
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 792ab7c6d44141d715930eea59e35ff3
99ec346bf415bc7899a4428da92e289ba6850f22
313222616922d95638835c85cd8eb34786792a767fc3369ac00583a57f55c285
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 655
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 30 Nov 2022 23:32:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: 854716e8-98f2-40d7-8ef4-a6ccf18463d6
Set-Cookie: icu=ChgIvrZ0EAoYASABKAEw_M-fnAY4AUABSAEQ_M-fnAYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=7119854685872643519; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ads.yieldmo.com/exchange/prebid?pbav=6.29.0&p=%5B%7B%22placement_id%22%3A%221-fdb1-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22callback_id%22%3A%222a3590d8b413878%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%5D%2C%22ym_placement_id%22%3A%222422700953154036356%22%7D%5D&page_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&bust=1669851131294&dnt=false&description=&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%7D&us_privacy=1---&pr=&scrd=1&title=Exclusives!%20Archives%20-%20Perez%20Hilton&w=1280&h=939&pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22e9914bf1-4a71-4fd1-a682-d478d58deab0%22%2C%22atype%22%3A1%7D%5D%7D%5D
204 No Content 0 B URL HTTP/2 ads.yieldmo.com/exchange/prebid?pbav=6.29.0&p=%5B%7B%22placement_id%22%3A%221-fdb1-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22callback_id%22%3A%222a3590d8b413878%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%5D%2C%22ym_placement_id%22%3A%222422700953154036356%22%7D%5D&page_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&bust=1669851131294&dnt=false&description=&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%7D&us_privacy=1---&pr=&scrd=1&title=Exclusives!%20Archives%20-%20Perez%20Hilton&w=1280&h=939&pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22e9914bf1-4a71-4fd1-a682-d478d58deab0%22%2C%22atype%22%3A1%7D%5D%7D%5D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/prebid?pbav=6.29.0&p=%5B%7B%22placement_id%22%3A%221-fdb1-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22callback_id%22%3A%222a3590d8b413878%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%5D%2C%22ym_placement_id%22%3A%222422700953154036356%22%7D%5D&page_url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&bust=1669851131294&dnt=false&description=&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%7D&us_privacy=1---&pr=&scrd=1&title=Exclusives!%20Archives%20-%20Perez%20Hilton&w=1280&h=939&pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22e9914bf1-4a71-4fd1-a682-d478d58deab0%22%2C%22atype%22%3A1%7D%5D%7D%5D HTTP/1.1
Host: ads.yieldmo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 23:32:13 GMT
set-cookie: yieldmo_id=g660082707eb0c39fbad%7C1669851133083%7C3154059003397625344%7C; Domain=.yieldmo.com; Expires=Thu, 30-Nov-2023 23:32:13 GMT; Path=/; Secure; SameSite=None; Secure
x-robots-tag: none,NOINDEX,NOFOLLOW
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
access-control-request-headers: Cache-Control, Pragma
access-control-allow-methods: POST, GET, OPTIONS
pragma: no-cache
X-Firefox-Spdy: h2
bcp.crwdcntrl.net/6/map
200 OK 60 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 78d164032c0b372683ac85c4d73ff917
02d76b04b8aaf5fdf83fbd2cf8166b5fea563d89
e763d419330099397b950be40ffadb260a70234ca90c4411ae0efeee24959e4f
POST /6/map HTTP/1.1
Host: bcp.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 50
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: application/json;charset=utf-8
content-length: 60
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.18.12
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/uYzurxb5ulw
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/uYzurxb5ulw
IP
Hash 7f8ccdc641d4d4d499bdb6b28c065c54
9350ec7fb09a14d4e9c94b2d87d76de5ec80eeba
9df4b9d9a6c1050aec8bfb87fe4d3861c4c73a6712cf67031a94c0f3af6e0200
POST /s/gts1p5/uYzurxb5ulw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash a214515226d006eb0fe75b50b65b8e32
b99882c113a5f26a4f0cd29983ea928bddf30fbe
85ba3d3c4e2a70d304047888a89caf4d25c1e1b153c629176069b43fd2f27582
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2356
Cache-Control: max-age=134013
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:13 GMT
Etag: "63874747-116"
Expires: Fri, 02 Dec 2022 12:45:46 GMT
Last-Modified: Wed, 30 Nov 2022 12:06:31 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 278
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain
302 Found 0 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Wed, 30 Nov 2022 23:32:13 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: 08KF48VQVK21G6V9G37Z
Set-Cookie: ad-id=Aw5SoRE2hkzthUuHnV_oDd8|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 23:32:13 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Wed, 30 Nov 2022 23:32:13 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: Y6QH4D9F7FX3G5YFA8WR
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
perezhilton.com/wp-content/uploads/2022/04/Kanye-Grammys-Weekend-Exclusive-1024x736.jpg
200 OK 143 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/04/Kanye-Grammys-Weekend-Exclusive-1024x736.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, height=2121, bps=0, PhotometricIntepretation=RGB, description=HOT 97 Summer Jam Concert held at the Metlife Stadium - Performances, orientation=upper-left, width=3026], baseline, precision 8, 1024x736, components 3\012- data
Size 143 kB (143185 bytes)
Hash 242635a3b4fff93c8a5eda86d866cd6f
b4dcd1550c1d2458e95b7159a3b1c4792ec987d0
51be294f5931bdf2a4d1538ac5ebb34241940a8527e5d5e23823bed20d5af956
GET /wp-content/uploads/2022/04/Kanye-Grammys-Weekend-Exclusive-1024x736.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Cookie: ntvSession={}; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0; _pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0; _ga_9JS9Z0NFL0=GS1.1.1669851130.1.0.1669851130.0.0.0; _ga=GA1.2.438927426.1669851131; _gid=GA1.2.1177334066.1669851131; _gat_gtag_UA_338092_8=1; ntv_as_us_privacy=1---
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: image/jpeg
content-length: 143185
last-modified: Mon, 04 Apr 2022 22:48:04 GMT
etag: "624b75a4-22f51"
expires: Thu, 08 Dec 2022 23:32:12 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xoyMBcgdcBb%2FE2mxrkpePZ12nb9lcOnTiSNcmi1mJiRNdKSHQ0aKCbymGSDc1bcpzJh61AjDpgyrbFUEY957zzvoyi3eLe0yBq77Ad8Dra5bUQNOVpXfDAaZ%2B6sVMCfkxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77276187c91fb4f3-OSL
X-Firefox-Spdy: h2
audit-tcfv2.quantcast.mgr.consensu.org/?log=%7B%22accountId%22%3A%22GANCBjEfRH5Fe%22%2C%22domain%22%3A%22perezhilton.com%22%2C%22publisher%22%3A%22Perez%20Hilton%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22dPwGeF35y7eAISaRjtqDYQ%22%2C%22clientTimestamp%22%3A1669851131879%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-ej0pds753ecixc6focb5%22%7D
200 OK 2 B URL HTTP/2 audit-tcfv2.quantcast.mgr.consensu.org/?log=%7B%22accountId%22%3A%22GANCBjEfRH5Fe%22%2C%22domain%22%3A%22perezhilton.com%22%2C%22publisher%22%3A%22Perez%20Hilton%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22dPwGeF35y7eAISaRjtqDYQ%22%2C%22clientTimestamp%22%3A1669851131879%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-ej0pds753ecixc6focb5%22%7D
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /?log=%7B%22accountId%22%3A%22GANCBjEfRH5Fe%22%2C%22domain%22%3A%22perezhilton.com%22%2C%22publisher%22%3A%22Perez%20Hilton%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22dPwGeF35y7eAISaRjtqDYQ%22%2C%22clientTimestamp%22%3A1669851131879%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-ej0pds753ecixc6focb5%22%7D HTTP/1.1
Host: audit-tcfv2.quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-origin: *
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2021/10/Kelly-Osbourne-Relapse-Rehab-1024x721.jpg
200 OK 198 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2021/10/Kelly-Osbourne-Relapse-Rehab-1024x721.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, height=3000, bps=0, PhotometricIntepretation=RGB, description=RuPaul's Drag Race Live World Premiere at Flamingo Las Vegas, orientation=upper-left, width=1950], baseline, precision 8, 1024x721, components 3\012- data
Size 198 kB (197692 bytes)
Hash 209b8268a62a82b58e00b673d4019faa
b3a0d99e300e5dc9ef78462e7498c0df50d0cca8
0cf548d57bed18a113c157c5fd40ae4e1c7baa4fa2d972696711cfb1f31eef68
GET /wp-content/uploads/2021/10/Kelly-Osbourne-Relapse-Rehab-1024x721.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Cookie: ntvSession={}; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0; _pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0; _ga_9JS9Z0NFL0=GS1.1.1669851130.1.0.1669851130.0.0.0; _ga=GA1.2.438927426.1669851131; _gid=GA1.2.1177334066.1669851131; _gat_gtag_UA_338092_8=1; ntv_as_us_privacy=1---
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: image/jpeg
content-length: 197692
last-modified: Mon, 18 Oct 2021 17:26:10 GMT
etag: "616dae32-3043c"
expires: Thu, 08 Dec 2022 23:32:12 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jnC3yEMhN2jMGwDk6HdlzVypEbBezKTxeVzIk%2FJzdqoOEKAYXrmj4o4f9lYLkOgQNv4zJf3qFACjjoUnJI3uIVeDXDrw1aiMAg4kEg8gaUuYm0wArMRLGCbd%2FHit3qDODQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77276187c922b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/03/mtv-siesta-key-season-premiere-sneak-peek-video-1024x628.jpg
200 OK 113 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/03/mtv-siesta-key-season-premiere-sneak-peek-video-1024x628.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 2021 Editor 19.0 (Macintosh), datetime=2022:03:09 15:21:07], baseline, precision 8, 1024x628, components 3\012- data
Size 113 kB (113129 bytes)
Hash 92c48a4f589d3e71f235d9ca39779edb
019a61886e5c828d3ed2b6091fe19815b6c47d7a
24dbfe94abf98a9e33b2dc5d1cf84906282ab7adff5a842e774093949d670f8a
GET /wp-content/uploads/2022/03/mtv-siesta-key-season-premiere-sneak-peek-video-1024x628.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Cookie: ntvSession={}; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0; _pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0; _ga_9JS9Z0NFL0=GS1.1.1669851130.1.0.1669851130.0.0.0; _ga=GA1.2.438927426.1669851131; _gid=GA1.2.1177334066.1669851131; _gat_gtag_UA_338092_8=1; ntv_as_us_privacy=1---
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: image/jpeg
content-length: 113129
last-modified: Wed, 09 Mar 2022 23:21:35 GMT
etag: "6229367f-1b9e9"
expires: Thu, 08 Dec 2022 23:32:12 GMT
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=du%2BElxkQhiA5DmWHHq5ZOSb9ICIAlr%2FUb5YAbCS2Zpo893jiIb%2FPCyrbbUYim5EEpU5f9DsFkI6ZrekQojuAux8fn7zy8YY%2FCyy0pMMBuf%2FxXPZgtndcF7YhZdEW%2FyeFDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77276187c921b4f3-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2022/11/University-of-Idaho-Murders-Police-Updates-Victim-Kaylee-Goncalves-Father-Interview-GMA-1024x585.jpg
200 OK 95 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/11/University-of-Idaho-Murders-Police-Updates-Victim-Kaylee-Goncalves-Father-Interview-GMA-1024x585.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1024x585, components 3\012- data
Hash 637cbfa5116af8edf85298e316854c5c
12fe0a4876e179c313f4c877a82ea5d57f39a2ca
893f33f25c21fc16f66f50cdd00bd9cac1dbc2181043e518c948d295ea2b17f2
GET /wp-content/uploads/2022/11/University-of-Idaho-Murders-Police-Updates-Victim-Kaylee-Goncalves-Father-Interview-GMA-1024x585.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Cookie: ntvSession={"id":8651054,"placementID":1103180,"lastInteraction":1669851131230,"sessionStart":1669851131230,"sessionEndDate":1669852800000,"experiment":""}; _pbjs_userid_consent_data=3524755945110770; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0; _pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0; _ga_9JS9Z0NFL0=GS1.1.1669851130.1.0.1669851130.0.0.0; _ga=GA1.2.438927426.1669851131; _gid=GA1.2.1177334066.1669851131; _gat_gtag_UA_338092_8=1; ntv_as_us_privacy=1---; _gat_gtag_UA_167135943_9=1; _awl=2.1669851132.0.5-8d4bfb6bf4b97a3c5b5373c33e47df92-6763652d6575726f70652d7765737431-0; _au_1d=AU1D-0100-001669851132-ZJGND1P8-VJTP; _au_last_seen_pixels=eyJhcG4iOjE2Njk4NTExMzIsInR0ZCI6MTY2OTg1MTEzMiwicHViIjoxNjY5ODUxMTMyLCJhZHgiOjE2Njk4NTExMzIsImdvbyI6MTY2OTg1MTEzMiwib3BlbngiOjE2Njk4NTExMzIsInVucnVseSI6MTY2OTg1MTEzMiwiYWRvIjoxNjY5ODUxMTMyLCJ0YWJvb2xhIjoxNjY5ODUxMTMyfQ==; panoramaId_expiry=1669851133194
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: image/jpeg
content-length: 95228
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=107206, status=webp_bigger
etag: "6386b6c4-1a2c6"
expires: Thu, 08 Dec 2022 02:12:29 GMT
last-modified: Wed, 30 Nov 2022 01:49:56 GMT
cf-cache-status: HIT
age: 76784
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Av1cQ62EPPZYN3aXrqg7U1lSZPqJ96CrNg9letwVU37F0u2hBZYSDdNKpgVvMSI9JEs33VHege%2B3gLz2Isxg7dS6fBZmOyVgMv7YUn2SZt6pJlAgzm1QS02DLkAeFsQ3tw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77276190bf96b4f3-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
IP
Hash 1d54ad8ae17e8b4dc8968be78ff65b1d
96205898c35786f5cc175d305df694d59d27da00
9d43c63ef51a9bf429436bfaacbfed91694ed6a706de2357e935fe201bb2c05e
POST /s/gts1d4/CobzvdRzzqc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 313 B IP
Hash 8084f7c0c28956fcf9a6ff20649067c6
2152ee24020739139bf1f185ca34d215b5500032
85e7af2423ee2d4b3f6ae13762dd5fe182b8cbfb9800a0a84ddebbf60ba45835
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3067
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:13 GMT
Last-Modified: Wed, 30 Nov 2022 22:41:06 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 8084f7c0c28956fcf9a6ff20649067c6
2152ee24020739139bf1f185ca34d215b5500032
85e7af2423ee2d4b3f6ae13762dd5fe182b8cbfb9800a0a84ddebbf60ba45835
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3417
Cache-Control: max-age=131489
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:13 GMT
Etag: "63873945-139"
Expires: Fri, 02 Dec 2022 12:03:42 GMT
Last-Modified: Wed, 30 Nov 2022 11:06:45 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
id.crwdcntrl.net/id?gdpr_applies=false&us_privacy=1---
200 OK 43 B URL HTTP/2 id.crwdcntrl.net/id?gdpr_applies=false&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id?gdpr_applies=false&us_privacy=1--- HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.14.150
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c98063a5875a4153829eaa80be458262
9522070e97907c1f147c44284e4d7d9591518fb5
ad8607d475238f00a7328e41f35d5f50595455bef11db64d45ead1a64bc261a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD8607D475238F00A7328E41F35D5F50595455BEF11DB64D45EAD1A64BC261A2"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2557
Expires: Thu, 01 Dec 2022 00:14:50 GMT
Date: Wed, 30 Nov 2022 23:32:13 GMT
Connection: keep-alive
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash e420e1d7de9aa871e8e4e2ecd44d1f44
686a6ae809472afd573443361dcfbc479d416aa6
48d61b5bd80ec124dfab073750692334d6c50fc3293e6ab7899897be18430b99
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 04 Dec 2022 21:24:41 GMT
ETag: "686a6ae809472afd573443361dcfbc479d416aa6"
Last-Modified: Wed, 30 Nov 2022 21:24:42 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1335
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772761923c67b503-OSL
id5-sync.com/g/v2/525.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/525.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0432427ff00ed900a7de3c85bac1436d
4ab066779abae5c16708adebb3a1e3c7a33068f0
8c2af5b112ff0294689aa208c30d88ee841f1c6954489ce2dfa110c2c40fe8f5
POST /g/v2/525.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 225
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Wed, 30 Nov 2022 23:32:12 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5bc03b4995299a6a2777604a4d461631
c9de39bb466bfb8f885bae78849b7049389e3483
a8155ab40b718c91379d3a995b89adb27a9044c6f48d0033bfe797e5d9f1437b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 13:42:55 GMT
Expires: Wed, 07 Dec 2022 13:42:54 GMT
Etag: "c9de39bb466bfb8f885bae78849b7049389e3483"
Cache-Control: max-age=568840,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7727619238a1fab8-OSL
ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001669851132-ZJGND1P8-VJTP
302 Found 473 B URL HTTP/2 ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001669851132-ZJGND1P8-VJTP
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (363)
Hash a50f1a83b1b56d9c61b5ae18ccdddc86
d0a6e9e94930807695aee58ae5d8d1ccc8fb831c
ef7f2c2bd0578e2a96b7f6e35bf170c59622767e945769d74468bdb97d58c4c4
GET /api/v1/g_hosted?id=AU1D-0100-001669851132-ZJGND1P8-VJTP HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: text/html; charset=utf-8
content-length: 473
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY2OTg1MTEzMi1aSkdORDFQOC1WSlRQ
server: nginx/1.20.0
set-cookie: au_id=AU1D-0100-001669851132-ZJGND1P8-VJTP; Expires=Fri, 29 Nov 2024 23:32:13 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
g_hosted=; Expires=Fri, 29 Nov 2024 23:32:13 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/ip_match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/ip_match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/ip_match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: nginx/1.20.0
X-Firefox-Spdy: h2
match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8644df2e352c64b4d0976190f32afbd0
10f745f3395e2c0295da88f09f881c923b434f70
d87047bd6628193216a9935b2f073ca83066bcfe1fdfd3170f8f24a7ef354438
GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Fri, 30 Dec 2022 23:32:13 GMT
vary: Origin
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
lexicon.33across.com/v1/envelope?pid=0010b00002e4MRRAA2&gdpr=0&us_privacy=1---
200 OK 49 B URL HTTP/2 lexicon.33across.com/v1/envelope?pid=0010b00002e4MRRAA2&gdpr=0&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c466bd434db29cf02793f8522fde5f3a
f39a01bb0264479dbe9a4bfb0b80ae0b3b0e8154
d0d2e098cd489ef7bc528c86de8ab5c51b5d6cdf9b76a8b08766036992f0d2f4
GET /v1/envelope?pid=0010b00002e4MRRAA2&gdpr=0&us_privacy=1--- HTTP/1.1
Host: lexicon.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false
expires: Sat, 26 Jul 1997 05:00:00 GMT
content-type: application/json
content-length: 49
date: Wed, 30 Nov 2022 23:32:13 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.rlcdn.com/api/identity/envelope?pid=1258
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=1258
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=1258 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Wed, 30 Nov 2022 23:32:13 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
200 OK 871 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
IP
Hash a99648058a311ad7b29c038f11814f4f
56320c3ab87b1fb0793fd130166775d0cbf47d28
41ccfadd0a405e1f013cab1f2b1bdaeb1c93522bb25e45bddae12d80d8d2f23c
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://perezhilton.com
server-processing-duration-in-ticks: 1395708
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5bc03b4995299a6a2777604a4d461631
c9de39bb466bfb8f885bae78849b7049389e3483
a8155ab40b718c91379d3a995b89adb27a9044c6f48d0033bfe797e5d9f1437b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 13:42:55 GMT
Expires: Wed, 07 Dec 2022 13:42:54 GMT
Etag: "c9de39bb466bfb8f885bae78849b7049389e3483"
Cache-Control: max-age=568840,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77276192e8e5fab8-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 107f41aaab72705f64c6706a3b3e6112
c6e45acbe2bfcfb5d750b9dcedc3ff5c5c9d1445
7939ea1e8731dd7a185650ac73561c2517bc803f605a4d7635fd5a98648f2714
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89365
Date: Wed, 30 Nov 2022 23:32:13 GMT
Etag: "6386961f-1d7"
Expires: Fri, 02 Dec 2022 00:21:38 GMT
Last-Modified: Tue, 29 Nov 2022 23:30:39 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rUu9zia2is8tnXUJ4Q2Tn-e0frttbcFbEV8Scm-wa2Gp8uOlRDeidA==
Age: 3059
cdn.hadronid.net/hadron.js?partner_id=251&sync=1&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F
200 OK 11 kB URL HTTP/2 cdn.hadronid.net/hadron.js?partner_id=251&sync=1&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F
IP
File type ASCII text, with very long lines (55891), with no line terminators
Hash 33cd92c53f0dc38f519d199b025e161e
4cba211549a2e25c0d3a6ec5e58e0eca0384b2d2
3c42cd6138f280a03903ec7209b927b810d004fed09d2b56eda0cfde00a883ba
GET /hadron.js?partner_id=251&sync=1&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F HTTP/1.1
Host: cdn.hadronid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"2280e2148e4ee3c06f679f8fac039778"
last-modified: Fri, 18 Nov 2022 10:57:44 GMT
x-amz-id-2: AlHhfnaYFu7DcAqm/AZXcFZz8Z4At5Hcn9XqhUxeA24L5T6B/l+VTePOXZCvBx0dhJEtzYQ2PVA=
x-amz-request-id: FNK044PCM9Y7VVCR
cache-control: max-age=3600
cf-cache-status: HIT
age: 1908
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ui3NjPlwY%2BQ0SW%2BZEKy3LBv5Bo6vdSWaD4nCdTPUFkuLWSzsknU5ecA3x6aH6fEVcJP%2FanBAk0sCRWH%2BBtDcYHDXJ%2FILIiwZPjI9Ie%2BlZyAuvR0kjhnXAXVtIZDww8BTu24%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727618eabf60afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
pixels.ad.gt/api/v1/getpixels?tagger_id=5ad8072e0d451a3ccc417edde94568a0&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&code=%27none%27
204 No Content 0 B URL HTTP/2 pixels.ad.gt/api/v1/getpixels?tagger_id=5ad8072e0d451a3ccc417edde94568a0&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&code=%27none%27
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/getpixels?tagger_id=5ad8072e0d451a3ccc417edde94568a0&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&code=%27none%27 HTTP/1.1
Host: pixels.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 23:32:14 GMT
server: nginx/1.20.0
X-Firefox-Spdy: h2
idx.liadm.com/idex/prebid/74679?duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&us_privacy=1---&gdpr=0
200 OK 54 B URL HTTP/2 idx.liadm.com/idex/prebid/74679?duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&us_privacy=1---&gdpr=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f7875e19d3e37b7539858ad20408ddb5
2b7126ede1c442d82ecb1f2cbed33129233c076b
ab8451568e6fbeb9317fbe60460d48ff11b36f46dff121160a573768e3f5e217
GET /idex/prebid/74679?duid=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0&us_privacy=1---&gdpr=0 HTTP/1.1
Host: idx.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: application/json
content-length: 54
trace-id: 9290f422c001d924
vary: Origin
expires: Thu, 01 Dec 2022 23:32:14 GMT
set-cookie: lidid=f060f778-4e2e-4c2b-b79d-b132a045b874; Max-Age=63072000; Expires=Fri, 29 Nov 2024 23:32:14 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
request-time: 3
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
z.moatads.com/nativo483ETsY34/moatad.js?moatClientLevel1=26217&moatClientLevel2=150608&moatClientLevel3=429167&moatClientLevel4=4907235&moatClientSlicer1=14625&moatClientSlicer2=0&ntvDomSearch=ntv1103180-429167-98520
200 OK 107 kB URL HTTP/2 z.moatads.com/nativo483ETsY34/moatad.js?moatClientLevel1=26217&moatClientLevel2=150608&moatClientLevel3=429167&moatClientLevel4=4907235&moatClientSlicer1=14625&moatClientSlicer2=0&ntvDomSearch=ntv1103180-429167-98520
IP
File type ASCII text, with very long lines (1899)
Size 107 kB (106867 bytes)
Hash bd6ad5bf882497a15cb39603e65a256e
66c0a79a11101cc65adb985a311b83842218ff2c
c073a4333a23c5835cbfcfc733480be30e688b491ceb948efc36812c8cbef05b
GET /nativo483ETsY34/moatad.js?moatClientLevel1=26217&moatClientLevel2=150608&moatClientLevel3=429167&moatClientLevel4=4907235&moatClientSlicer1=14625&moatClientSlicer2=0&ntvDomSearch=ntv1103180-429167-98520 HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2r9Ihp/iCa1laB9Q6OH2iPqzpvbRHpXyu9rHdl70kpQ3EjluIW3f3dTMFaKiySix+UIRJL4ZUF0=
x-amz-request-id: JDAGX1WQ0RT6CNJ9
last-modified: Tue, 29 Nov 2022 17:18:17 GMT
etag: "bd6ad5bf882497a15cb39603e65a256e"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
content-length: 106867
vary: Accept-Encoding
cache-control: max-age=40528
date: Wed, 30 Nov 2022 23:32:14 GMT
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001669851132-ZJGND1P8-VJTP&gdpr=0
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001669851132-ZJGND1P8-VJTP&gdpr=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001669851132-ZJGND1P8-VJTP&gdpr=0 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1601a7c8a96ebe5b2af6fe1abcb6b90b
fb19f5121052f37c9cef4640791964583618560c
893364204eb010f01c891762b80db20df137be75ecb85fa4e22dbc68143b53fb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4000
Cache-Control: max-age=163063
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:14 GMT
Etag: "6387b255-1d7"
Expires: Fri, 02 Dec 2022 20:49:57 GMT
Last-Modified: Wed, 30 Nov 2022 19:43:17 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
reporting.powerad.ai/
200 OK 2 B IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST / HTTP/1.1
Host: reporting.powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 132
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
X-Firefox-Spdy: h2
jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=8651054&ntv_pl=1103180
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=8651054&ntv_pl=1103180
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_at=394&ntv_usid=8651054&ntv_pl=1103180 HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Thu, 30-Nov-2023 23:32:14 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY2OTg1MTEzMi1aSkdORDFQOC1WSlRQ
302 Found 345 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY2OTg1MTEzMi1aSkdORDFQOC1WSlRQ
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 3486136c0fe2cf327081d138d75fd6b0
317e74746e142cd1dbf0c170be7a7149bf74d036
78c3056adbd59eaa4fff0ecb42671ad156ce0f8a08b611688baf22181521c49e
GET /pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY2OTg1MTEzMi1aSkdORDFQOC1WSlRQ HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY2OTg1MTEzMi1aSkdORDFQOC1WSlRQ&google_tc=
date: Wed, 30 Nov 2022 23:32:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 345
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 30-Nov-2022 23:47:14 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jadserve.postrelease.com/trk.gif?ntv_ui=62fd41b7-9929-4a86-8875-ce5bd82aa25d&ntv_fl=dPg3DKsufaAX3QZufD7aNYFpy25P6pW3KNJX4jOc-ORkD_oa5Wk8gqjXlUMZE86xoeNYn7_TCSGLnAAzLdC-yIC6BJuEyRLfisNzyhZFPaRNA92jVsS1A3ZZfh7YFocEfTaUNrBtjoZhsQUfW48byjy9N0MJct_1I3knSDnPUutQs0_zgsIUfPrQxCItf1wnxlve6xc8WDQNc6RS-ghehw==&ntv_ht=_OeHYwA&ntv_at=321,322,333&ntv_a=AAAAAAAAAATNUQA&ntv_jlt=1984&ntv_jad=707&ntv_jte=10&ntv_it
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_ui=62fd41b7-9929-4a86-8875-ce5bd82aa25d&ntv_fl=dPg3DKsufaAX3QZufD7aNYFpy25P6pW3KNJX4jOc-ORkD_oa5Wk8gqjXlUMZE86xoeNYn7_TCSGLnAAzLdC-yIC6BJuEyRLfisNzyhZFPaRNA92jVsS1A3ZZfh7YFocEfTaUNrBtjoZhsQUfW48byjy9N0MJct_1I3knSDnPUutQs0_zgsIUfPrQxCItf1wnxlve6xc8WDQNc6RS-ghehw==&ntv_ht=_OeHYwA&ntv_at=321,322,333&ntv_a=AAAAAAAAAATNUQA&ntv_jlt=1984&ntv_jad=707&ntv_jte=10&ntv_it
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_ui=62fd41b7-9929-4a86-8875-ce5bd82aa25d&ntv_fl=dPg3DKsufaAX3QZufD7aNYFpy25P6pW3KNJX4jOc-ORkD_oa5Wk8gqjXlUMZE86xoeNYn7_TCSGLnAAzLdC-yIC6BJuEyRLfisNzyhZFPaRNA92jVsS1A3ZZfh7YFocEfTaUNrBtjoZhsQUfW48byjy9N0MJct_1I3knSDnPUutQs0_zgsIUfPrQxCItf1wnxlve6xc8WDQNc6RS-ghehw==&ntv_ht=_OeHYwA&ntv_at=321,322,333&ntv_a=AAAAAAAAAATNUQA&ntv_jlt=1984&ntv_jad=707&ntv_jte=10&ntv_it HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Thu, 30-Nov-2023 23:32:14 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001669851132-ZJGND1P8-VJTP
302 Found 381 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001669851132-ZJGND1P8-VJTP
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 504277342000b6cc948934ca2fd2002b
82dc3752af67a30c7e0f449bb2e0222d06eb442a
378b88eca2552967d0e55d1cdf977ed451bedec10e16673d98ca5ad02592334c
GET /pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001669851132-ZJGND1P8-VJTP HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm=&google_sc=&google_ula=450542624&id=AU1D-0100-001669851132-ZJGND1P8-VJTP&google_tc=
date: Wed, 30 Nov 2022 23:32:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 381
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 30-Nov-2022 23:47:14 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
200 OK 65 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
IP
Hash 7cbcb277467d6900aba3b82bfbd3cfac
0a75c49207d1115d36b58068e03da5dc71d84f7a
7847865cdf0c2a1aab4fa853e285093b0ead5c11ab9f0e0acacc709f4f09b579
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://perezhilton.com
server-processing-duration-in-ticks: 387062
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
jadserve.postrelease.com/gdprConsent?ntv_pl=1103180&ntv_gdpr_consent=&ntv_it
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/gdprConsent?ntv_pl=1103180&ntv_gdpr_consent=&ntv_it
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /gdprConsent?ntv_pl=1103180&ntv_gdpr_consent=&ntv_it HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Thu, 30-Nov-2023 23:32:14 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4a534d23edbdbc8eee2a9ddde1ea6a95
83d9b9241cc14a83b365c5a0d41d9a2174f3f7e0
c4e3b2b1d9ca043a2d29f118f865c25fe62edd4e6a9ab73b4fe47fd058631c21
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3048
Cache-Control: max-age=125711
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:14 GMT
Etag: "63872426-1d7"
Expires: Fri, 02 Dec 2022 10:27:25 GMT
Last-Modified: Wed, 30 Nov 2022 09:36:38 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: nbz+69pqHrmYFoKaPN/QJd7W3/elTBchSqtnlnr36GLMwjez1m0dmyPVkyXxbY3+9seQOV2BlgU7zn/7lAtVyA==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Wed, 30 Nov 2022 23:32:14 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-338092-8&cid=438927426.1669851131&jid=555107563&gjid=322157102&_gid=1177334066.1669851131&_u=YADAAUAAAAAAACAAI~&z=1600639866
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-338092-8&cid=438927426.1669851131&jid=555107563&gjid=322157102&_gid=1177334066.1669851131&_u=YADAAUAAAAAAACAAI~&z=1600639866
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-338092-8&cid=438927426.1669851131&jid=555107563&gjid=322157102&_gid=1177334066.1669851131&_u=YADAAUAAAAAAACAAI~&z=1600639866 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://perezhilton.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 30 Nov 2022 23:32:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f63c071f661813d5657ca867b0f91b97
11987be75d28b797d903d64ffc4f66c48d6a8547
5c074f044e8cf10dd486fe253534842e77b316ff232574d9cc3db761f9e5ce33
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2975
Cache-Control: max-age=113056
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:14 GMT
Etag: "6386f2ff-1d7"
Expires: Fri, 02 Dec 2022 06:56:30 GMT
Last-Modified: Wed, 30 Nov 2022 06:06:55 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&adnxs_id=$UID&gdpr=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&adnxs_id=$UID&gdpr=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&adnxs_id=$UID&gdpr=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 30 Nov 2022 23:32:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26adnxs_id%3D%24UID%26gdpr%3D0
AN-X-Request-Uuid: 779dd619-7947-4334-8340-6f7e2383a05e
Set-Cookie: uuid2=1872761598857988014; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:14 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
status.geotrust.com/
200 OK 471 B IP
Hash af179c4b3764216ebea916fd3c1c02ea
cd526e451e0f46aece45ad2fbb3078389876e965
624f09ce51170b7946275ffd9464f31185c0f6f18acc91ae394de6d018d24749
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3716
Cache-Control: max-age=145468
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:14 GMT
Etag: "63876eb6-1d7"
Expires: Fri, 02 Dec 2022 15:56:42 GMT
Last-Modified: Wed, 30 Nov 2022 14:54:46 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 1601a7c8a96ebe5b2af6fe1abcb6b90b
fb19f5121052f37c9cef4640791964583618560c
893364204eb010f01c891762b80db20df137be75ecb85fa4e22dbc68143b53fb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4000
Cache-Control: max-age=163063
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:14 GMT
Etag: "6387b255-1d7"
Expires: Fri, 02 Dec 2022 20:49:57 GMT
Last-Modified: Wed, 30 Nov 2022 19:43:17 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
u.openx.net/w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fopenx%3Fopenx_id%3D%7BOPENX_ID%7D%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26auid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
200 OK 56 B URL HTTP/2 u.openx.net/w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fopenx%3Fopenx_id%3D%7BOPENX_ID%7D%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26auid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 15669dda86db3cbff7835fa202dc0b16
ce788cab9c1aa7e458a3971a59702c410b37e64d
5cc3f958039a8885c4e9526e22d454da47d579b9a02861e7a60b41fa0ba910df
GET /w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fopenx%3Fopenx_id%3D%7BOPENX_ID%7D%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26auid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP HTTP/1.1
Host: u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: text/html
content-length: 56
content-encoding: gzip
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
at.teads.tv/fpc?analytics_tag_id=PUB_18753&tfpvi=&gdpr_status=23&gdpr_reason=230&gdpr_consent=&ccpa_consent=1---&shared_ids=&sv=8480ba3&
200 OK 56 B URL HTTP/1.1 at.teads.tv/fpc?analytics_tag_id=PUB_18753&tfpvi=&gdpr_status=23&gdpr_reason=230&gdpr_consent=&ccpa_consent=1---&shared_ids=&sv=8480ba3&
IP
File type ASCII text, with no line terminators
Hash 8a86f147038a908c4361106269db97a3
3d52e5bc3644eb0660d993033e5642c05ed06443
5f217914e0b133964c6faaab15b8451e58b24be08f66f373efeeb0fc406ed695
GET /fpc?analytics_tag_id=PUB_18753&tfpvi=&gdpr_status=23&gdpr_reason=230&gdpr_consent=&ccpa_consent=1---&shared_ids=&sv=8480ba3& HTTP/1.1
Host: at.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
Content-Length: 56
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
Expires: Wed, 30 Nov 2022 23:32:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 30 Nov 2022 23:32:14 GMT
Connection: keep-alive
status.geotrust.com/
200 OK 471 B IP
Hash af179c4b3764216ebea916fd3c1c02ea
cd526e451e0f46aece45ad2fbb3078389876e965
624f09ce51170b7946275ffd9464f31185c0f6f18acc91ae394de6d018d24749
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3713
Cache-Control: max-age=145465
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:14 GMT
Etag: "63876eb6-1d7"
Expires: Fri, 02 Dec 2022 15:56:39 GMT
Last-Modified: Wed, 30 Nov 2022 14:54:46 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 472 B IP
Hash 2a457f0b2431d8a4670c80c02c346e3f
b1ed01af78ef5434978f6ca7ac6a989de6284559
b874627a8e313c7951eefc148d52009fc33f1387ded347f39abc2d40740278c2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:14 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 01:55:54 GMT
Expires: Wed, 07 Dec 2022 01:55:53 GMT
Etag: "b1ed01af78ef5434978f6ca7ac6a989de6284559"
Cache-Control: max-age=526418,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77276194c96dfab8-OSL
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26adnxs_id%3D%24UID%26gdpr%3D0
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26adnxs_id%3D%24UID%26gdpr%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26adnxs_id%3D%24UID%26gdpr%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Wed, 30 Nov 2022 23:32:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ids.ad.gt/api/v1/match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&adnxs_id=0&gdpr=0
AN-X-Request-Uuid: 9732a8dd-a409-4954-b572-375ec46483a8
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=348447&dpuuid=AU1D-0100-001669851132-ZJGND1P8-VJTP&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fadb_match%3Fadb%3D%24%7BDD_UUID%7D%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=348447&dpuuid=AU1D-0100-001669851132-ZJGND1P8-VJTP&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fadb_match%3Fadb%3D%24%7BDD_UUID%7D%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=348447&dpuuid=AU1D-0100-001669851132-ZJGND1P8-VJTP&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fadb_match%3Fadb%3D%24%7BDD_UUID%7D%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v045-0fb9f79b9.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: szwfh3PkS9o=
Content-Length: 59
Connection: keep-alive
tags.crwdcntrl.net/lt/c/16576/sync.min.js
200 OK 10 kB URL HTTP/2 tags.crwdcntrl.net/lt/c/16576/sync.min.js
IP
Hash 61bb11e6664f179a067af52961d10632
26ab519396771721dba5308532e142f14a9ad600
84fd8cd9981809faeff3a1368c64cecf364bce04c84a9baab9415048334cd240
GET /lt/c/16576/sync.min.js HTTP/1.1
Host: tags.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
last-modified: Mon, 21 Nov 2022 18:55:24 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 30 Nov 2022 12:55:13 GMT
cache-control: max-age: 86400
etag: W/"51c5af7d71728569b41d03503fff2de7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TEhTH4yg-j-7w2QZgriMBGx-HFcYBeKPWHrkJGo1UnPcQ0Hf_dTqxg==
age: 38220
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-338092-8&cid=438927426.1669851131&jid=555107563&_u=YADAAUAAAAAAACAAI~&z=1135663311
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-338092-8&cid=438927426.1669851131&jid=555107563&_u=YADAAUAAAAAAACAAI~&z=1135663311
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-338092-8&cid=438927426.1669851131&jid=555107563&_u=YADAAUAAAAAAACAAI~&z=1135663311 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 23:32:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&rl=&if=false&ts=1669851133209&cd[partner_id]=251&cd[tagger_id]=5ad8072e0d451a3ccc417edde94568a0&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669851133208.1153479610&it=1669851133080&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&rl=&if=false&ts=1669851133209&cd[partner_id]=251&cd[tagger_id]=5ad8072e0d451a3ccc417edde94568a0&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669851133208.1153479610&it=1669851133080&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&rl=&if=false&ts=1669851133209&cd[partner_id]=251&cd[tagger_id]=5ad8072e0d451a3ccc417edde94568a0&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669851133208.1153479610&it=1669851133080&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 30 Nov 2022 23:32:14 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3402a11f28d369c1ad537c8e44ba5568
17c9fc852ca71dc4d46f786537adda4ee0e9a3ef
dd142866516f3293fab9f67f092d37b70c39fc58512734c8e88dab5c5faf7264
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perezhilton.com/wp-content/uploads/2022/11/Kanye-West-Blasts-Donald-Trump-Feud-Known-For-Lying-1024x635.jpg
200 OK 115 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2022/11/Kanye-West-Blasts-Donald-Trump-Feud-Known-For-Lying-1024x635.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left, copyright=MEGA/WENN], progressive, precision 8, 1024x635, components 3\012- data
Size 115 kB (114725 bytes)
Hash 5aae73e58c2f2d2e97981b15e7e16946
6d40f9859b98236a44154770207ec91b7e1a528e
e8d78323736353f06f9480e657c3f23087d55a167d99c0d9c07fac1b5a3a652f
GET /wp-content/uploads/2022/11/Kanye-West-Blasts-Donald-Trump-Feud-Known-For-Lying-1024x635.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Cookie: ntvSession={"id":8651054,"placementID":1103180,"lastInteraction":1669851131230,"sessionStart":1669851131230,"sessionEndDate":1669852800000,"experiment":""}; _pbjs_userid_consent_data=3524755945110770; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gk5e4afscb9618sh9gr281e0; _pubcid=e9914bf1-4a71-4fd1-a682-d478d58deab0; _ga_9JS9Z0NFL0=GS1.1.1669851130.1.0.1669851130.0.0.0; _ga=GA1.2.438927426.1669851131; _gid=GA1.2.1177334066.1669851131; _gat_gtag_UA_338092_8=1; ntv_as_us_privacy=1---; _gat_gtag_UA_167135943_9=1; _awl=2.1669851132.0.5-8d4bfb6bf4b97a3c5b5373c33e47df92-6763652d6575726f70652d7765737431-0; _au_1d=AU1D-0100-001669851132-ZJGND1P8-VJTP; _au_last_seen_pixels=eyJhcG4iOjE2Njk4NTExMzIsInR0ZCI6MTY2OTg1MTEzMiwicHViIjoxNjY5ODUxMTMyLCJhZHgiOjE2Njk4NTExMzIsImdvbyI6MTY2OTg1MTEzMiwib3BlbngiOjE2Njk4NTExMzIsInVucnVseSI6MTY2OTg1MTEzMiwiYWRvIjoxNjY5ODUxMTMyLCJ0YWJvb2xhIjoxNjY5ODUxMTMyfQ==; panoramaId_expiry=1669851133194; _lr_retry_request=true; _lr_env_src_ats=false; cto_bundle=4GogvV9POGpOcjlNMEF5UVJVMXF6RWhUdlVjYzE5WDh1b3pXYiUyRlJDUEZBbzhxTyUyRmNVTHNnZUNOdHNJTjBHZGVXaUZBanpCUW5YYWRtb3dUa2N5WFU4dGJGY0JaYlJnbmNTTnRPMnl5ZE80MXF3MTlNYWl2a0JsbTVCUDB3UjFac0dkUEo; cto_bidid=NYNcIF8lMkZGd3glMkJ4d2NEeGpYTmpPdlVDeWpBNVp1SVpXTE92c09wUnFieVZ6bG9oZ3lUQmNvMHZ2aWpHbU5yQ3FPcVYlMkJSVkZqdGdSZzBUblBmJTJCSmx6VFJKOEdRJTNEJTNE; pbjs-unifiedid=%7B%22TDID_LOOKUP%22%3A%22FALSE%22%2C%22TDID_CREATED_AT%22%3A%222022-11-30T23%3A32%3A13%22%7D; __li_idex_cache=%7B%22unifiedId%22%3A%22Vyd-X39Ru5hLjQgn2ON_lbyeMG2Ft0x6CSLQPQ%22%7D; pbjs_li_nonid=%7B%22unifiedId%22%3A%22Vyd-X39Ru5hLjQgn2ON_lbyeMG2Ft0x6CSLQPQ%22%7D; _tfpvi=YzAxZTUxNDktZWU1Yy00ZjViLWE3YzgtYTk1OTZiZDY3ZDgwIy01LTI%3D; _fbp=fb.1.1669851133208.1153479610
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: image/jpeg
content-length: 114725
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=136588, status=webp_bigger
etag: "638656ea-2158c"
expires: Thu, 08 Dec 2022 00:07:14 GMT
last-modified: Tue, 29 Nov 2022 19:00:58 GMT
cf-cache-status: HIT
age: 84300
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xippxD%2FSV%2Bl45LJWERQkPufQw67vjzcwrAPPTJGeVwcMOmu9F6wa4ttjnakaAxqpzBCJqby4uDgqQmG8ole6Yx0wBDL99AzaXIRNGAaVla534rshupxjaEzrEOFrRlzWuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761984d4bb4f3-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e769e83fea17fbe23826246988b353d5
9068e96d2dfa0998b6ea7b808f5f481be787d45f
855edc92e556889b6729109a5ac582d9bf915bd23625d5fb00254156cc57d27b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "855EDC92E556889B6729109A5AC582D9BF915BD23625D5FB00254156CC57D27B"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2036
Expires: Thu, 01 Dec 2022 00:06:11 GMT
Date: Wed, 30 Nov 2022 23:32:15 GMT
Connection: keep-alive
report3.hb.brainlyads.com/statistics
204 No Content 0 B URL HTTP/1.1 report3.hb.brainlyads.com/statistics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /statistics HTTP/1.1
Host: report3.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-nm-host,x-nm-url
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 30 Nov 2022 23:32:15 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
report3.hb.brainlyads.com/statistics
200 OK 0 B URL HTTP/1.1 report3.hb.brainlyads.com/statistics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /statistics HTTP/1.1
Host: report3.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-nm-host: perezhilton.com
x-nm-url: https://perezhilton.com/category/exclusives/
Content-Type: application/json
Content-Length: 5293
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 30 Nov 2022 23:32:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
onetag-sys.com/usync/?cb=1669851131641&us_privacy=1---
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?cb=1669851131641&us_privacy=1---
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1669851131641&us_privacy=1--- HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
ap.lijit.com/beacon?us_privacy=1---&informer=13473250
302 Found 0 B URL HTTP/1.1 ap.lijit.com/beacon?us_privacy=1---&informer=13473250
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beacon?us_privacy=1---&informer=13473250 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Wed, 30 Nov 2022 23:32:16 GMT
Set-Cookie: ljt_reader=FvYEpNZHFVDGkZF2Ti68JpLx; Path=/; Domain=.lijit.com; Expires=Thu, 30-Nov-2023 23:32:16 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://ap.lijit.com/beacon?us_privacy=1---&informer=13473250&dnr=1
Content-Length: 0
X-Sovrn-Pod: ad_ap1ams1
ap.lijit.com/beacon?us_privacy=1---&informer=13473250&dnr=1
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/beacon?us_privacy=1---&informer=13473250&dnr=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beacon?us_privacy=1---&informer=13473250&dnr=1 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Wed, 30 Nov 2022 23:32:16 GMT
Set-Cookie: ljt_reader=FvYEpNZHwOloIn2qQgGW3V6o; Path=/; Domain=.lijit.com; Expires=Thu, 30-Nov-2023 23:32:16 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap1ams1
image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
302 Found 322 B URL HTTP/2 image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
IP
Hash 27beca84008eaac93d01c8526ef60553
cfd65bb7dfb13ccfd5046fc64811fbbb02fa0e79
e2d485df66331bb3c201ff8771984157e232364c1abf74188afa35aa6fd927cc
GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 23:32:14 GMT
set-cookie: KTPCACOOKIE=true; domain=pubmatic.com; secure; expires=Tue, 28-Feb-2023 23:32:14 GMT; path=/
location: https://image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 17053
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: W/"623de86a-cf34"
Expires: Fri, 04 Nov 2022 04:41:58 GMT
Cache-Control: max-age=86402
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Wed, 30 Nov 2022 23:32:16 GMT
Age: 67198
X-Served-By: cache-lga13626-LGA, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 38, 191821
X-Timer: S1669851136.489334,VS0,VE0
Vary: Accept-Encoding
eus.rubiconproject.com/usync.html?us_privacy=1---
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?us_privacy=1---
IP
ASN #1299 Telia Company AB
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?us_privacy=1--- HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Wed, 30 Nov 2022 23:32:16 GMT
Connection: keep-alive
Vary: Accept-Encoding
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash aa8d1f26635cf3e43fb66c84c6fb8d4f
2b9f03bbb549491d949b3d257c1ad82905a61efc
96de452e16741d608d22623954adce81e856d68d8f3ce3335c9d7b5b6a60d2ca
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 30 Nov 2022 23:32:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 30 Nov 2022 18:48:14 GMT
Expires: Thu, 01 Dec 2022 18:48:14 GMT
ETag: "2b9f03bbb549491d949b3d257c1ad82905a61efc"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
biddr.brealtime.com/check.html
200 OK 536 B URL HTTP/1.1 biddr.brealtime.com/check.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (926), with no line terminators
Hash 0033ea2ac7bf71369f3ca914869bd7f4
02cb500ceeafb2659c849f0233a01b1ad54849dc
e15c3b7839bfc0e44b766cc6e09520867e821936580e3cab19c0046a9815ac0e
GET /check.html HTTP/1.1
Host: biddr.brealtime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: WeqF89pYIGWpFNs426rAd5J4pPA0pX7StLc3dP4FJwbYenlb1hONdEOob5jWo4xU9l+FdgGxHIU=
x-amz-request-id: H6ZYF8B5P5AMX1X7
Last-Modified: Tue, 08 Sep 2020 13:51:51 GMT
CF-Cache-Status: HIT
Age: 5698
Expires: Thu, 01 Dec 2022 00:32:16 GMT
Cache-Control: public, max-age=3600
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772761a37b22fab4-OSL
Content-Encoding: gzip
eus.rubiconproject.com/usync.js
200 OK 10 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (18728)
Hash a5ad7c56737913cdb9bec78f56cc16dd
a686eb90be8b49cb9d6259bb634d419ec985280a
75da92e6ce2bce81e955647ebf92abb5798256912b55c1f20c163cb59d600909
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html?us_privacy=1---
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Wed, 30 Nov 2022 21:08:09 GMT
Content-Encoding: gzip
Content-Length: 10066
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=77760
Expires: Thu, 01 Dec 2022 21:08:16 GMT
Date: Wed, 30 Nov 2022 23:32:16 GMT
Connection: keep-alive
Vary: Accept-Encoding
ib.adnxs.com/getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 30 Nov 2022 23:32:16 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 260f4850-9d0f-41d3-b058-92c8976d6140
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
match.adsrvr.org/track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent=
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:16 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=12776
301 Moved Permanently 0 B URL HTTP/2 secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=12776
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utils/xapi/multi-sync.html?p=12776 HTTP/1.1
Host: secure-assets.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=12776
date: Wed, 30 Nov 2022 23:32:16 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.undertone.com/js/usersync.html?ccpa=1---
200 OK 2.5 kB URL HTTP/2 cdn.undertone.com/js/usersync.html?ccpa=1---
IP
Hash d02834da5695d33cc8e09d6495962f3b
d8d0ac99f4c4ab8193e8b035063a1f9b3712e3a1
bb002960be753fe2bf9c01dd874a57ee236fd87e37b1c7eff6865d54150157cf
GET /js/usersync.html?ccpa=1--- HTTP/1.1
Host: cdn.undertone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
date: Wed, 30 Nov 2022 06:18:27 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 07 Nov 2022 14:19:07 GMT
etag: W/"5622b32305c47b2be916a6c424eed515"
x-amz-version-id: FcgX1qjTYQoJcn.Q.j6.Q9icc5uN_Nnv
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pgvBJfNcCTu1jBMj1lJXMPpyytwkp6VEhr1e6jJ-kInDkNTkUHU1Lg==
age: 62030
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.html?p=12776
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?p=12776
IP
ASN #1299 Telia Company AB
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?p=12776 HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Wed, 30 Nov 2022 23:32:16 GMT
Connection: keep-alive
Vary: Accept-Encoding
ssum-sec.casalemedia.com/usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 30 Nov 2022 23:32:16 GMT
content-length: 0
location: /usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1
cf-ray: 772761a43ee3b524-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y4foALBmJKEHOwB.eVLvwAAA; Path=/; Domain=casalemedia.com; Expires=Thu, 30 Nov 2023 23:32:16 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=686; Path=/; Domain=casalemedia.com; Expires=Tue, 28 Feb 2023 23:32:16 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=686; Path=/; Domain=casalemedia.com; Expires=Tue, 28 Feb 2023 23:32:16 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p8iaDB1hKmKWuVDueALwX7UNiP8mIJwEZOjnYngiZ7rbzBXkw0Z5pn%2FZfdlJn2eGb44lF2H6eq2Qg1k%2F73OOYWdozZIrZAp5FDkhDqiKb7vPTSa1AD%2F%2Fl20xU%2BSqWwaC4QAl5CKBIv1RAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID
302 Found 286 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash 04ce1d4a9e41ee4b95e37c41391b3877
ee74bb78f45fba78a27e183813cfb4b275568ec6
b8442a4a2a142a9cc1fde5885d88420f4e30be652e6950c2cebb9b2d5f3d17e1
GET /AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Wed, 30 Nov 2022 23:32:15 GMT
content-length: 286
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a958cda02f518f3e09d5bac56e03432b
722079d2fe06bf1b4722033131e9514a23dcc857
d69f69e2501ec3df2b281385951861abb2758ce587943c7f8b6606db61d6e651
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2767
Cache-Control: max-age=109945
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:16 GMT
Etag: "6386e7aa-1d7"
Expires: Fri, 02 Dec 2022 06:04:41 GMT
Last-Modified: Wed, 30 Nov 2022 05:18:34 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 175384b1d728a1aaf8146170cea84bd2
89a828596ffb73bef7962f7761934dbffa37f920
a9f327cb5ed0327beef1a1795ef8493d2b2ccfee10c0e37309939038a48b13a4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3043
Cache-Control: max-age=145852
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:16 GMT
Etag: "638772d9-1d7"
Expires: Fri, 02 Dec 2022 16:03:08 GMT
Last-Modified: Wed, 30 Nov 2022 15:12:25 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 175384b1d728a1aaf8146170cea84bd2
89a828596ffb73bef7962f7761934dbffa37f920
a9f327cb5ed0327beef1a1795ef8493d2b2ccfee10c0e37309939038a48b13a4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2896
Cache-Control: max-age=145705
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:16 GMT
Etag: "638772d9-1d7"
Expires: Fri, 02 Dec 2022 16:00:41 GMT
Last-Modified: Wed, 30 Nov 2022 15:12:25 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 4ddfcf5d90fccda4743e05a0534833d2
e150be0b521fd1e021c6cea1aab8c5d680200c12
b13fb4d6a9ace2203b2bbaf0413b78a84213635f1959a66224fd76728f535e3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3009
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:16 GMT
Last-Modified: Wed, 30 Nov 2022 22:42:07 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
pixel.rubiconproject.com/exchange/sync.php?p=12776
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/exchange/sync.php?p=12776
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/sync.php?p=12776 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 3bafef7aa4e37890defcd73f0a080481
Content-Type: image/gif
image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:16 GMT
content-length: 0
X-Firefox-Spdy: h2
pixel.advertising.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
301 Moved Permanently 360 B URL HTTP/2 pixel.advertising.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 5bc073669c856f7252a4bec2a2525d0c
8eb8fae40e9893d3958946478d65bc5ab45b2496
c56c30dddc16d8c19e9046050f4df1af8c5856250ffe5ff0022d7675033816d0
GET /ups/58293/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 30 Nov 2022 23:32:16 GMT
server: ATS/9.1.10.25
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
content-type: text/html
content-language: en
set-cookie: A3=d=AQABBADoh2MCEDp23K8xH51dsAXuVlQCBEMFEgEBAQE5iWORYwAAAAAA_eMAAA&S=AQAAAt_fvd1hC91idHmvdYyxjGs; Expires=Fri, 1 Dec 2023 05:32:16 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 360
X-Firefox-Spdy: h2
js-sec.indexww.com/um/ixmatch.html
200 OK 1.4 kB URL HTTP/2 js-sec.indexww.com/um/ixmatch.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2920), with no line terminators
Hash 5afd6e52a87d99b7b9be7c2fc0b1a091
b6331e837ab190a6a2c616f940e56ef8e357aa77
8e48f6997aa3f9b4c3b853c8974843341b34ee4b50f9e84ac69ddf531b244158
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:16 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 25 Jul 2022 19:18:19 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
cf-cache-status: HIT
age: 587
expires: Thu, 01 Dec 2022 03:32:16 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 772761a32a391c12-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58545/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58545/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58545/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 30 Nov 2022 23:32:16 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58545/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBADoh2MCEHPLQ7o8ZGka5eTZ5q5VrG8FEgEBAQE5iWORYwAAAAAA_eMAAA&S=AQAAAn4HhKkg2gSgQT2f2IWHp_g; Expires=Fri, 1 Dec 2023 05:32:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash ff032bf837bff83bee2eb3c6b3471ff3
445179c3871f7913311c002b90f34a2469166d80
d0d2ec6ffeec524eacde53efe741ca1e98ed4b4953e51a379f936c8b2bf71b41
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 30 Nov 2022 23:32:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 30 Nov 2022 19:15:52 GMT
Expires: Thu, 01 Dec 2022 19:15:52 GMT
ETag: "445179c3871f7913311c002b90f34a2469166d80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
e1.emxdgt.com/hb_sync/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hb_sync/ HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://biddr.brealtime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Wed, 30 Nov 2022 23:32:16 GMT
content-length: 0
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58293/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 30 Nov 2022 23:32:16 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBADoh2MCEEJ87zmLvDY-1q78zqBna4QFEgEBAQE5iWORYwAAAAAA_eMAAA&S=AQAAArBgF9qyAq6KXv0HSbrGchE; Expires=Fri, 1 Dec 2023 05:32:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58545/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58545/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58545/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 23:32:16 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBADoh2MCEA84QQzhjU4jBMPV-lIBhqgFEgEBAQE5iWORYwAAAAAA_eMAAA&S=AQAAAiHduDOQiNtWbGn3q7XGBQ4; Expires=Fri, 1 Dec 2023 05:32:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
204 No Content 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
date: Wed, 30 Nov 2022 23:32:16 GMT
server: AC1.1
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 23:32:16 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBADoh2MCECYyscFqW_mMhg3RFPuBqDIFEgEBAQE5iWORYwAAAAAA_eMAAA&S=AQAAAn6hGh69GRqPWpCVmIGnQj8; Expires=Fri, 1 Dec 2023 05:32:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
usr.undertone.com/userPixel/sync?partnerId=57&uid=0
200 OK 0 B URL HTTP/2 usr.undertone.com/userPixel/sync?partnerId=57&uid=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userPixel/sync?partnerId=57&uid=0 HTTP/1.1
Host: usr.undertone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum-sec.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Wed, 30 Nov 2022 23:32:16 GMT
server: istio-envoy
x-envoy-upstream-service-time: 0
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: meafvvSttUgwVNEgXFALFV60nm3-vBBiOToviShPm7f-jOsNGlfYVg==
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 752
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Wed, 30 Nov 2022 23:32:17 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 752
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Wed, 30 Nov 2022 23:32:17 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
IP
Hash 54f76af418d115dd5de3841f8256f9ab
b60d39f8e60069cadebc73a29d291adaf802f304
ff32a36f212d1cba5f2f35a04825bc220c958ccdcbd01b6e163b777ef6fe7774
POST /s/gts1d4/28HXVhFQgEk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
IP
Hash 54f76af418d115dd5de3841f8256f9ab
b60d39f8e60069cadebc73a29d291adaf802f304
ff32a36f212d1cba5f2f35a04825bc220c958ccdcbd01b6e163b777ef6fe7774
POST /s/gts1d4/28HXVhFQgEk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.teads.tv/hb/bid-request
200 OK 42 B URL HTTP/2 a.teads.tv/hb/bid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f646cd677a5283a600e1ca73c499877
979e9d54fa7ac635da0fb855a8ba40a0f74fe76e
d6e5f108622c778ca6bc5d246637b9a73585a670d46e15493b89f2915806174a
POST /hb/bid-request HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 564
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64
content-encoding: gzip
expires: Wed, 30 Nov 2022 23:32:18 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 30 Nov 2022 23:32:18 GMT
content-length: 42
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 443ed6fb0876c524f42911456b472654
c3a55edaed521d5c162314a5149bf01b5e5bc2fe
c9f3a9c41a43b21c41b728a4836ebbc830baff1ae45b76c8effe8703e99297d5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=138017
Date: Wed, 30 Nov 2022 23:32:18 GMT
Etag: "6387541d-1d7"
Expires: Fri, 02 Dec 2022 13:52:35 GMT
Last-Modified: Wed, 30 Nov 2022 13:01:17 GMT
Server: ECS (nyb/1D14)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: R4T6IxMsr11yZQnTVOOjRMj7H3TKB38UZ0rP9j5VIlNP_UQJAleIEw==
Age: 3078
trc.taboola.com/sg/audigent/1/cm?redirect=http%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Ftaboola%3Fpartner_uid%3D%3CTUID%3E%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
200 OK 189 B URL HTTP/2 trc.taboola.com/sg/audigent/1/cm?redirect=http%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Ftaboola%3Fpartner_uid%3D%3CTUID%3E%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 7fb915fff5ba634a99e76d4001c1dee5
804ca538b4bd594a5f32625cbd50728b3edd9843
02a44352280c7405a0fc08b03a0e48fec98ae453e412943ac6a7c6040da93fb8
GET /sg/audigent/1/cm?redirect=http%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Ftaboola%3Fpartner_uid%3D%3CTUID%3E%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
cache-control: no-cache, no-store
pragma: no-cache
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
date: Wed, 30 Nov 2022 23:32:14 GMT
via: 1.1 varnish
x-served-by: cache-bma1663-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669851134.214251,VS0,VE85
x-vcl-time-ms: 85
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash da7375db4de827f0da271a9967c9ce7b
3fa6545147bf3e59db7a8a1061120f63a51189c2
fb6de0cc408dd4ab6631e174f0b975b0fe043a43e9de8363c2ed7a6b7882b472
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 694
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 30 Nov 2022 23:32:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: 8b999e27-b37f-424b-b26c-a0313fa13554
Set-Cookie: icu=ChgIkqZNEAoYASABKAEwgtCfnAY4AUABSAEQgtCfnAYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=2490860409407946963; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 726
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Wed, 30 Nov 2022 23:32:17 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
200 OK 98 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ba3afc26b0bc8cecf121119c7031f9f0
5271f3d82841da3f01cfbaba503bfcb9fd98a69f
02938e396726c5e6dffe27de166595a495fad7d66a5ac75af823529ab74d2ac5
POST /rtb/bid?src=prebid_prebid_7.6.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 623
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:17 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljt_reader=FvYEpBZHzZarGSxvRo6fV2-c;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://perezhilton.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Content-Length: 98
X-Sovrn-Pod: ad_ap1ams1
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 959
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache, no-store, must-revalidate
date: Wed, 30 Nov 2022 23:32:17 GMT
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 986
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache, no-store, must-revalidate
date: Wed, 30 Nov 2022 23:32:16 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 443ed6fb0876c524f42911456b472654
c3a55edaed521d5c162314a5149bf01b5e5bc2fe
c9f3a9c41a43b21c41b728a4836ebbc830baff1ae45b76c8effe8703e99297d5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=138016
Date: Wed, 30 Nov 2022 23:32:18 GMT
Etag: "6387541d-1d7"
Expires: Fri, 02 Dec 2022 13:52:34 GMT
Last-Modified: Wed, 30 Nov 2022 13:01:17 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: r2pziDtJUpC4LecEt86EnVlluIb7ph4448BMHUofByLURqVrayJHdA==
Age: 3077
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 785
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Wed, 30 Nov 2022 23:32:17 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1016
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache, no-store, must-revalidate
date: Wed, 30 Nov 2022 23:32:17 GMT
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fc70d2496f2f5dbb2691c43a367c5df4
75cc12f3223ca2b8dc77b1e961afdff530f43046
21e9858c398297ce1bfc322481484577b880d527e0d4fa5d05df330e12d95498
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 647
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 30 Nov 2022 23:32:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: 23b5baf9-662d-4aba-a659-c6617d087fa2
Set-Cookie: icu=ChgIkqZNEAoYASABKAEwgtCfnAY4AUABSAEQgtCfnAYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=1596351840122614158; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497836&size_id=2&alt_size_ids=55%2C57&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FLeaderboard_728x90&tk_flint=pbjs_lite_v7.6.0&x_source.tid=a0e600e5-e780-4597-9197-a1df158d56e4&l_pb_bid_id=2055d14114bac98&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FLeaderboard_728x90&slots=1&rand=0.15839215950500807
200 OK 3.2 kB URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497836&size_id=2&alt_size_ids=55%2C57&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FLeaderboard_728x90&tk_flint=pbjs_lite_v7.6.0&x_source.tid=a0e600e5-e780-4597-9197-a1df158d56e4&l_pb_bid_id=2055d14114bac98&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FLeaderboard_728x90&slots=1&rand=0.15839215950500807
IP
Hash 6277fdc82eb3d711fc55d498b987e0be
665a2956dbc32bba7f169153afbfe4c1499c1b20
060f3ec478a7c24d71c3c520b0973b742fcdb2a5a83530749d44c85d21aa2ce8
GET /a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497836&size_id=2&alt_size_ids=55%2C57&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FLeaderboard_728x90&tk_flint=pbjs_lite_v7.6.0&x_source.tid=a0e600e5-e780-4597-9197-a1df158d56e4&l_pb_bid_id=2055d14114bac98&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FLeaderboard_728x90&slots=1&rand=0.15839215950500807 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Wed, 30 Nov 2022 23:32:17 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB4A945R-1R-D7CI; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:17 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrnX3F3H8RvNe9DtVM30fCgeJct9d5f2ulKdKJCjuvsMuZppt9Bb1XYHe6QAskPRNOJ9JBDhlS/zQTuCRPP99ay; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:17 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497848&size_id=15&alt_size_ids=9%2C10&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FRight_rail_sticky&tk_flint=pbjs_lite_v7.6.0&x_source.tid=2aabd770-58b0-4258-9bd0-bf67437b3209&l_pb_bid_id=316af61fa204c488&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FRight_rail_sticky&slots=1&rand=0.19356856466550876
200 OK 3.2 kB URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497848&size_id=15&alt_size_ids=9%2C10&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FRight_rail_sticky&tk_flint=pbjs_lite_v7.6.0&x_source.tid=2aabd770-58b0-4258-9bd0-bf67437b3209&l_pb_bid_id=316af61fa204c488&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FRight_rail_sticky&slots=1&rand=0.19356856466550876
IP
Hash 4366ca77f10c1f327181e1398cc9db40
1a135f0f717b229957df3d9464bfe4d7fb792342
c94b18ff8be47b6cb8c86e6d372016bbdae3709df22832029f1bb67cb44a5591
GET /a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497848&size_id=15&alt_size_ids=9%2C10&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FRight_rail_sticky&tk_flint=pbjs_lite_v7.6.0&x_source.tid=2aabd770-58b0-4258-9bd0-bf67437b3209&l_pb_bid_id=316af61fa204c488&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FRight_rail_sticky&slots=1&rand=0.19356856466550876 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Wed, 30 Nov 2022 23:32:18 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB4A947I-1V-368Y; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:17 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqZIjIxbKxW+O9DtVM30fCgeJct9d5f2ulKdKJCjuvsMuZppt9Bb1XYHe6QAskPRNOJ9JBDhlS/zQTuCRPP99ay; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:17 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 987
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache, no-store, must-revalidate
date: Wed, 30 Nov 2022 23:32:18 GMT
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
200 OK 100 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 96b7dbddc7bfbf040cb854aa59d92bc0
32b54f519f08457a73645bf004207307159eae71
34e821ff20b3ad4d8b1a132b43df19e6ad563da7a0287b947303084a28bf37b7
POST /rtb/bid?src=prebid_prebid_7.6.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 617
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:18 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljt_reader=FvYErBZHf6ja9R-mSb6b0agL;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://perezhilton.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Content-Length: 100
X-Sovrn-Pod: ad_ap3ams1
tlx.3lift.com/header/auction?lib=prebid&v=7.6.0&referrer=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tmax=2500&gdpr=false&us_privacy=1---
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.6.0&referrer=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tmax=2500&gdpr=false&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.6.0&referrer=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tmax=2500&gdpr=false&us_privacy=1--- HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 534
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:18 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-rtt,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-viewport-width,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data,sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-arch
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
a.teads.tv/hb/bid-request
200 OK 42 B URL HTTP/2 a.teads.tv/hb/bid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f646cd677a5283a600e1ca73c499877
979e9d54fa7ac635da0fb855a8ba40a0f74fe76e
d6e5f108622c778ca6bc5d246637b9a73585a670d46e15493b89f2915806174a
POST /hb/bid-request HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 564
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64
content-encoding: gzip
expires: Wed, 30 Nov 2022 23:32:18 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 30 Nov 2022 23:32:18 GMT
content-length: 42
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
IP
Hash 54f76af418d115dd5de3841f8256f9ab
b60d39f8e60069cadebc73a29d291adaf802f304
ff32a36f212d1cba5f2f35a04825bc220c958ccdcbd01b6e163b777ef6fe7774
POST /s/gts1d4/28HXVhFQgEk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 23:32:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
200 OK 26 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ceb6c70687b47ff630fb98cefa4d7c61
ffe0a18484c60157a67f228983349e5aec075fe3
698a6115e6e55f203d3cf85af421fbd3db38bb354f6e2ad4390fefc0b3ac21d7
POST /rtb/bid?src=prebid_prebid_7.6.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 661
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:18 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljt_reader=FvYErBZHL2bbxX82SNGeieL7;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://perezhilton.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Length: 26
X-Sovrn-Pod: ad_ap3ams1
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 807460ec8c975b245a86ebbaa829c928
1a74ae1953aec81cafe95e8213b80e4fde543e96
340998c3d0a4496787ee4a346c7d7ed775893893c3d9780a54a065e16c32a122
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 726
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 30 Nov 2022 23:32:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: 92108655-3cf3-46ac-bfb4-343fcc4170aa
Set-Cookie: icu=ChgIkqZNEAoYASABKAEwgtCfnAY4AUABSAEQgtCfnAYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=287380038567355593; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 28-Feb-2023 23:32:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_7.6.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f55c6ce6c4fffd3ba80aebbe7962461e
5081bf0e82c16aacc1f04784644bad40cfdcc356
72d855434232e943dee0ba8901fc2062ccd2bf11bd46e1092585f7d4f91df90d
POST /rtb/bid?src=prebid_prebid_7.6.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 615
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 23:32:18 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljt_reader=FvYEpBZHmNi_qEOyQzSbNlsN;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://perezhilton.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Content-Length: 99
X-Sovrn-Pod: ad_ap1ams1
sync.1rx.io/usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26unruly_id%3D%5BRX_UUID%5D
302 Found 19 B URL HTTP/2 sync.1rx.io/usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26unruly_id%3D%5BRX_UUID%5D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
GET /usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26unruly_id%3D%5BRX_UUID%5D HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-223de40d-a685-4182-b154-9d7eb3d10d6e-003%22%7D; path=/; expires=Thu, 30 Nov 2023 23:32:14 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26unruly_id%3D%5BRX_UUID%5D&cb=1669851134417
etag: RX223de40da6854182b1549d7eb3d10d6e003
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 759
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 23:32:18 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 758
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 23:32:18 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=prebid&v=7.6.0&referrer=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tmax=2500&gdpr=false&us_privacy=1---
200 OK 2.2 kB URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.6.0&referrer=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tmax=2500&gdpr=false&us_privacy=1---
IP
File type JSON data\012- HTML document, ASCII text, with very long lines (5451), with no line terminators
Hash db1e596506f8f4b622418bd5b759e4a3
99208610eff6b402428670f409dbc84d9f844c5e
fe2480770091e0666224653ef23312fa1b8cde9820c4c560a58f4ee3ff23f0e5
POST /header/auction?lib=prebid&v=7.6.0&referrer=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tmax=2500&gdpr=false&us_privacy=1--- HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 503
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:18 GMT
content-type: application/json; charset=utf-8
content-length: 2237
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width,sec-ch-ua-platform,sec-ch-viewport-height,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua,sec-ch-ua-bitness,sec-ch-prefers-color-scheme,sec-ch-width,sec-ch-ect,user-agent,sec-ch-downlink
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8cd308bd86e1dd57367486278ffc745b
c3816eb2feaef7a97370829326663566054fecb9
374b5529cf7c6fd39a25edd3a6beade34bf560c324d5b03154cd2d0172d6f491
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=142960
Date: Wed, 30 Nov 2022 23:32:18 GMT
Etag: "6387679f-1d7"
Expires: Fri, 02 Dec 2022 15:14:58 GMT
Last-Modified: Wed, 30 Nov 2022 14:24:31 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 60uXVN1SXUdVKuUy3XdO01dVJDGmNAvpBGCOqjqUGauKIGWUhOEaYA==
Age: 3027
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 433018a2178070c98e99741717d84900
c8210d0b36f05f4ba1a581c062590ac29c2f615d
954132bc94711a5b78b0da6d44040538b4d717b9383bdf88131a193711d26909
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=109192
Date: Wed, 30 Nov 2022 23:32:18 GMT
Etag: "6386e37d-1d7"
Expires: Fri, 02 Dec 2022 05:52:10 GMT
Last-Modified: Wed, 30 Nov 2022 05:00:45 GMT
Server: ECS (bsa/EB1F)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zREH7LR_oJgLMnLAb9TSokAcRTlVVBWJFPTtkmr-ai3UM9-Yc4lUZg==
Age: 3085
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 780
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 23:32:18 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8cd308bd86e1dd57367486278ffc745b
c3816eb2feaef7a97370829326663566054fecb9
374b5529cf7c6fd39a25edd3a6beade34bf560c324d5b03154cd2d0172d6f491
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=142930
Date: Wed, 30 Nov 2022 23:32:18 GMT
Etag: "6387679f-1d7"
Expires: Fri, 02 Dec 2022 15:14:28 GMT
Last-Modified: Wed, 30 Nov 2022 14:24:31 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: z4rGevSCPetUubWTBG7fkRDznzl2TcvRCU9t020SB7-KLGmTcyUMUw==
Age: 2997
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 728
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 23:32:18 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
hb.minutemedia-prebid.com/hb-mm-multi
200 OK 105 B URL HTTP/2 hb.minutemedia-prebid.com/hb-mm-multi
IP
File type JSON data\012- , ASCII text
Hash 0ddfb6afc62b8e5bb105fed0a322487e
3d9124e294685211e913b134d6489f2256961c53
0dca1f717e2bc065023bc2073361762361f101ce217ca42e3e0ff5b428e05bee
POST /hb-mm-multi HTTP/1.1
Host: hb.minutemedia-prebid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 979
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:18 GMT
content-type: application/json
content-length: 105
access-control-allow-credentials: true
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: https://perezhilton.com
x-reason: gdpr is not applied
X-Firefox-Spdy: h2
a.teads.tv/hb/bid-request
200 OK 42 B URL HTTP/2 a.teads.tv/hb/bid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f646cd677a5283a600e1ca73c499877
979e9d54fa7ac635da0fb855a8ba40a0f74fe76e
d6e5f108622c778ca6bc5d246637b9a73585a670d46e15493b89f2915806174a
POST /hb/bid-request HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 591
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64
content-encoding: gzip
expires: Wed, 30 Nov 2022 23:32:18 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 30 Nov 2022 23:32:18 GMT
content-length: 42
vary: Accept-Encoding
X-Firefox-Spdy: h2
hb.minutemedia-prebid.com/hb-mm-multi
200 OK 105 B URL HTTP/2 hb.minutemedia-prebid.com/hb-mm-multi
IP
File type JSON data\012- , ASCII text
Hash bd911b864430c0fa47e5d3756385af3a
ed40e5f088493ebdb0aa02d2eab9f3ddb7e901a5
053bbf6bc2bf6e76ad3cf83924ba81607145215c5df6ad814e7a00eddb7e4228
POST /hb-mm-multi HTTP/1.1
Host: hb.minutemedia-prebid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 975
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:18 GMT
content-type: application/json
content-length: 105
access-control-allow-credentials: true
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: https://perezhilton.com
x-reason: gdpr is not applied
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1
IP
GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:09 GMT
content-type: text/css
last-modified: Thu, 22 Sep 2022 13:10:59 GMT
etag: W/"632c5ee3-545e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1231
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1dmzh6QmBBV9tuP2ghZ7kcOVrko4YqYDOGhGlRICSyMldTuLsBVtx%2FfPiN1ToIcxnDojLqy7SNCPyGcwG0ih8X6moi7rgtzJUfy9%2Fn40qEgaN2O4vuAcP4oGB%2FeQV5e0Jg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a5f0eb4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/js/intersectionObserver.pollyfill.min.js?ver=0.9.4.1636670677
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/js/intersectionObserver.pollyfill.min.js?ver=0.9.4.1636670677
IP
GET /wp-content/themes/understrap-master/js/intersectionObserver.pollyfill.min.js?ver=0.9.4.1636670677 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/javascript
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
etag: W/"5eecd0d9-1b4f"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B3wsmjh5DF1zzCttx929o8nFUSRhJeFUPFdhk5w6m3J8DQV%2FeUcCpVaW2DudXBIsUI%2BK2mdhHilVNaYL0yE6LVvppHFBCXXfY3cEIHgcaMuOuURAj9KaL3UhpRIVd1D0DQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a6f20b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
200 OK 0 B URL HTTP/2 test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
IP
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Wed, 30 Nov 2022 19:52:32 GMT
last-modified: Wed, 30 Nov 2022 19:52:29 GMT
etag: W/"8980f3096e8d1a15cdb9518354d546f7"
x-amz-server-side-encryption: AES256
x-amz-version-id: KZ_abct9fxSnQsZ4cInZdlEfLgTLD6XT
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: x-oqDNDnyKOM8lMileyRcq9KInBboq-GcxXOUKnFz6nOcKbhxo8GcQ==
age: 13181
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:11 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "nAbmxtqHqaYrwBiADJAeFg=="
expires: Wed, 07 Dec 2022 23:32:11 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
powerad.ai/pubPls/?width=1280&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F
200 OK 0 B URL HTTP/2 powerad.ai/pubPls/?width=1280&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F
IP
GET /pubPls/?width=1280&url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
access-control-allow-headers: *
set-cookie: 12331dcr-g=1; Path=/; Secure; SameSite=None
12593dcr-g=1; Path=/; Secure; SameSite=None
12594dcr-g=1; Path=/; Secure; SameSite=None
12595dcr-g=1; Path=/; Secure; SameSite=None
12940dcr-g=1; Path=/; Secure; SameSite=None
13127dcr-g=1; Path=/; Secure; SameSite=None
etag: W/"ab8a-VYptfyarNdu7ZflapJdnK9qXwVE"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-wrapper.js
200 OK 0 B URL HTTP/2 dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-wrapper.js
IP
GET /perezhilton-DxtDG5qb8P/default/prebid-wrapper.js HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 30 Nov 2022 22:43:15 GMT
last-modified: Wed, 30 Nov 2022 22:09:53 GMT
etag: W/"02d9b4a61b4d898d3e7645f6596ae6c3"
cache-control: max-age=3600
x-amz-version-id: excWArEWaZg5.czC7TCmtUMzT9OUrJ6C
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _26n_Rn75anOB-vbcFZ0YZUH_dvSeUjZsoRAr7d5mx6NI7XKCambrw==
age: 2937
X-Firefox-Spdy: h2
dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-library.js
200 OK 0 B URL HTTP/2 dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-library.js
IP
GET /perezhilton-DxtDG5qb8P/default/prebid-library.js HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 10 Nov 2022 00:28:37 GMT
x-amz-version-id: _FF.oKPwDK9piLNrcigEQWFUfxjp1uUH
server: AmazonS3
content-encoding: gzip
date: Wed, 30 Nov 2022 17:11:45 GMT
cache-control: max-age=86400
etag: W/"e70a6e6f9be79cf70620b94f395ff635"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: O0idLDIVxIMzoDTJGqgkrBAJZEbaXI_LkBKVnU0y-jsJ-9nWIpuINw==
age: 23460
X-Firefox-Spdy: h2
p.ad.gt/api/v1/p/251
200 OK 0 B IP
GET /api/v1/p/251 HTTP/1.1
Host: p.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 19:38:24 GMT
cache-control: public, max-age=43200
expires: Thu, 01 Dec 2022 11:27:33 GMT
etag: W/"1669405104.0-41242-2710964840"
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 280
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727618ebdd2b512-OSL
X-Firefox-Spdy: h2
ssc.33across.com/api/v1/hb?guid=bwnemsUAer66nSaKlKyvbs
200 OK 0 B URL HTTP/2 ssc.33across.com/api/v1/hb?guid=bwnemsUAer66nSaKlKyvbs
IP
POST /api/v1/hb?guid=bwnemsUAer66nSaKlKyvbs HTTP/1.1
Host: ssc.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 466
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Accept-Encoding, Origin
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
date: Wed, 30 Nov 2022 23:32:18 GMT
x-powered-by: 33Across
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
threetruck.com/v2ottNEyGq0p1mCsWUL35CzEebKPZB4BIhrwA3nqqE2Q6ZB5HD2uki1gUee0sTbli
200 OK 0 B URL HTTP/2 threetruck.com/v2ottNEyGq0p1mCsWUL35CzEebKPZB4BIhrwA3nqqE2Q6ZB5HD2uki1gUee0sTbli
IP
GET /v2ottNEyGq0p1mCsWUL35CzEebKPZB4BIhrwA3nqqE2Q6ZB5HD2uki1gUee0sTbli HTTP/1.1
Host: threetruck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private, must-revalidate, max-age=21600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "29b42aab09c0efcf42ec9d7fccb3666a072388162c3cdec6614eae25e80023e1"
strict-transport-security: max-age=15724800; preload
timing-allow-origin: *
vary: Accept-Encoding, Accept-Language
x-buildname: hoothoot
x-buildnumber: 694373797
x-datacenter: gce-europe-west1
x-hostname: fen-hoothoot-europe-west1-test-04vg
date: Wed, 30 Nov 2022 23:32:10 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/tcfv2/23/cmp2ui-en.js
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/tcfv2/23/cmp2ui-en.js
IP
GET /tcfv2/23/cmp2ui-en.js HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 604800
cache-control: max-age=172800
date: Wed, 30 Nov 2022 15:45:11 GMT
last-modified: Fri, 18 Dec 2020 15:09:43 GMT
etag: W/"b999c652510fc4edd897a1d667aaee33"
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3Vi4xHFvQ6UA59Ftcp7kTJKYcM7hKGEfh1axzcv1x4eJIx_AGUxRtQ==
age: 28023
X-Firefox-Spdy: h2
powerad.ai/script.js?ver=0.9.4.1636670677
200 OK 0 B URL HTTP/2 powerad.ai/script.js?ver=0.9.4.1636670677
IP
GET /script.js?ver=0.9.4.1636670677 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
accept-ranges: bytes
cache-control: public, max-age=172800
last-modified: Wed, 30 Nov 2022 19:16:24 GMT
etag: W/"331ac-184c9f7ff87"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ssc.33across.com/api/v1/hb?guid=b-Uk0uUAer66nSaKlKyvbs
200 OK 0 B URL HTTP/2 ssc.33across.com/api/v1/hb?guid=b-Uk0uUAer66nSaKlKyvbs
IP
POST /api/v1/hb?guid=b-Uk0uUAer66nSaKlKyvbs HTTP/1.1
Host: ssc.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 426
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Accept-Encoding, Origin
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
date: Wed, 30 Nov 2022 23:32:18 GMT
x-powered-by: 33Across
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
perezhilton.com/category/exclusives/
200 OK 0 B URL HTTP/2 perezhilton.com/category/exclusives/
IP
GET /category/exclusives/ HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:09 GMT
content-type: text/html; charset=UTF-8
link: <https://perezhilton.com/wp-json/>; rel="https://api.w.org/", <https://perezhilton.com/wp-json/wp/v2/categories/26>; rel="alternate"; type="application/json"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=phpGuCRkGRGTA7RPN8mDAU%2B9aO1dtfJAlX7XDVxljwcTOUIaYSEZF0V%2FFbQYjPBhabbDM%2BpqnmG2dwJyvqDRYBRwz%2BHFD%2F118YvII8VfdjAJ5wDcplmy7HzeMiHiwVIHrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772761773cddb4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
web.prebidwrapper.com/perezhilton-DxtDG5qb8P/default/prebid-load.js
200 OK 0 B URL HTTP/2 web.prebidwrapper.com/perezhilton-DxtDG5qb8P/default/prebid-load.js
IP
Analyzer Verdict Alert fortinet Malware
GET /perezhilton-DxtDG5qb8P/default/prebid-load.js HTTP/1.1
Host: web.prebidwrapper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 30 Nov 2022 22:09:53 GMT
x-amz-version-id: 7s7uUFcVYlVWawHU5b6_jIFMtLxdiOMQ
server: AmazonS3
content-encoding: br
date: Wed, 30 Nov 2022 23:16:19 GMT
cache-control: max-age=3600
etag: W/"1fccc63ba4b82214ace3fbd0f2f35a63"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: C56YKEquOTLQA2SbnDxy8Ah5mLyRarSMBXVYex38YzYBNh2b2TSjxQ==
age: 954
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497838&size_id=15&alt_size_ids=16%2C43%2C117&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FRectangle_body_single&tk_flint=pbjs_lite_v7.6.0&x_source.tid=7d6845d8-81df-49f0-8aa1-915dc2c01992&l_pb_bid_id=968afdded37ab9a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FRectangle_body_single&slots=1&rand=0.25258535960453254
200 OK 0 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497838&size_id=15&alt_size_ids=16%2C43%2C117&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FRectangle_body_single&tk_flint=pbjs_lite_v7.6.0&x_source.tid=7d6845d8-81df-49f0-8aa1-915dc2c01992&l_pb_bid_id=968afdded37ab9a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FRectangle_body_single&slots=1&rand=0.25258535960453254
IP
GET /a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497838&size_id=15&alt_size_ids=16%2C43%2C117&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FRectangle_body_single&tk_flint=pbjs_lite_v7.6.0&x_source.tid=7d6845d8-81df-49f0-8aa1-915dc2c01992&l_pb_bid_id=968afdded37ab9a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FRectangle_body_single&slots=1&rand=0.25258535960453254 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Wed, 30 Nov 2022 23:32:18 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB4A94D8-15-3EZ; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:18 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoVAdl8xiveLe9DtVM30fCgeJct9d5f2unHEWNsRPuTjuZppt9Bb1XYHe6QAskPRNOJ9JBDhlS/zQTuCRPP99ay; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:18 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700|Lobster|Rustico|Quicksand:400,700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700|Lobster|Rustico|Quicksand:400,700&display=swap
IP
GET /css?family=Roboto:300,400,700|Lobster|Rustico|Quicksand:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 23:32:10 GMT
date: Wed, 30 Nov 2022 23:32:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sync.1rx.io/usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26unruly_id%3D%5BRX_UUID%5D&cb=1669851134417
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26unruly_id%3D%5BRX_UUID%5D&cb=1669851134417
IP
GET /usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001669851132-ZJGND1P8-VJTP%26unruly_id%3D%5BRX_UUID%5D&cb=1669851134417 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://ids.ad.gt/api/v1/unruly?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&unruly_id=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/wp-embed.min.js?ver=5.5.3
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/js/wp-embed.min.js?ver=5.5.3
IP
GET /wp-includes/js/wp-embed.min.js?ver=5.5.3 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:09 GMT
content-type: application/javascript
last-modified: Wed, 28 Oct 2020 11:54:13 GMT
etag: W/"5f995be5-59a"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1232
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FjfRwS8rEKwM%2FZjDh0Xn6GlWdiObJDq3N7fjXA3YH4WNQ25ZONRZt07g2UYsq6DFilZNQR8zS8jkb813%2Fvpv5f332Cw6IFv4vFnodVbJyLWggKny0QK4RR%2BoQmwZKDqPgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a6f29b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
IP
GET /font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 632, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 21:08:57
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e6a55b08fe5091f45c9e99ce9e9f98c2
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 15292729
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7727617b5805b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js?ver=5.5.3
200 OK 0 B URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js?ver=5.5.3
IP
GET /sdks/OneSignalSDK.js?ver=5.5.3 HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 3246
expires: Sat, 03 Dec 2022 23:32:10 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 7727617b8da7b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
IP
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/javascript
last-modified: Wed, 28 Oct 2020 11:54:14 GMT
etag: W/"5f995be6-183ee"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tkBPcMx7qU%2B3TAeS%2BrfU41eAuwXu0%2F2r1KSHuILVwcEHtwGzTKmOu91r1iIHN9EHZtjbhlYAsX%2BTPRS2YMKTGspj%2FpICJlm%2F6TuOp%2FYnQsZvj6q%2FSokZH8rJ1lzsF8IJrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a6f1bb4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=96873
access-control-allow-origin: *
etag: W/"5fe09373-17a69"
last-modified: Mon, 21 Dec 2020 12:22:11 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tyH8YRsC%2FOV0cYOQhiwM6q30OS9Ii1x%2FUoCPwPUuzikAPwyKXEbvnLvkjuhrcFp9EExY%2Fo%2FysXNZ%2Flq2Gi4cpVxbiTZAksVfWk6U%2BLtQaqZTZ6aNd6NkqU6oOYWnAlQzJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a5f13b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
IP
GET /wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: text/css
last-modified: Mon, 21 Nov 2022 22:07:33 GMT
etag: W/"637bf6a5-5ffbb"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FAd6t45N3X9XqFZJIiRNhUmWVBxextJg6uD4Wfn%2FxrAmWNMg%2B1vSFYss4iaw9im2op32eDZEG0gFBa7RCz50gCmNqedtmtyP5CDIzJwhnZj32hkYLD4woRB88S9SXbiPRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a5f12b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2
IP
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: text/css
last-modified: Mon, 03 May 2021 15:42:58 GMT
etag: W/"60901a02-a50"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2txnzOA9BGRvxOTTQ0P4HC7lALQwgdv4u6Eo67wXn3ICDnONTwVhXIzlXKwkP9dUvg%2BTTG4uPEhArmFaff4MxYLQEvExTit2eZOEPpp5AX9v4YAbTL2eDJq8ADbGh4kjJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a5f11b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
IP
GET /GVL-v2/vendor-list.json HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Wed, 30 Nov 2022 03:00:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Wed, 30 Nov 2022 03:00:34 GMT
etag: W/"d4c1518d326d9407a403a5a803aa0996"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: akYYGDqRRcM78dXbY3b_9gqQOiy-J1WPxKPmT9oJiZY4ASI3YsG49A==
age: 73889
X-Firefox-Spdy: h2
a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&ref=
200 OK 0 B URL HTTP/2 a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&ref=
IP
GET /api/v1/u/matches/251?url=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&ref= HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:13 GMT
content-type: application/javascript
server: nginx/1.20.0
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
200 OK 0 B URL HTTP/2 image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP
IP
GET /AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001669851132-ZJGND1P8-VJTP HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
ssc.33across.com/api/v1/hb?guid=aT5oQMUAer64k4aKj0P0Le
200 OK 0 B URL HTTP/2 ssc.33across.com/api/v1/hb?guid=aT5oQMUAer64k4aKj0P0Le
IP
POST /api/v1/hb?guid=aT5oQMUAer64k4aKj0P0Le HTTP/1.1
Host: ssc.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 464
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Accept-Encoding, Origin
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
date: Wed, 30 Nov 2022 23:32:18 GMT
x-powered-by: 33Across
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497856&size_id=2&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FClick_For_Details_Button&tk_flint=pbjs_lite_v7.6.0&x_source.tid=083b46d0-7b93-491e-af05-542f5a9a50a9&l_pb_bid_id=6542cd5bdd196118&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FClick_For_Details_Button&slots=1&rand=0.05916429492872999
200 OK 0 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497856&size_id=2&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FClick_For_Details_Button&tk_flint=pbjs_lite_v7.6.0&x_source.tid=083b46d0-7b93-491e-af05-542f5a9a50a9&l_pb_bid_id=6542cd5bdd196118&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FClick_For_Details_Button&slots=1&rand=0.05916429492872999
IP
GET /a/api/fastlane.json?account_id=18986&site_id=213834&zone_id=1497856&size_id=2&gdpr=0&us_privacy=1---&rf=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.page=https%3A%2F%2Fperezhilton.com%2Fcategory%2Fexclusives%2F&tg_i.domain=perezhilton.com&tg_i.pbadslot=%2F21733733414%2FClick_For_Details_Button&tk_flint=pbjs_lite_v7.6.0&x_source.tid=083b46d0-7b93-491e-af05-542f5a9a50a9&l_pb_bid_id=6542cd5bdd196118&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F21733733414%2FClick_For_Details_Button&slots=1&rand=0.05916429492872999 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Wed, 30 Nov 2022 23:32:18 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB4A94BN-A-748X; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:18 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoF+r4AELG+RO9DtVM30fCgeJct9d5f2unHEWNsRPuTjuZppt9Bb1XYHe6QAskPRNOJ9JBDhlS/zQTuCRPP99ay; Domain=.rubiconproject.com; Path=/; Expires=Thu, 30-Nov-2023 23:32:18 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2
ssc.33across.com/api/v1/hb?guid=a-j7FwUAer65vmaKlKyvbs
200 OK 0 B URL HTTP/2 ssc.33across.com/api/v1/hb?guid=a-j7FwUAer65vmaKlKyvbs
IP
POST /api/v1/hb?guid=a-j7FwUAer65vmaKlKyvbs HTTP/1.1
Host: ssc.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 480
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Accept-Encoding, Origin
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
date: Wed, 30 Nov 2022 23:32:18 GMT
x-powered-by: 33Across
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/js/quantcast.js?ver=0.9.4.1636670677
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/js/quantcast.js?ver=0.9.4.1636670677
IP
GET /wp-content/themes/understrap-master/js/quantcast.js?ver=0.9.4.1636670677 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:09 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=3939
etag: W/"5f077cbb-f63"
last-modified: Thu, 09 Jul 2020 20:23:23 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GL9c9OUJnM4muuiqROCHlmEZsRB%2FiGQf90jGgxmiBVThsrq%2FsFTk7%2FSEKHFl9V5Stq8238oSpl1Zwa4HSFIQXaHDdqnSXbP3mfw7wd4d26rYmie6467RLL2NUi2s%2B5vDCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a6f18b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1
200 OK 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1
IP
GET /usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:16 GMT
content-type: text/html
cf-ray: 772761a4df3fb524-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=joYbKTjwikky%2BYnfxxEiXPkHLyYJnYOMk348Wj30hFX%2B970upNCNVbQJ2FXQFjZNQCm2nusOHlp3jeF5i4P9mnLd8s7gR%2FaTlxyY%2Bac6Hw113DmDhMsqgPKcXyKFYlCBINrZAFEanlgg9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d3div1mtym39ic.cloudfront.net/aax2/apstag.js
200 OK 0 B URL HTTP/2 d3div1mtym39ic.cloudfront.net/aax2/apstag.js
IP
GET /aax2/apstag.js HTTP/1.1
Host: d3div1mtym39ic.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 09 Nov 2022 20:51:49 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 30 Nov 2022 23:16:19 GMT
cache-control: public, max-age=3600
etag: W/"fa24fe2b94a2fc864b1ec67f32e8db32"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5SDvyrKGHEkBb61L6aOXEgRktkerQDGEwfigtnMZlAXDgR9nwpvIVA==
age: 954
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.3
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.3
IP
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.5.3 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/category/exclusives/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:10 GMT
content-type: text/css
last-modified: Mon, 21 Dec 2020 12:22:11 GMT
etag: W/"5fe09373-d293"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9xzfqUzONPdiG3V7s3FnfFk87BELvRDp6B9NHcYb6gVglvzpefeGqy5u1Qbo%2FCb5IAML7cPkCNs3Ow9AWHdiPOhtYxkruUW5NCASUj1RERr53Mwq2rcsqi04WjSsZCTqrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7727617a5f10b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/tcfv2/23/cmp2.js?referer=perezhilton.com
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/tcfv2/23/cmp2.js?referer=perezhilton.com
IP
GET /tcfv2/23/cmp2.js?referer=perezhilton.com HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
cache-control: max-age=172800
date: Wed, 30 Nov 2022 16:37:17 GMT
last-modified: Fri, 18 Dec 2020 15:09:37 GMT
etag: W/"1d55b13d85c9837da884d1e8594cc025"
x-amz-server-side-encryption: AES256
x-amz-meta-qc-ineu: True
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fo9YTQ8srEORyMIQSxIpRuqvHmhqtGZW5F2f4C3frqB5TwSCbUzKoA==
age: 24894
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/g_match?google_error=3
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/g_match?google_error=3
IP
GET /api/v1/g_match?google_error=3 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669851132-ZJGND1P8-VJTP; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Thu, 01 Dec 2022 11:32:14 GMT
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/g_match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&google_error=3
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/g_match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&google_error=3
IP
GET /api/v1/g_match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&google_error=3 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669851132-ZJGND1P8-VJTP; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Thu, 01 Dec 2022 11:32:14 GMT
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&adnxs_id=0&gdpr=0
202 Accepted 0 B URL HTTP/2 ids.ad.gt/api/v1/match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&adnxs_id=0&gdpr=0
IP
GET /api/v1/match?id=AU1D-0100-001669851132-ZJGND1P8-VJTP&adnxs_id=0&gdpr=0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001669851132-ZJGND1P8-VJTP; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Wed, 30 Nov 2022 23:32:14 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Thu, 01 Dec 2022 11:32:14 GMT
set-cookie: au_id=AU1D-0100-001669851132-ZJGND1P8-VJTP; Expires=Fri, 29 Nov 2024 23:32:14 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
104.26.1.93
185.89.210.212
67.220.224.150
141.95.98.65
2.21.206.244
104.18.225.52
23.36.76.160
185.64.190.80
147.75.85.234