detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Fri, 09 Dec 2022 12:42:55 GMT
Age: 19810
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
301 Moved Permanently 0 B URL HTTP/1.1 perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Dec 2022 18:13:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 09 Dec 2022 19:13:05 GMT
Location: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fl7WNyz1mqb3JkV7aFz01Vpo737q4SRCosNhmbS5r0n1I5jcfAeEP474f9afamRoeEloD12NO5Jk%2Bq8BilLW%2BzE%2BNR1Nk51SaO3PJPT46MkhCz4x1Q9q8JyzrtG1lHKG7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776fb6747c2fb4fd-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7181eff9c60e83eb0004ece591e47dca
0fd8cd0c9d10b0547938982e57d2c43e2d98679f
89c5c0e2d6890798644174a8e31976aec03a1b3deb03812afbb520e5ed68f522
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89C5C0E2D6890798644174A8E31976AEC03A1B3DEB03812AFBB520E5ED68F522"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2537
Expires: Fri, 09 Dec 2022 18:55:22 GMT
Date: Fri, 09 Dec 2022 18:13:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 42bf89cd972467fb5ffcb27252360349
a20f3be2983f4980b00464c626c995ffb999676b
a6f7ca58e573503a479001c6cb9451060af5593e0f6471e48b76e19ddf38cb0e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A6F7CA58E573503A479001C6CB9451060AF5593E0F6471E48B76E19DDF38CB0E"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13910
Expires: Fri, 09 Dec 2022 22:04:55 GMT
Date: Fri, 09 Dec 2022 18:13:05 GMT
Connection: keep-alive
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
200 OK 38 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 5787f786aec5f1704fb176697c049b14
4d505b3ad030dac6d50a6617485477225152ccdc
6ae037bfda80b6e8320f011edb7229a82672d7286bf76c5bc99d9cfa864cc1e0
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: kh7mKGSSwCd8YqTCs9_z2QJhhp4yXfMWbLTVerDtdeWuEZ1N6t-s0g==
content-encoding: gzip
via: 1.1 0800f067ff646622f3e8e507cb9b52e8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 17:59:09 GMT
content-type: application/json
content-length: 37751
age: 836
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11644
Expires: Fri, 09 Dec 2022 21:27:09 GMT
Date: Fri, 09 Dec 2022 18:13:05 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2EXut2W3wvN4Ez8cIwTI7Q0qvy8uiMjhjecCUs7EZoNvH8/vFW/FYwZBCAYLDXGSsdtqos2y9cq0XNe/fGDIFg==
x-amz-request-id: PT6AKF5CVD4SGX9Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 18:00:59 GMT
age: 726
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8295
Expires: Fri, 09 Dec 2022 20:31:20 GMT
Date: Fri, 09 Dec 2022 18:13:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 17:33:14 GMT
content-type: application/json
age: 2391
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 18:13:05 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Fri, 09 Dec 2022 12:42:55 GMT
Age: 19811
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
ocsp.digicert.com/
200 OK 471 B IP
Hash 73ce9e8b1d0bf68e58d9331578dfe852
3f3acbba803a5a7f9bbc27cb6aea618dc2a04638
f134d48e874d84cf16b84b6ad0be89825446aac4884ade5ddee70b5bcb14a05c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2506
Cache-Control: max-age=87838
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:06 GMT
Etag: "63922506-1d7"
Expires: Sat, 10 Dec 2022 18:37:04 GMT
Last-Modified: Thu, 08 Dec 2022 17:55:18 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 18:07:55 GMT
age: 311
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e6be4d2155028ffff5d01ab6e7edf6da
07172071b5cf43c4cd7d7930b4ad8518ec1e32e9
4d8a5fa2362fd0910babd6d128d850d4460829468eb23d34ee5ee6eaa42d5a38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2444
Cache-Control: max-age=142473
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:06 GMT
Etag: "6392faaf-1d7"
Expires: Sun, 11 Dec 2022 09:47:39 GMT
Last-Modified: Fri, 09 Dec 2022 09:06:55 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
200 OK 8 B URL HTTP/1.1 shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
IP
Hash 29fc57841962e407cb50c1be60284bf7
ce968a77e2996da5eee8925182318f171ccdce47
ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b
POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1
Host: shavar.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 773
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Date: Fri, 09 Dec 2022 18:13:06 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 8
Connection: Close
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jwzfiU92bOhWvDeFzo26Xg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pGKOhevnV0hW91+bVy0LtqzWRPM=
perezhilton.com/wp-content/themes/understrap-master/fonts/Hollywood/Hollywood.woff2
200 OK 3.5 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/fonts/Hollywood/Hollywood.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 3540, version 1.0\012- data
Hash ccb0304f5eb8f61dcc88bac5e417c9ce
04083d798ce3fd7b1298d56d05749f76dad2a794
e43ad82cd9be246ca0f3594e733d326c83177eb92422e185f9c38bdc4fa49b12
GET /wp-content/themes/understrap-master/fonts/Hollywood/Hollywood.woff2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/octet-stream
content-length: 3540
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
etag: "5eecd0d9-dd4"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1400
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xcTr%2FalpfDDiXl5kJzGiZT1R3JUbXgk3%2FESz3TLLgdRfaVXRS7z71aUkqKnzxZGKySkP%2B9qYnN%2BHC0QAr0P%2B5Hf9tFOBlCS12Sva78BEyvL0IU3%2BaayUWa%2F6trEuJoe7gA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67cdc5db4f1-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 25c1a71b438dd3628ebe491222f1b414
651ec6be6391f31b7ea8f89441ffc9f58d3572f2
a9671ecd9fe7a56f470b4c16799360e71c39b48ed82ae1f7c7ba92f680da3ed9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2036
Cache-Control: max-age=134547
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:06 GMT
Etag: "6392dd51-117"
Expires: Sun, 11 Dec 2022 07:35:33 GMT
Last-Modified: Fri, 09 Dec 2022 07:01:37 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 25c1a71b438dd3628ebe491222f1b414
651ec6be6391f31b7ea8f89441ffc9f58d3572f2
a9671ecd9fe7a56f470b4c16799360e71c39b48ed82ae1f7c7ba92f680da3ed9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2036
Cache-Control: max-age=134547
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:06 GMT
Etag: "6392dd51-117"
Expires: Sun, 11 Dec 2022 07:35:33 GMT
Last-Modified: Fri, 09 Dec 2022 07:01:37 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
200 OK 57 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
IP
File type Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Hash 97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: font/woff2
content-length: 56780
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 632, 617, 617, 617, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 21:22:06
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 43c2b10ed4caafc278f6f5ebec7cdfe5
cdn-cache: HIT
cf-cache-status: HIT
age: 13083941
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 776fb67dab00b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2
200 OK 1.0 kB URL HTTP/2 perezhilton.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2
IP
File type ASCII text, with very long lines (2143), with no line terminators
Hash 674728f9d40e0771f69aadbc8e64f95e
ea33964ea982605e045d3a68be876d6aa8278f14
1b50a04b35fe8c36530498118d594fe6b630c36c3f2e1ea53307c294b49224b3
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=2640
access-control-allow-origin: *
etag: W/"60901a01-a50"
last-modified: Mon, 03 May 2021 15:42:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 7124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aqo2Jj5UfaKOftcuLQl2pQXv%2F%2Bl2YVGkqMT3%2BUlidvnPw4Kg%2FqpvGPYDFVEvyAZ2BROGHYFIwQ3khqvbmFOY9%2BPIZ7r9J0DkmLOLwFmwTHL0Ebz876UODtQT92qX1ZwufQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67cec6bb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
200 OK 4.6 kB URL HTTP/2 perezhilton.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2
IP
File type ASCII text, with very long lines (12987), with no line terminators
Hash 84069408ead5e9ee3b6a024ed4c8225d
5265f8490eff919150c4915adcfe8d6e3f2a30dd
316bb1832b74368eb5892611129835d7fc19882c89496138c922e9c458409539
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
cf-bgj: minify
access-control-allow-origin: *
etag: W/"6103ec5e-32bb"
last-modified: Fri, 30 Jul 2021 12:11:10 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4224
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Mkw2AOmVTKGAfacFy%2BgE%2FQo8LNYxQpDz5yX3Ucmpnly34i3WyZ4D%2F%2BTD%2FqjRGsog4AH5bQTKH%2BRicNid3gZJyEwHE8n5F4rgY41X6uBvo5xpOnw4TIJMPHIO04bcaN9cA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67d0c98b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5cba4e1962a1fe17c9021f3e418975a
01293d7e4084011451f7d17936ab2427504cdb1a
ecfe30d3abc32ca9f933303d75b2055642d3c7c8197af08fe2c314394699594b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 25c1a71b438dd3628ebe491222f1b414
651ec6be6391f31b7ea8f89441ffc9f58d3572f2
a9671ecd9fe7a56f470b4c16799360e71c39b48ed82ae1f7c7ba92f680da3ed9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2036
Cache-Control: max-age=134547
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:06 GMT
Etag: "6392dd51-117"
Expires: Sun, 11 Dec 2022 07:35:33 GMT
Last-Modified: Fri, 09 Dec 2022 07:01:37 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
s.ntv.io/serve/load.js
200 OK 150 kB IP
File type Unicode text, UTF-8 text, with very long lines (65442)
Size 150 kB (149841 bytes)
Hash 551e632771c806e92dd47e14e5601f50
54d13daf3e63d7265234da13faaef9885181f173
fe3fcec84dc8a3550f2131045266a6d40c8a66e2ce143443a37cccd7ff148b5f
GET /serve/load.js HTTP/1.1
Host: s.ntv.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: JtssDLYCaPeX6tzwPk365D6g93M+rn+MuT6N/E5QNOlRT9C8nChCQ2er/8XM6Zo6vRsj9orbpCw=
x-amz-request-id: 35TRNRDFK3YA834E
Last-Modified: Fri, 02 Dec 2022 18:57:02 GMT
ETag: "1a22438819c745c82db2b2b8680b1908"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 09 Dec 2022 18:13:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Cache-Control: public, max-age=3600
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4e3dc85fd71bdb106039966a96cdd02b
53d3487232ddcac30b53c224c94e63571633e5af
d0a3a292876b50c590a3fa6c04d3471a6fb726c54f57e75c21f2e1bd45424ace
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 1ab8c4f04123094889ddc41a300d6604
b345c6c92b5694e23939c5a410b6c60cf8e593aa
4d03e48529008ee5af1dd377f75f3a32bb334c32d1ed048a89a0d9d86f4240dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 400
Cache-Control: max-age=136134
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:06 GMT
Etag: "6392e9e8-116"
Expires: Sun, 11 Dec 2022 08:02:00 GMT
Last-Modified: Fri, 09 Dec 2022 07:55:20 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2556512b197b09798af71bea10bb4bbb
23b647aca5f8294ae82fa8cc7e2215ebe3347b60
3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-338092-8
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-338092-8
IP
File type ASCII text, with very long lines (1921)
Hash 7b564182684fa573268899924ad1a447
1653e09efdd004444180f65c3d68cba6d32627b1
38eec697cae9a753cbd9a6a657e7060ab65f80d81ab1c7a9f2105356cf719f62
GET /gtag/js?id=UA-338092-8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Dec 2022 18:13:06 GMT
expires: Fri, 09 Dec 2022 18:13:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44615
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/wp-embed.min.js?ver=5.5.3
200 OK 22 kB URL HTTP/2 perezhilton.com/wp-includes/js/wp-embed.min.js?ver=5.5.3
IP
File type ASCII text, with very long lines (1399)
Hash 5235fc2cfd69e5cea8e10841ba9fe5d4
ea349debb5c48b05ff87d8d100939d1f213698a7
a2b7b9e82ef1cbb3b97a8ce3ed5193ffd48feccbc60f1562b60c0c75e50069c1
GET /wp-includes/js/wp-embed.min.js?ver=5.5.3 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
last-modified: Wed, 28 Oct 2020 11:54:12 GMT
etag: W/"5f995be4-59a"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=78CRe%2B48wY7d%2Fd5w5UYZGCp5Y8mKWfC4z0fI19bxgrJisXkCJovhyYUlP9smm%2FMU4Q%2FK3ee68aXLiFjZcN9WT3lVN728TR1xKv2Xvusc6VP3u%2B1w%2FbSf7QXQ2umbUBemxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67d0cabb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6Lel6LwZAAAAAOWBQsyuijMbyGWGbJCfx8DOYNnc&ver=3.0
200 OK 583 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6Lel6LwZAAAAAOWBQsyuijMbyGWGbJCfx8DOYNnc&ver=3.0
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash df3d63f706ae2447104b59bcaee07507
7f587c7d3d71b4c15e44c50b4463684be0b87c0a
d5055a374ec37853848bcebb9cd4b523f05a4e0b6ed6bdf5db73abd18db8f097
GET /recaptcha/api.js?render=6Lel6LwZAAAAAOWBQsyuijMbyGWGbJCfx8DOYNnc&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 09 Dec 2022 18:13:06 GMT
date: Fri, 09 Dec 2022 18:13:06 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 583
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.4.2
200 OK 28 kB URL HTTP/2 perezhilton.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.4.2
IP
File type ASCII text, with very long lines (1849), with no line terminators
Hash 66fedb05c56b7fd792728b6d84f28a73
86a060319c28cf59daa7216923aaa1c7713cc2fc
0dcde821ddc97d003af649396ef7f94d26bf9abba57c0acf1d6817ada218d0bc
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.4.2 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
cf-bgj: minify
access-control-allow-origin: *
etag: W/"6103ec5e-739"
last-modified: Fri, 30 Jul 2021 12:11:10 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 7125
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3VjTwJ%2BMuqT9RkLk9qOZog6BhCsXcgCNm5P9SIk%2BDn3Bu7sQ8yK3dZRKq5FvJKSNwQ6WEDqc%2FlweH5W1QmlKtsLEBEXtA8ak2wpDN670Y3XXEdGOAdyGksfB5qPVpwWX1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67d0ca3b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f7aef7109978f8c1c53298563756a403
d610bb812b080710945dd47f9cccd794af9fe2f7
6366bc97e3f9ac9a6e8a294da60f2d961d2106180fd8ffaae97bc82ea399edb9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1670524641328&_since=%221666204638208%22
200 OK 8.3 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1670524641328&_since=%221666204638208%22
IP
File type JSON data\012- , ASCII text, with very long lines (8322), with no line terminators
Hash 7124adf8e0faebbc77b775185aaf3b33
aacce2c95e9e0c77a0d356fd948b3298937ef6c3
eec0a6dea45d80964aa28968deac9c4cc4190f7aeb28205a8448304499cc9c88
GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1670524641328&_since=%221666204638208%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 8322
via: 1.1 google
date: Fri, 09 Dec 2022 17:43:13 GMT
age: 1794
last-modified: Thu, 08 Dec 2022 18:37:21 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
200 OK 5.8 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (23577)
Hash ddafc8cdbf01e81cdc2a50bdc5b72d18
4f877775caa3bc135b62e2e9e0481e527c42aaa6
f9a659d0936e22524a6c5a617998d798117d73a807ad169e388b9774fddff550
GET /font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 632, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 21:08:57
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e6a55b08fe5091f45c9e99ce9e9f98c2
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 16051185
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 776fb67ded04b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4e3dc85fd71bdb106039966a96cdd02b
53d3487232ddcac30b53c224c94e63571633e5af
d0a3a292876b50c590a3fa6c04d3471a6fb726c54f57e75c21f2e1bd45424ace
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2556512b197b09798af71bea10bb4bbb
23b647aca5f8294ae82fa8cc7e2215ebe3347b60
3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 889f430a99c0c80590d06b884f6fe549
dff1a99d7540300fd6a64cc6ec39a5c70150cd96
696ae72dacd1fa04d85125a548c7f8e8922d513e8e15769be92f0c1a559c6127
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Dec 2022 18:13:07 GMT
Etag: "63925a50-1d7"
Last-Modified: Fri, 09 Dec 2022 17:16:54 GMT
Server: ECS (dcb/7EC6)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0mii8JIJVpyxUXYDgmUlutF7AUcCC--qDVwu5e2Hk02tO7LS05dbZw==
Age: 3373
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 962ee193c6e3b80b0a5914a422c3120e
1524e0da4daf1855d004e21d4f0a121ead45bc5a
ce6cb776fc8562f7ddb5635acd2d0ef8588569744d0e943481b2ee7138b846ac
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=101366
Date: Fri, 09 Dec 2022 18:13:07 GMT
Etag: "639254bc-1d7"
Expires: Sat, 10 Dec 2022 22:22:33 GMT
Last-Modified: Thu, 08 Dec 2022 21:18:52 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6r0c30qiJR80AWFMq0ryA1jN5dQV6xd2A7Ef2Ojbm6qozwAk4dWjhg==
Age: 3821
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: TvL/6JWiIyFNsjHW7K8+V2z656uaTjnMWlMyVnCSRJVQpe+hxk3aXvBFd5J23okbhwT4dbguKoCsQ6xaUdZmNw==
x-amz-request-id: GDDZ7XVPERK22FFE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 17:48:25 GMT
age: 1482
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4d63216157451fcc2da303f66736e0dc
d6b9e4a07e5b2d918cf68c46de4190f60815df13
d47c3684dafef38c0a3a56f7e1e1090dcf53a8bbb7aa20e2ffa151195fda80d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D47C3684DAFEF38C0A3A56F7E1E1090DCF53A8BBB7AA20E2FFA151195FDA80D1"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14713
Expires: Fri, 09 Dec 2022 22:18:20 GMT
Date: Fri, 09 Dec 2022 18:13:07 GMT
Connection: keep-alive
polyfill.io/v3/polyfill.min.js?features=IntersectionObserver
200 OK 94 B URL HTTP/2 polyfill.io/v3/polyfill.min.js?features=IntersectionObserver
IP
Hash eb8b0ba88b3acfb11ea81d5c02be9108
4b7f14cc2db25abdbe25472934b7469b2488f9d4
7237f15a97fe102c6ed13eadc0f7980da03cd06a20dfb7c7b8050e60dada617d
GET /v3/polyfill.min.js?features=IntersectionObserver HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
last-modified: Wed, 16 Nov 2022 09:56:10 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/105.0.0
date: Fri, 09 Dec 2022 18:13:07 GMT
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1628, PASS, fastly;desc="Edge time";dur=15
content-length: 94
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4d63216157451fcc2da303f66736e0dc
d6b9e4a07e5b2d918cf68c46de4190f60815df13
d47c3684dafef38c0a3a56f7e1e1090dcf53a8bbb7aa20e2ffa151195fda80d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D47C3684DAFEF38C0A3A56F7E1E1090DCF53A8BBB7AA20E2FFA151195FDA80D1"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14713
Expires: Fri, 09 Dec 2022 22:18:20 GMT
Date: Fri, 09 Dec 2022 18:13:07 GMT
Connection: keep-alive
perezhilton.com/wp-content/themes/understrap-master/js/theme.min.js?ver=0.9.4.1636670677
200 OK 89 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/js/theme.min.js?ver=0.9.4.1636670677
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 69b635e46459e0e715acf1eaf7976e5a
8377f8ea918f95f29b28eb3a421c7f31f6c1abd9
b80578b300538949d279bdf33d287b84bfb87efe203b784da50fb2e571479b65
GET /wp-content/themes/understrap-master/js/theme.min.js?ver=0.9.4.1636670677 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
last-modified: Thu, 11 Nov 2021 22:44:37 GMT
etag: W/"618d9cd5-1f54e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jqCfkdeuCyiY%2F6C1SbrLPK8iVeHKYvKb8p7em4vh3bDHLFNAk3jnlPYgNV9ZKhgni3zYZssNLRlmFApspsdMasDC3V1am3AftzUENbm8MLsvpnuKvZMf5GNYgB3jZia6KA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67d0c9cb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
200 OK 1.7 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
IP
File type JSON data\012- , ASCII text, with very long lines (1719), with no line terminators
Hash a4052b022cb93eb55aabe7cb67679df3
901bc58019c1c287782342cfcb9ad01ba4fa8657
959141ba846caac38284518837678def1e8c7d372a3b946a6c3e85ae5bfed470
GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1719
via: 1.1 google
date: Fri, 09 Dec 2022 17:38:51 GMT
age: 2056
last-modified: Thu, 08 Dec 2022 16:36:44 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1669904594434&_since=%221657747510534%22
200 OK 1.7 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1669904594434&_since=%221657747510534%22
IP
File type JSON data\012- , ASCII text, with very long lines (1681), with no line terminators
Hash 2340af2b6492b7d56b14a1d3276a7140
2e9ac7d9cf1dda477e24841874ceac7258c9e0b8
a49e7182487992abba172f758b9ae8129931086af51f3caa29731d29d4b7ba40
GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1669904594434&_since=%221657747510534%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1681
via: 1.1 google
date: Fri, 09 Dec 2022 17:47:08 GMT
age: 1559
last-modified: Thu, 08 Dec 2022 16:36:42 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/holiday-bg.jpeg
200 OK 4.2 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/holiday-bg.jpeg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c4bf61324c8f3532c6fce61349018750
0df6c432c4a1b5db0bdaf15fe11c1a6b7de73634
52d383b14ad1636a13de204c30313e8cb433228168f89e964edc889079255c8b
GET /wp-content/themes/understrap-master/images/holiday-bg.jpeg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: image/webp
content-length: 4204
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=8607
content-disposition: inline; filename="holiday-bg.webp"
vary: Accept
etag: "61a7284c-219f"
expires: Thu, 15 Dec 2022 16:34:18 GMT
last-modified: Wed, 01 Dec 2021 07:46:20 GMT
cf-cache-status: HIT
age: 178728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jB6wQbXQj3fyUF%2FVtaz9txvghYIHcw0ESh2ECxFykVo9WF9dxToNYHGQ2R1Usbyoyoz2yQhO80H6KwkdzJ%2FYjQDW8bHsElSpwEZ%2F5Pn20jbdRR6F5mt1LmdZwnMObfJ%2F2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776fb6825c22b4f1-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/side-video-title-bg.png
200 OK 110 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/side-video-title-bg.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7ce66afe1631031bb516d7773f506026
e45739542414189b9b9a46aec9aaa0925d62ae5e
3e6643c0f263147cc6cfeeb25b7dbcec9c8146e811eed36173fd152e4fe4ba46
GET /wp-content/themes/understrap-master/images/side-video-title-bg.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: image/webp
content-length: 110
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=214
content-disposition: inline; filename="side-video-title-bg.webp"
vary: Accept
etag: "5eecd0d9-d6"
expires: Thu, 15 Dec 2022 17:41:09 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 174718
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EWwq%2FNh9yxgKX0pejzp9bcinbUG%2BFmNH7Usi60a0PdGnWc2PCF6HKcRtWFhAKxLmo5l3u0cBH8XLRkNxfu%2BU1qFXafqcsDCC7F7jPSPCLF4lzKSut2oTqJW52JHvwt7SDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776fb6825c25b4f1-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/play-button-6.png
200 OK 5.0 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/play-button-6.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 09d6662e05a5682985f14cee49ffae23
02683261eb54226be9c9ce190594a4a8d3e7dba0
dd23ee2d447749cbbc982f7ee9cc9a88fbf70dd9a712324c8b1bdbea05209f0c
GET /wp-content/themes/understrap-master/images/play-button-6.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: image/webp
content-length: 4996
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=8970
content-disposition: inline; filename="play-button-6.webp"
vary: Accept
etag: "5eecd0d9-230a"
expires: Thu, 15 Dec 2022 21:57:56 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 159311
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aXyj2S62ySjQ0f%2FCjhQycGEHobpG8rWaSpccfjcd9Bnc%2FSCG93muifK0Rci5uRCHcM2TmnljgV3n%2BrAiv8gvv1cLBS0aHQd7CBpL8rIP%2BOgM5%2Fy%2BBEDFSuLzCAkJWGC24g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776fb6825c23b4f1-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/understrap-master/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: application/octet-stream
content-length: 77160
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
etag: "5eecd0d9-12d68"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1529
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VT5A8ZPRycDTtpiY79Y5L8eC1rOghtl9RNXkZ2Ih0PnWLquA42ndWAh4ds75IjgfK%2FMnP1fWVpUz8E34x%2BUy6%2Fc6dMrO9VxPH2brtTDpjagkMvicAapFoNCkvgzLMJp9Zw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb6826c43b4f1-OSL
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
200 OK 935 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
IP
File type JSON data\012- , ASCII text, with very long lines (935), with no line terminators
Hash fc59df2a1ddb194b9927e1bd05da82a5
54ae083c87343de5c5082cd16f6e4ec8e45769bc
cb645a2b572db86fddd92d7b4f54c55f1cb6ecada044fff5b5aea30e7df875f4
GET /v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 935
via: 1.1 google
date: Fri, 09 Dec 2022 18:08:32 GMT
age: 275
last-modified: Wed, 07 Dec 2022 15:06:39 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
web.prebidwrapper.com/perezhilton-DxtDG5qb8P/default/prebid-load.js
200 OK 1.7 kB URL HTTP/2 web.prebidwrapper.com/perezhilton-DxtDG5qb8P/default/prebid-load.js
IP
File type Unicode text, UTF-8 text, with very long lines (3530), with no line terminators
Hash d0609f7af2b3a4206179ed8907e364cc
cb14396afd1a95365f10645eb33a285dad49c9d1
c032da5f6ea9c006b03e64f2f8b62bb9ab8dd8e4877cbb3eee0447c1d831f9f9
Analyzer Verdict Alert fortinet Malware
GET /perezhilton-DxtDG5qb8P/default/prebid-load.js HTTP/1.1
Host: web.prebidwrapper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 22:56:28 GMT
x-amz-version-id: A8rnQYx3ZeoxcX12GWyYZZstcGI2IFw6
server: AmazonS3
content-encoding: br
date: Fri, 09 Dec 2022 17:18:59 GMT
cache-control: max-age=3600
etag: W/"5c74a485550f0d0d02d298aa2e05a981"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: n_eLInl5Fr4ypj0bTzv2Q_zj_ePxAF_4HmMtrv03CxjfkQ3vJANnRg==
age: 3300
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1670371273925&_since=%221666483264567%22
200 OK 54 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1670371273925&_since=%221666483264567%22
IP
File type JSON data\012- , ASCII text, with very long lines (53768), with no line terminators
Hash 420d2a8a87862ec8fb8678a2ec713b1b
ad55178f6765ac90ef6e073ba30d9d5508b6ce15
f923b4f7170196fa90968f69c3e8e8c18020e643dd6f9002817742cf6651ba8d
GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1670371273925&_since=%221666483264567%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 53768
via: 1.1 google
date: Fri, 09 Dec 2022 18:09:16 GMT
age: 231
last-modified: Wed, 07 Dec 2022 00:01:13 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
powerad.ai/script.js?ver=0.9.4.1636670677
200 OK 61 kB URL HTTP/2 powerad.ai/script.js?ver=0.9.4.1636670677
IP
Hash 58c19fcdbee8bde1b0232d4739dd1a36
72d4ff1afc860732ac87c227ef0dd27bb4322d74
32863eb5d18bffb9e15dda62ef44adbdb4a31393be3d4a9d7ae6ca94d245e1a5
GET /script.js?ver=0.9.4.1636670677 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
accept-ranges: bytes
cache-control: public, max-age=172800
last-modified: Fri, 09 Dec 2022 12:47:25 GMT
etag: W/"332cc-184f6ed1bc8"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:33:54 GMT
expires: Thu, 07 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 167953
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700|Lobster|Rustico|Quicksand:400,700&display=swap
200 OK 26 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700|Lobster|Rustico|Quicksand:400,700&display=swap
IP
Hash 7917c8ce4e19075c07e2b361f9bcb67a
44cecea05c185e3f9840ea71c56f04d5888d531f
d37b7c198cd0b6662be1bd22bd969680813e27abc969fd7665b6239dba02f3e2
GET /css?family=Roboto:300,400,700|Lobster|Rustico|Quicksand:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 18:13:06 GMT
date: Fri, 09 Dec 2022 18:13:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.pubmatic.com/AdServer/js/pwt/157577/2378//pwt.js
200 OK 77 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/pwt/157577/2378//pwt.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a7a2adda7125d7a51fe8d28683a84910
6978851206abcd5d2557c8ccccdb518034db53c2
f0c5ab3d98382d370b1327ac7c09e87850106805193516c25411dfdd0c9903f9
GET /AdServer/js/pwt/157577/2378//pwt.js HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 31 Oct 2022 15:50:05 GMT
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-type: application/javascript
content-length: 77322
cache-control: max-age=92952
expires: Sat, 10 Dec 2022 20:02:19 GMT
date: Fri, 09 Dec 2022 18:13:07 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
threetruck.com/v2ottNEyGq0p1mCsWUL35CzEebKPZB4BIhrwA3nqqE2Q6ZB5HD2uki1gUee0sTbli
200 OK 29 kB URL HTTP/2 threetruck.com/v2ottNEyGq0p1mCsWUL35CzEebKPZB4BIhrwA3nqqE2Q6ZB5HD2uki1gUee0sTbli
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8c055d6503dd9084a21329deb1583252
8118563bbe5ec7b8c14a975587e0fb90b7fc3551
14852b1a4b2b68340ef398a493018a89eb17c0c33e34e4105a235feb9907de60
GET /v2ottNEyGq0p1mCsWUL35CzEebKPZB4BIhrwA3nqqE2Q6ZB5HD2uki1gUee0sTbli HTTP/1.1
Host: threetruck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private, must-revalidate, max-age=21600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "29b42aab09c0efcf42ec9d7fccb3666a072388162c3cdec6614eae25e80023e1"
strict-transport-security: max-age=15724800; preload
timing-allow-origin: *
vary: Accept-Encoding, Accept-Language
x-buildname: hoothoot
x-buildnumber: 694373797
x-datacenter: gce-europe-west1
x-hostname: fen-hoothoot-europe-west1-test-04vg
date: Fri, 09 Dec 2022 18:13:07 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 8898bcf10eda1f421f3f7e91e2e59164
1fae235a8aca2d517b5226f62a1b1a80fc0d42d8
5fbeb7bd6a0e6ae68bb51e8b0c30b01815c649079ea5c1e99603332c40e35fc0
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 09 Dec 2022 18:13:07 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 09 Dec 2022 18:03:02 GMT
Expires: Sat, 10 Dec 2022 18:03:02 GMT
ETag: "1fae235a8aca2d517b5226f62a1b1a80fc0d42d8"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
powerad.ai/detect-aau?ch=2
200 OK 2 B URL HTTP/2 powerad.ai/detect-aau?ch=2
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /detect-aau?ch=2 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
X-Firefox-Spdy: h2
powerad.ai/detect-aau?ch=1
200 OK 2 B URL HTTP/2 powerad.ai/detect-aau?ch=1
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /detect-aau?ch=1 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
200 OK 1.5 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
IP
File type JSON data\012- , ASCII text, with very long lines (1506), with no line terminators
Hash 53a3f7b3b704cfaf73db62670e538a5b
f92fbcd2c053cc26fe81474c19bfcf3fd94e901e
d5a8da9110e55a35fc8d1f47cd54e84ab99f26d25bd1a4325bdff8bfa76c0ac7
GET /v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1506
via: 1.1 google
date: Fri, 09 Dec 2022 17:39:34 GMT
age: 2013
last-modified: Mon, 05 Dec 2022 16:36:43 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/tcfv2/google-atp-list.json
200 OK 36 kB URL HTTP/2 quantcast.mgr.consensu.org/tcfv2/google-atp-list.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 7216645cf559dc43ef2b0ea2d9d08889
97184f822e98082b37c0f5de0021bee8f6764b84
72aa22ab227e69269d5ea9b401f41c25615594781712fdc078a6f79878eafb00
GET /tcfv2/google-atp-list.json HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Fri, 09 Dec 2022 03:01:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Fri, 09 Dec 2022 03:01:34 GMT
etag: W/"505447daad0efff5e3d0fa9fe62f05e2"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PR4g5NcR9dIiwd1F3KXBPzmB4szQjnDWPts0hoh2bS079k0gpLpfAQ==
age: 54690
X-Firefox-Spdy: h2
a.teads.tv/analytics/tag.js
200 OK 3.4 kB URL HTTP/2 a.teads.tv/analytics/tag.js
IP
File type ASCII text, with very long lines (4822)
Hash 6ddfb3a828a563a7719081ff9aeedaba
80286455b7c85311df5f997714b83380ac02fd6d
826524e59a21d4190f923f804a17db1513e1ee3cb4a5ed12f3bb6a5b4f370835
GET /analytics/tag.js HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: k4TMf+nUnZKvTWrY3L1hjE/JYeuz9zKfxukiA7vQeNd1x3Rf7sggpbW+br5h0HrvvndaGzLuSVU=
x-amz-request-id: NXHNMBZWXJ2Q1A47
last-modified: Wed, 02 Nov 2022 09:38:15 GMT
etag: "6ddfb3a828a563a7719081ff9aeedaba"
x-amz-server-side-encryption: AES256
x-amz-version-id: Y6qsPmt0o95KDo3Ibo2euzqSnxQebNV8
accept-ranges: bytes
content-type: text/javascript;charset=utf-8
content-length: 3391
cache-control: private, max-age=3600
date: Fri, 09 Dec 2022 18:13:07 GMT
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
static.adsafeprotected.com/skeleton.js
200 OK 17 B URL HTTP/2 static.adsafeprotected.com/skeleton.js
IP
File type ASCII text, with no line terminators
Hash 53fab767ecbd3bf07990b10246befbd4
49044085bb137d175d261b5fb9617c6f0f302c49
bdeed1e1c0751610c8f3dc2a5c78c93f841c366b36a7f7a54f5e6752c2656c05
GET /skeleton.js HTTP/1.1
Host: static.adsafeprotected.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 17
date: Sat, 05 Nov 2022 01:51:23 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Aug 2020 23:54:35 GMT
etag: "53fab767ecbd3bf07990b10246befbd4"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j9GrIr5OdoN8Lj_D_5brZBqbUAaaEupbWDvaxC0XV_VNaqV_8PcApQ==
age: 2996505
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/glass.png
200 OK 460 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/glass.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b976c00d10b3f9b36a00d17cdf9fa326
2879298b17b5234fc7b5f9217c4d46a78fcb685a
eb32633a40695a487dd80912b7d58b061aac6eee2bfcaa76ec7f36cf7749c635
GET /wp-content/themes/understrap-master/images/glass.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Cookie: ntvSession={}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh; _pubcid=055480c5-80f6-4e64-9ba8-05fae7e9dfe4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:08 GMT
content-type: image/webp
content-length: 460
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=996
content-disposition: inline; filename="glass.webp"
vary: Accept
etag: "5eecd0d9-3e4"
expires: Fri, 16 Dec 2022 22:22:08 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 71460
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SEHYlGRc0OyUym4gBg%2Bm79fthdXywnobBEkTiDW%2BZQLHH05b%2FFm2evZZyBTNV3XA5yYvft1dHx0AFXY1FD4ru1%2BMLUPIYTYZ9KR1oJRtR1y7hVQvGZki20OQL9%2FFbYYQOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776fb6851f6db4f1-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/uploads/2020/07/perez-hilton-logo-300x49-1.png
200 OK 3.8 kB URL HTTP/2 perezhilton.com/wp-content/uploads/2020/07/perez-hilton-logo-300x49-1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c7764c24e2de3456874de6498526d64f
3eba45267451f1f7207775df71e25646a2f39b42
2d420940dd06b215993e088c1fa5e041093186882e0c5533f67b4d696f34fbc0
GET /wp-content/uploads/2020/07/perez-hilton-logo-300x49-1.png HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Cookie: ntvSession={}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh; _pubcid=055480c5-80f6-4e64-9ba8-05fae7e9dfe4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:08 GMT
content-type: image/webp
content-length: 3834
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6439
content-disposition: inline; filename="perez-hilton-logo-300x49-1.webp"
vary: Accept
etag: "5f177546-1927"
expires: Thu, 15 Dec 2022 17:41:09 GMT
last-modified: Tue, 21 Jul 2020 23:07:50 GMT
cf-cache-status: HIT
age: 174719
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BZ9Ry7A%2BsI8rGczrUNepEjFCTQXMmxDO61UnuDbP0bqMAGruCMmqwVDMzoPFcQ4tFTY3XYk7zr9ApLqeEsnB%2B4L9zFv65xFg1mZG9BkLVwZY4eFiA8pJEfTWJG3JUn3E5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776fb6851f6fb4f1-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f546e102d986faf1029509d599b730
cc045a705fd6758b7b575fde5dfb79facc9c3546
ef492301b2b30e5076f7dffa07973e65e9a200ba9ef4d3568a527d3f973f3349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perezhilton.com/wp-content/themes/understrap-master/images/gomez.jpg
200 OK 12 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/gomez.jpg
IP
File type JPEG image data, progressive, precision 8, 190x190, components 3\012- data
Hash f9feafc28be8ade814b5c1be0540a3b7
189208ddc018b45f54a2b5a7e623264d0467019f
968886964c5a38a323c2a224be25d40b5c89a7b3333b140ea3d4a8a633fe0b20
GET /wp-content/themes/understrap-master/images/gomez.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Cookie: ntvSession={}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=6683316680106290; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh; _pubcid=055480c5-80f6-4e64-9ba8-05fae7e9dfe4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:08 GMT
content-type: image/jpeg
content-length: 12223
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=12504, status=webp_bigger
etag: "5eecd0d9-30d8"
expires: Fri, 16 Dec 2022 08:08:29 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 122679
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r3puXFlhp94ncL54zEW8hEFhEb1e7h7a3YIr3FNHlnZZBR3eNvZMxSiOXfm%2FgnT4l%2BY83m6hAtNWhPeXx99tUWciyRj5gWv2L9r8gGl%2BNuUf6OComJPtRZI9JIYaJeRxiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb6851f71b4f1-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d5aa0473ca0e4dd53153e63f03136515
ba1ac38727f37f625d6fd5c1a85f341188d745d8
3c3ff11f446d4d177df3c948264722e20da8c87141ae3906b2035d590192d418
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6343
Cache-Control: max-age=92367
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:08 GMT
Etag: "639227bc-1d7"
Expires: Sat, 10 Dec 2022 19:52:35 GMT
Last-Modified: Thu, 08 Dec 2022 18:06:52 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 7032ee3695d18e7b8abc4a28ecee4f86
19cd469bf1d1ca535cf1e0ebe3e7045e5a7158b3
dfa854ec407c2bbc42a01a1cd4c4468677bc564431db87834ae9360be295163c
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 09 Dec 2022 18:13:07 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 09 Dec 2022 16:29:35 GMT
Expires: Sat, 10 Dec 2022 16:29:35 GMT
ETag: "19cd469bf1d1ca535cf1e0ebe3e7045e5a7158b3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10263
Expires: Fri, 09 Dec 2022 21:04:11 GMT
Date: Fri, 09 Dec 2022 18:13:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10263
Expires: Fri, 09 Dec 2022 21:04:11 GMT
Date: Fri, 09 Dec 2022 18:13:08 GMT
Connection: keep-alive
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 13:40:02 GMT
expires: Thu, 07 Dec 2023 13:40:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 189186
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10263
Expires: Fri, 09 Dec 2022 21:04:11 GMT
Date: Fri, 09 Dec 2022 18:13:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c3214044657f3b876d1f1848bca5684
7558222788f06623ddae6e883413e38e1146281e
e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:41:46 GMT
age: 52282
etag: "7558222788f06623ddae6e883413e38e1146281e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 730ba1a8edb79ba6f83b46d1ba5aed7b
55a236fedf6f5f7ca2bb88ae13e20846a50fd36d
f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12748
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjuciEptIAMFj9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 07:44:29 GMT
age: 37719
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fba9a3854df65740512f96efe7442e58
8fbff7725c842d70e047c635a725723a9dc9c55a
6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7Dp35PIr_WYUI1bBa21AvmCMEPi0d3jnhuS8eEk3Q3CXRcGWAnkD8g==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 16:56:53 GMT
age: 4575
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c94003641bb5a7595e7004f80f95d22
3446450df60d732f9021d5bfd5f5f7c6c870d9ec
4d782dbf94b2163e9bc18028cd0c1a391fdcfcb019f23c4c26ea0b44432039ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7801
x-amzn-requestid: cb8d5aab-409f-4b39-b498-b1ba84f34e06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFRNHX4oAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c07-7c6e3bfa3f81082b48f43fa9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8QHhEAFHTHd-5UqS1S5qwJj_h4WNfix2CgS4MO4zR_psrzgMP3SZ5g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 17:48:23 GMT
age: 1485
etag: "3446450df60d732f9021d5bfd5f5f7c6c870d9ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c9208747f2926b414bae65ed0e18fac5
3b25f459b1fe1a63689880699450305a8aee8b77
2c5333a23ade630e8dd8242aa59e371fa2208e265c58916e6fa799683d53f196
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0905812e8498e6c5c0a9b4b584b972f
039b784fd1e0152ec7f49a54ba027f0b2bd1e833
ee3531ef0f334dcd73a86b1e4365a020d5db69ff7b82bad136eaf1a8e9d3b47f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i3.ytimg.com/vi/7-qSZ1Ydw20/hqdefault.jpg
200 OK 12 kB URL HTTP/2 i3.ytimg.com/vi/7-qSZ1Ydw20/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash d59bb4a5e90bd469dfb85f962bdd03d4
0d5717b992e3f38acc2fbe77c7802d88982015a7
8a7d342fed90e7bc621d747aac794f5d21590cb01142da86d0e9ce0e29948c46
GET /vi/7-qSZ1Ydw20/hqdefault.jpg HTTP/1.1
Host: i3.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 12525
date: Fri, 09 Dec 2022 18:13:08 GMT
expires: Fri, 09 Dec 2022 18:18:08 GMT
cache-control: public, max-age=300
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fb37a29cb06b213111896f48bc092d34
8a7a015babf3bbbf0f24183174d90f3123eb1c17
c4d71bcc8f896da290e251ba4c17fdc102e69dfaa08a825103bb4084e4db6508
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102097
Date: Fri, 09 Dec 2022 18:13:08 GMT
Etag: "63926011-1d7"
Expires: Sat, 10 Dec 2022 22:34:45 GMT
Last-Modified: Thu, 08 Dec 2022 22:07:13 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pDw10NI31u7TeCEghgfri0MIt_unWgr3I16Tke1lgEtbQCMsa-GkFw==
Age: 1652
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 09 Dec 2022 17:34:02 GMT
expires: Fri, 09 Dec 2022 19:34:02 GMT
cache-control: public, max-age=7200
age: 2346
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-GANCBjEfRH5Fe.js
200 OK 160 B URL HTTP/2 rules.quantcount.com/rules-p-GANCBjEfRH5Fe.js
IP
Hash 7602c05be39825c3fad02a96f76db456
db61024519befad6dc15191bcfe8090ca3a7ee18
a67bbdc13dec7d78a2a262845fb14cec2007d8dfad2743c3ffa666e7dbc3111f
GET /rules-p-GANCBjEfRH5Fe.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 160
last-modified: Fri, 14 Oct 2022 00:20:54 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Fri, 09 Dec 2022 17:20:09 GMT
cache-control: max-age=3600
etag: "7602c05be39825c3fad02a96f76db456"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WS1zm_9YABK8LYZ-Bmp0MZgwMYSU_t5v_oGU7U85520BFtopn63nFg==
age: 3180
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 19c7ed726bfef20e4e215cf1847b4f3e
0e47e9f3da985c4487175134c357bd7d4ef28c8a
aa91a77d5cb1652c45d4323c570ce831fcd1cf4a9c1775dfba2129b8f850e484
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=101364
Date: Fri, 09 Dec 2022 18:13:08 GMT
Etag: "63925eaa-1d7"
Expires: Sat, 10 Dec 2022 22:22:32 GMT
Last-Modified: Thu, 08 Dec 2022 22:01:14 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: A4bmqXl8ljhH1SDjzQtg1t3F-ZBEmRgTChF9p4f2qg0tpv3yKy2QFw==
Age: 1278
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8b3692ad358688a890df4ea9ef93ab3c
c4ab76e21a6a41066e36c01aab819a3fbfa760c0
4fd25fca7c5adaa3fba03f99db3e510b1c4b9d7e33f4a59c84ab2ef7caf1dbf8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=95022
Date: Fri, 09 Dec 2022 18:13:08 GMT
Etag: "63923f8f-1d7"
Expires: Sat, 10 Dec 2022 20:36:50 GMT
Last-Modified: Thu, 08 Dec 2022 19:48:31 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: laCz6M1Eli_82ESA703UPyrr39qsfnIktaHwo4QBLy7hou7Wc4fLKQ==
Age: 2899
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=4e8fb3b2-1c6c-42d6-890c-e5a6718315a3
204 No Content 0 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=4e8fb3b2-1c6c-42d6-890c-e5a6718315a3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=4e8fb3b2-1c6c-42d6-890c-e5a6718315a3 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Fri, 09 Dec 2022 14:09:45 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -zViyNQ6Bzk6UeXgbRUP0toMjvmfuP7rKFOXZB5XOA6hr8W_SO89UQ==
age: 14602
X-Firefox-Spdy: h2
jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&us_privacy=1---
200 OK 3.8 kB URL HTTP/2 jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&us_privacy=1---
IP
File type Unicode text, UTF-8 text, with very long lines (15935), with no line terminators
Hash 515570597b0dd751de0950806e447e7e
9ffc683170eda769973ce3026a471e1e3feed227
9f92b739235703c936db5d851bfc46eef046bbffb1dee21923d8a091f3e5eb0b
GET /t?ntv_url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&us_privacy=1--- HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:08 GMT
content-type: text/javascript;charset=UTF-8
content-length: 3785
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Sat, 09-Dec-2023 18:13:08 GMT; Path=/; Secure; SameSite=None;
content-encoding: gzip
X-Firefox-Spdy: h2
socialcanvas-api.kargo.com/v2/request
204 No Content 0 B URL HTTP/1.1 socialcanvas-api.kargo.com/v2/request
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2/request HTTP/1.1
Host: socialcanvas-api.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.0
Date: Fri, 09 Dec 2022 18:13:08 GMT
Content-Length: 0
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Vary: Access-Control-Request-Headers
Access-Control-Allow-Headers: content-type
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ea916d6aba731777acf13ce1ba4c450d
e4326ac221efd16dfd27d767aaae5cfd10665aa6
4af8062fd66cd9b64f4833c794eba79d02e9f79e72a87ec869c6846fd146796a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102272
Date: Fri, 09 Dec 2022 18:13:08 GMT
Etag: "639262e5-1d7"
Expires: Sat, 10 Dec 2022 22:37:40 GMT
Last-Modified: Thu, 08 Dec 2022 22:19:17 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eiFL9Pd7Z1QqqH7bb1aMYS09Udr8MCej2gfktc2NGFt79SaPYV8WsQ==
Age: 1103
socialcanvas-api.kargo.com/v2/request
200 OK 1.3 kB URL HTTP/1.1 socialcanvas-api.kargo.com/v2/request
IP
File type JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1289), with no line terminators
Hash e8b25f21e561a8407514dcce6569f421
5c0dcdfbaa38b18a48d0b9fac6760052df220b22
37899332c1e04d19168935a3dde5fec4d0504371087fdde176eeae36d0f23194
POST /v2/request HTTP/1.1
Host: socialcanvas-api.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 334
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.0
Date: Fri, 09 Dec 2022 18:13:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 1289
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With
ETag: W/"509-XA3N+6o4sYpI0Ln6xnYAUt8iCyI"
rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&duid=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh&se=e30&dtstmp=1670609586901
302 Found 0 B URL HTTP/2 rp.liadm.com/j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&duid=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh&se=e30&dtstmp=1670609586901
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&duid=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh&se=e30&dtstmp=1670609586901 HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 09 Dec 2022 18:13:08 GMT
content-length: 0
trace-id: c89313364c79b47c
vary: Origin
location: /j?wpn=prebid&us_privacy=1---&gdpr=0&pu=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&duid=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh&se=e30&dtstmp=1670609586901&n3pc=true
set-cookie: lidid=9d5f1f3a-23b0-4493-8b91-0a38f011d22b; Max-Age=63072000; Expires=Sun, 08 Dec 2024 18:13:08 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 49d7471e817b81a19376975f33bc62b3
ff1aed2c73a9452252770f3cca1cec56cf499581
7ee735fd20ddb57361021dd64ef05991ab04cbefb1b51da809d0d0090c685701
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 18:13:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 12:11:58 GMT
Expires: Fri, 16 Dec 2022 12:11:57 GMT
Etag: "ff1aed2c73a9452252770f3cca1cec56cf499581"
Cache-Control: max-age=582528,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776fb6897b9a0b51-OSL
dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-wrapper.js
200 OK 25 kB URL HTTP/2 dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-wrapper.js
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 9b9686c21b03ff3d50a7380de2f9f44c
3ce36ff4b3cb0acbb26efcd0b3f2c54a83e52dee
15876036b0545948ec21f08b45ae30cc6f13909dfeed3da396fe9ff69c6debbd
GET /perezhilton-DxtDG5qb8P/default/prebid-wrapper.js HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 22:56:28 GMT
x-amz-version-id: ERqHJCWqVNwwikWl7Uzcbq8x8v2C8HIY
server: AmazonS3
content-encoding: br
date: Fri, 09 Dec 2022 17:46:15 GMT
cache-control: max-age=3600
etag: W/"d5e98086e467f2cb24725dac302466e6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: W9j-VwEDw63dBJtdoxlJtUUZ-VUCOJT5BJ8T6eeRLhQMYIY6hrtFIw==
age: 1693
X-Firefox-Spdy: h2
p.cpx.to/p/12967/px.js
200 OK 2.0 kB IP
File type ASCII text, with very long lines (1990), with no line terminators
Hash 5dbddde1d9530a933894a8cefd6890d2
2539ba49075ba661adeaecb49aa4b88f75ce4959
f266acb707c5b2704c3b6e18e0888d7995bad0ba0ffec4a125146f7e3d058583
GET /p/12967/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2419200, public
Content-Type: application/javascript; charset=UTF-8
Date: Fri, 09 Dec 2022 18:13:07 GMT
Content-Length: 1990
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f38cc3b77d28b573af9587cadaad19a0
cf720d01fa25c3510b46175601d4975db4d210ff
224a217344603097cb0d8924a6422f39cd6fa6d9e136e084456df065f96f4d60
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100659
Date: Fri, 09 Dec 2022 18:13:08 GMT
Etag: "63925081-1d7"
Expires: Sat, 10 Dec 2022 22:10:47 GMT
Last-Modified: Thu, 08 Dec 2022 21:00:49 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: D7oZeu0J79ink58PlehPSX6iNRqU8PcFCu7hbIxKPeP6O_gKQI_3KA==
Age: 4198
region1.google-analytics.com/g/collect?v=2&tid=G-9JS9Z0NFL0>m=2oebu0&_p=523452773&cid=729171255.1670609587&ul=en-us&sr=1280x1024&_s=1&sid=1670609587&sct=1&seg=0&dl=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&dt=Page%20not%20found%20-%20Perez%20Hilton&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-9JS9Z0NFL0>m=2oebu0&_p=523452773&cid=729171255.1670609587&ul=en-us&sr=1280x1024&_s=1&sid=1670609587&sct=1&seg=0&dl=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&dt=Page%20not%20found%20-%20Perez%20Hilton&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9JS9Z0NFL0>m=2oebu0&_p=523452773&cid=729171255.1670609587&ul=en-us&sr=1280x1024&_s=1&sid=1670609587&sct=1&seg=0&dl=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&dt=Page%20not%20found%20-%20Perez%20Hilton&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://perezhilton.com
date: Fri, 09 Dec 2022 18:13:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 999266544254be9da964ca1dd6f6ee4d
8ce81e14c9125dde08c43148bbf7824acb08d078
a791002a6f86fbad2af0cd2d856b22dcd567c71217291b2b275ecf081107c043
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1624
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:09 GMT
Last-Modified: Fri, 09 Dec 2022 17:46:05 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
200 OK 2.8 kB URL HTTP/2 pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
IP
File type C source, ASCII text, with very long lines (2658)
Hash bf5da1c2137a9f95540c5c865952c04b
d07a569ff37d68467841990cad5d2a99e1a2e37d
8e521ebeb6ce59914c54f532b1577efd671f4b02bb3c331e01b4a7e79a02cfea
GET /v5/pixeljs/Hc6PdfQeAi.js?dne=1 HTTP/1.1
Host: pixel.zprk.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:08 GMT
content-type: text/plain;charset=UTF-8
content-length: 2753
access-control-allow-methods: POST, GET, DELETE, PUT
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/perezhilton-trademark.jpg
200 OK 9.7 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/perezhilton-trademark.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x73, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash eccc656e1b42f183e93d269f8783a2b5
268c4b36d6810c9c80f8d927e87b39c0c6c34dd0
905e20674f5c009e9e8f0626c74d2cb25ee4679cdbf95457be9885894655ad7e
GET /wp-content/themes/understrap-master/images/perezhilton-trademark.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Cookie: ntvSession={"id":5719933,"placementID":1114139,"lastInteraction":1670609587476,"sessionStart":1670609587476,"sessionEndDate":1670630400000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=3524755945110770; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh; _pubcid=055480c5-80f6-4e64-9ba8-05fae7e9dfe4; _ga_9JS9Z0NFL0=GS1.1.1670609587.1.0.1670609587.0.0.0; _ga=GA1.2.729171255.1670609587; _gid=GA1.2.342157026.1670609587; _gat_gtag_UA_338092_8=1; _gat_gtag_UA_167135943_9=1; _awl=2.1670609588.0.5-c89902312149f1b8a8d2bf141b4b4c37-6763652d6575726f70652d7765737431-0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: image/webp
content-length: 9676
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=13137
content-disposition: inline; filename="perezhilton-trademark.webp"
vary: Accept
etag: "5eecd0d9-3351"
expires: Thu, 15 Dec 2022 19:13:58 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 169151
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cCzMdSAOCccFxrzSg1JaZ1rdwF2ujLu4oHarmnveiHbOtAi64ziy968P2f%2FfwMR1m8mvxmxStbn32q8JkW7IiNB%2F%2FXp%2BBHjzGcCNMVcEbJsoansjh%2Bo2ahvdzJFBQ3%2FhCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776fb68b7ff5b4f1-OSL
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/swift.jpg
200 OK 12 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/swift.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 190x190, components 3\012- data
Hash 34c9f26ae5267c204dea73eac0789c5d
d13b938489c786721daf7d84fd71e40ba91372cf
661b166c05b0541384b3a5815560968ff17ca34e25bfa18e8c872b9e30c1f42d
GET /wp-content/themes/understrap-master/images/swift.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Cookie: ntvSession={"id":5719933,"placementID":1114139,"lastInteraction":1670609587476,"sessionStart":1670609587476,"sessionEndDate":1670630400000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=3524755945110770; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh; _pubcid=055480c5-80f6-4e64-9ba8-05fae7e9dfe4; _ga_9JS9Z0NFL0=GS1.1.1670609587.1.0.1670609587.0.0.0; _ga=GA1.2.729171255.1670609587; _gid=GA1.2.342157026.1670609587; _gat_gtag_UA_338092_8=1; _gat_gtag_UA_167135943_9=1; _awl=2.1670609588.0.5-c89902312149f1b8a8d2bf141b4b4c37-6763652d6575726f70652d7765737431-0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: image/jpeg
content-length: 11782
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=12197, status=webp_bigger
etag: "5eecd0d9-2fa5"
expires: Sat, 17 Dec 2022 08:39:48 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 34401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CBMMQkOKYwFhzsjWPyLnTvngTghYscwvUddv249S%2B4tAESFhkRJix%2B4ClN%2B0q5X%2Bv4u6XVZl5cm7VDTPL20vvi%2FSXuFe6RKlYOf%2BGpZ31G3okZXyGkteaAKi76%2Foyj7T4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb68b7ff3b4f1-OSL
X-Firefox-Spdy: h2
hb.brainlyads.com/prebid.js
200 OK 180 kB URL HTTP/2 hb.brainlyads.com/prebid.js
IP
Size 180 kB (180195 bytes)
Hash 4722cf8e0a65b43318a5dc27c546cbd3
070c1ce76a1767aa47175e5dbb0ef7acfa0483c1
d8a99fb7789498442844ad8c4bcad0068f307aabb0530c978aff289a26ffcfc4
GET /prebid.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 09 Dec 2022 18:13:08 GMT
content-type: application/javascript
last-modified: Tue, 06 Dec 2022 17:27:37 GMT
vary: Accept-Encoding
etag: W/"638f7b89-91d51"
expires: Fri, 16 Dec 2022 18:13:08 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5
200 OK 699 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5
IP
File type JSON data\012- , ASCII text, with very long lines (699), with no line terminators
Hash c3ae1582883189831fc9d2b110aad0ad
b401c55f9459b3c1c9dbeabf34fd4404002099b3
6d54aecd2bd9fef0d74763ef48135aded46f2a190546075cf9466b9e5296c8a9
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fperezhilton.com&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 699
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Fri, 09 Dec 2022 17:26:16 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j7Yj9krNipagmrVeuVWazob_iBza32pZXQ_Z_TgtPr4VSEXjYb6iBg==
age: 2812
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash db42f7db087ffb56bcc4231ae89052e1
cacf8c067a6a27b42ca8a8c184c093afe4b50f70
bea1a512b8fa112bc5f9a278ec52c6b70dff895766f7746af933981e5b9918a6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1174
Cache-Control: max-age=109903
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:09 GMT
Etag: "6392806e-138"
Expires: Sun, 11 Dec 2022 00:44:52 GMT
Last-Modified: Fri, 09 Dec 2022 00:25:18 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 312
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 174017f41874baa84090932124bce4ef
a3ac187a7712897aeaa66893f558cf718f5a7bb7
2cfe1643466443095f71ac576feb3f75e4184ffb061951e77683b116937203f9
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 912
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 09 Dec 2022 18:13:09 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://perezhilton.com
AN-X-Request-Uuid: 9fc7f6d1-ac6e-40d6-97ac-6d075fe38885
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1001.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
htlb.casalemedia.com/openrtb/pbjs?s=501529&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%221317268f60c17a88%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214baa201e579bea%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22501529%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22055480c5-80f6-4e64-9ba8-05fae7e9dfe4%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
200 OK 38 B URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=501529&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%221317268f60c17a88%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214baa201e579bea%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22501529%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22055480c5-80f6-4e64-9ba8-05fae7e9dfe4%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d08036cee90338e33294a05905ee41f2
df18d586bc728384f13303a64756e9e329ed1246
63185054a48643dae0fdcafc600bb20bd8bc79d9b18f643e3a5760875cbeccfd
GET /openrtb/pbjs?s=501529&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%221317268f60c17a88%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214baa201e579bea%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22501529%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22055480c5-80f6-4e64-9ba8-05fae7e9dfe4%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: application/json
content-length: 38
cf-ray: 776fb68b5e3ab4e8-OSL
access-control-allow-origin: https://perezhilton.com
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HeNzf8lA0APnnUerxqIOssVjdTw%2FzBGt2%2Bdf7eWn3uTOf%2BzOOPoVpo%2BbNiKdP2vdmH9lkis%2B1V0CZVLGAE%2BypB4jIPL9%2FxFbSrahukecpJPbhKpU5MDwNb1XnRn5X8tdWk9W3TBD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
200 OK 41 B URL HTTP/2 onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c15203d1319c02fe2a06d78bc45eccf
40386992654bdda331c8f6eb21ac79de396119ee
cc81a9c5e7147dba347b0ffd34f64e9a7c40f25782569fec5c3fc68b4017badb
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1025
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://perezhilton.com
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 49cea5c9c728417c1053379df6f29783
5af4586b2cd4fc46b3bc40c25c9df169396d006d
b6e4995f12e9e7a0a03a21149f6e2bda28c7b6f32781b763aef5c0d9276dc77f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 09 Dec 2022 18:13:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 08 Dec 2022 21:12:05 GMT
Expires: Fri, 09 Dec 2022 21:12:05 GMT
ETag: "5af4586b2cd4fc46b3bc40c25c9df169396d006d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 23fbcd21ea9675a5440ad8cb43522ec6
a16e84915a9b2a896af9c85db217dd5b832e466e
3dcd77aafffb880a68dcb3f73938efc62f66ae6aa97e600c12dc9810e9087c7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3DCD77AAFFFB880A68DCB3F73938EFC62F66AE6AA97E600C12DC9810E9087C7A"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10105
Expires: Fri, 09 Dec 2022 21:01:34 GMT
Date: Fri, 09 Dec 2022 18:13:09 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 999266544254be9da964ca1dd6f6ee4d
8ce81e14c9125dde08c43148bbf7824acb08d078
a791002a6f86fbad2af0cd2d856b22dcd567c71217291b2b275ecf081107c043
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1624
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:09 GMT
Last-Modified: Fri, 09 Dec 2022 17:46:05 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 872
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: max-age=0, private, must-revalidate
date: Fri, 09 Dec 2022 18:13:09 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 920 B IP
Hash 6a566027947d237ac8e1e886b6fe1cd0
2752d757574b4f97c63f22340e878cc93a013690
10a252436030c61bc8f186a7752dce34c3ad6320f1888e51f0c08f4b42868140
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2134
Cache-Control: max-age=113367
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:09 GMT
Etag: "63928a36-1d7"
Expires: Sun, 11 Dec 2022 01:42:36 GMT
Last-Modified: Fri, 09 Dec 2022 01:07:02 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
at.teads.tv/fpc?analytics_tag_id=PUB_18753&tfpvi=&gdpr_status=23&gdpr_reason=230&gdpr_consent=&ccpa_consent=1---&shared_ids=&sv=8480ba3&
200 OK 56 B URL HTTP/2 at.teads.tv/fpc?analytics_tag_id=PUB_18753&tfpvi=&gdpr_status=23&gdpr_reason=230&gdpr_consent=&ccpa_consent=1---&shared_ids=&sv=8480ba3&
IP
File type ASCII text, with no line terminators
Hash 3b02751d2e1a8ce5f29f3782619050a9
3bf40ecc852e93b291a622f1924dc1e2cc2b2140
c07f42e494320204c5211787310769b55bfdb1caca0551d56639940a883552ef
GET /fpc?analytics_tag_id=PUB_18753&tfpvi=&gdpr_status=23&gdpr_reason=230&gdpr_consent=&ccpa_consent=1---&shared_ids=&sv=8480ba3& HTTP/1.1
Host: at.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
content-length: 56
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
expires: Fri, 09 Dec 2022 18:13:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 09 Dec 2022 18:13:09 GMT
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1
200 OK 4.9 kB URL HTTP/2 perezhilton.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1
IP
File type ASCII text, with very long lines (21597)
Hash 2a95aa6f817cec9dbf3bd74531d83b01
9a492c624d74e82c1903e7091708146093f8d469
56af3d8e4479b551bdd9ed86e5ea3164b1ed0144768d1fd6b610661160c20308
GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.1 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: text/css
last-modified: Thu, 22 Sep 2022 13:10:58 GMT
etag: W/"632c5ee2-545e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4225
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ax0IZNUl8RWwq8e3oK1YZ5W7ySkXICzzdVPrzl8a0dIHF4Y3Bfc6XXRoHrNv4d6bTC03qO9nFN%2B50BtxHJkt1naiA4XxYt7qGRjr9KgXcTjEMoJ8dwymjgp4egjQ5qmFFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67cec68b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-338092-8&cid=729171255.1670609587&jid=568795780&gjid=587257870&_gid=342157026.1670609587&_u=YADAAUAAAAAAACAAI~&z=1064765411
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-338092-8&cid=729171255.1670609587&jid=568795780&gjid=587257870&_gid=342157026.1670609587&_u=YADAAUAAAAAAACAAI~&z=1064765411
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-338092-8&cid=729171255.1670609587&jid=568795780&gjid=587257870&_gid=342157026.1670609587&_u=YADAAUAAAAAAACAAI~&z=1064765411 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://perezhilton.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 09 Dec 2022 18:13:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 54d83ab4c7f26f18197bb93d34fd3847
65a2c746dee7c92f29034b486b72a1722c4f21a2
a5925bcea4c8dd63bf02ba5f9c997db6ff379baebff2e186989fae873ca1afef
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106348
Date: Fri, 09 Dec 2022 18:13:09 GMT
Etag: "63927251-1d7"
Expires: Sat, 10 Dec 2022 23:45:37 GMT
Last-Modified: Thu, 08 Dec 2022 23:25:05 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SdYhrI6ash693fcdIxn4zxL8W_accYqHjO8GqT5soSrl27jKUj22gA==
Age: 1232
hb.undertone.com/hb?pid=3757&domain=perezhilton.com&ccpa=1---
204 No Content 0 B URL HTTP/2 hb.undertone.com/hb?pid=3757&domain=perezhilton.com&ccpa=1---
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /hb?pid=3757&domain=perezhilton.com&ccpa=1--- HTTP/1.1
Host: hb.undertone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 752
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: private, max-age=0, no-cache
date: Fri, 09 Dec 2022 18:13:08 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSDo OUR BUS UNI COM NAV"
pragma: no-cache
server: istio-envoy
set-cookie: UTID=babb001cebb24aada812b2c6b5cd356d; Path=/; Domain=undertone.com; Max-Age=31536000; Expires=Sat, 09 Dec 2023 18:13:09 GMT; Secure; SameSite=None
UTID_ENC=b1z57u01hyullpqtk146wvxwt; Path=/; Domain=undertone.com; Max-Age=31536000; Expires=Sat, 09 Dec 2023 18:13:09 GMT; Secure; SameSite=None
x-envoy-upstream-service-time: 3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 72DXKy1BIpTiY-SFhIQyjQ-jiqXtvIgCp86oW-MnhjH1R0USq29kIA==
accept-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64
X-Firefox-Spdy: h2
jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=5719933&ntv_pl=1114139
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=5719933&ntv_pl=1114139
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_at=394&ntv_usid=5719933&ntv_pl=1114139 HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Sat, 09-Dec-2023 18:13:09 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
404 Not Found 11 kB URL HTTP/2 perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1829), with CRLF, LF line terminators
Hash ff82a6b42564c91b24e1ce22b36dfdaa
5e56959537e949b8920107979802375cd6e187aa
8f44675de03cc5b4e66792b89e44a2fc4c173006a3333c2f73c12bad2e7ac779
GET /perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://perezhilton.com/wp-json/>; rel="https://api.w.org/"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0%2FnS%2BQEBzGPjPQJ9rWO6K%2ByefEyATTK2H5PkmCWKfRZ0iZ5ikfAp8exLCRNN8Bob0IfuEFQu2fKUpOlfMkAQyjmkSp%2FDCbGuQ5tMAd3CThHDgW3i%2Bij0dmHqYjvtNUKyEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776fb6768bb2b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/images/kardashian.jpg
200 OK 9.5 kB URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/images/kardashian.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 190x190, components 3\012- data
Hash 9210663825e7c4245b76772e065e3559
15607e865d5a93f03603e30e5a8ed822f06c7791
35e0877f29cdeb23eb82ceb9d06f335b527858f30ec950694ebb043829f357f0
GET /wp-content/themes/understrap-master/images/kardashian.jpg HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Cookie: ntvSession={"id":5719933,"placementID":1114139,"lastInteraction":1670609587476,"sessionStart":1670609587476,"sessionEndDate":1670630400000,"experiment":""}; ntv_as_us_privacy=1---; _pbjs_userid_consent_data=3524755945110770; _li_dcdm_c=.perezhilton.com; _lc2_fpi=a0b5dfa75e5a--01gkw1ejpkvgxrnpwmw96b0rhh; _pubcid=055480c5-80f6-4e64-9ba8-05fae7e9dfe4; _ga_9JS9Z0NFL0=GS1.1.1670609587.1.0.1670609587.0.0.0; _ga=GA1.2.729171255.1670609587; _gid=GA1.2.342157026.1670609587; _gat_gtag_UA_338092_8=1; _gat_gtag_UA_167135943_9=1; _awl=2.1670609588.0.5-c89902312149f1b8a8d2bf141b4b4c37-6763652d6575726f70652d7765737431-0; _ncid=b4c55375fa1ef5112044eb0858cdcf41
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: image/jpeg
content-length: 9456
cache-control: max-age=691200
cf-bgj: imgq:100,h2pri
cf-polished: origSize=9838, status=webp_bigger
etag: "5eecd0d9-266e"
expires: Sat, 17 Dec 2022 08:39:48 GMT
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
cf-cache-status: HIT
age: 34401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1MF6tRGhZWXYkFWTsXhHs7TyqMMYrXBIXJJwBZHIcwCjuR2hzJgdX5JCwm0IQEp1sAqcq9Nqzk5jMUS9dMKRB6RZOpMUVdLg%2FVVPYGK79gjLRPV9ScryfCfJlu3vqwBdMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb68d39cbb4f1-OSL
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17888&site_id=442788&zone_id=2548858&size_id=2&p_pos=atf&us_privacy=1---&rp_schain=1.0,1!nextmillennium.io,15042,1,,,&eid_pubcid.org=055480c5-80f6-4e64-9ba8-05fae7e9dfe4%5E1&rf=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&tk_flint=pbjs_lite_v6.29.0&x_source.tid=5de15e28-131e-4cd6-ad81-7b65c15283cf&l_pb_bid_id=20aa8730d32b7fd8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.22417746224636648
200 OK 240 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17888&site_id=442788&zone_id=2548858&size_id=2&p_pos=atf&us_privacy=1---&rp_schain=1.0,1!nextmillennium.io,15042,1,,,&eid_pubcid.org=055480c5-80f6-4e64-9ba8-05fae7e9dfe4%5E1&rf=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&tk_flint=pbjs_lite_v6.29.0&x_source.tid=5de15e28-131e-4cd6-ad81-7b65c15283cf&l_pb_bid_id=20aa8730d32b7fd8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.22417746224636648
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 30f955e4dd88a64bddf7470ab85d136e
530a177c2d9f9a0f9da732e02e8886c565db81bf
79338d6e270ba8d8385385db6bceb83982b6ff6c805bdfd0d9e142e4add9de9b
GET /a/api/fastlane.json?account_id=17888&site_id=442788&zone_id=2548858&size_id=2&p_pos=atf&us_privacy=1---&rp_schain=1.0,1!nextmillennium.io,15042,1,,,&eid_pubcid.org=055480c5-80f6-4e64-9ba8-05fae7e9dfe4%5E1&rf=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&tk_flint=pbjs_lite_v6.29.0&x_source.tid=5de15e28-131e-4cd6-ad81-7b65c15283cf&l_pb_bid_id=20aa8730d32b7fd8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.22417746224636648 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LBGTTCYY-1B-9UBL; Domain=.rubiconproject.com; Path=/; Expires=Sat, 09-Dec-2023 18:13:09 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqP2lLUOvKfe+9DtVM30fCgCRlc5uGLilGZ/dJdPlQWi+Zppt9Bb1XYHe6QAskPRNMx+FptCLf6SgD0N5xGbqay; Domain=.rubiconproject.com; Path=/; Expires=Sat, 09-Dec-2023 18:13:09 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 240
X-Firefox-Spdy: h2
pixel.zprk.io/v5/pixel/Hc6PdfQeAi.gif?idgen=1&_ncid=b4c55375fa1ef5112044eb0858cdcf41&dne=1
200 OK 35 B URL HTTP/2 pixel.zprk.io/v5/pixel/Hc6PdfQeAi.gif?idgen=1&_ncid=b4c55375fa1ef5112044eb0858cdcf41&dne=1
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 729c3007a8ed0597531b0c76d54a94bb
90fe9b8a8142548fdfab29f59cb0a164a0eaef81
6a842ea462daca2a0b5a0f5f25bcfc8e0059ac811ca6c6a1bc54e4d9119621c3
GET /v5/pixel/Hc6PdfQeAi.gif?idgen=1&_ncid=b4c55375fa1ef5112044eb0858cdcf41&dne=1 HTTP/1.1
Host: pixel.zprk.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: image/gif
content-length: 35
access-control-allow-methods: POST, GET, DELETE, PUT
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 811d5ace68bab739e7d3918b1bbd6849
e03ecfaf28cb4e5cd565c3709a73dac9e2dc8849
c917aa5fc8af59593264b4cabe6a70a1610df7ee6b9145928caad6c1966dd1d0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=131208
Date: Fri, 09 Dec 2022 18:13:09 GMT
Etag: "6392d1db-1d7"
Expires: Sun, 11 Dec 2022 06:39:57 GMT
Last-Modified: Fri, 09 Dec 2022 06:12:43 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jTSpnGb2XsNIogq2KhrU39jCHhvhJds3DDaOs8skUozvHVqhZWi13Q==
Age: 1634
tags.crwdcntrl.net/lt/c/16576/sync.min.js
200 OK 32 kB URL HTTP/2 tags.crwdcntrl.net/lt/c/16576/sync.min.js
IP
File type ASCII text, with very long lines (32463), with no line terminators
Hash 51c5af7d71728569b41d03503fff2de7
d62e717295a4ee760f421d2b0d4ce4cb7c131493
c7ad2fb033696f6b193dc1e4ef7d353c1d9a4d4a39772bdd0b44175704986ef8
GET /lt/c/16576/sync.min.js HTTP/1.1
Host: tags.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 32463
date: Fri, 09 Dec 2022 01:43:05 GMT
last-modified: Mon, 21 Nov 2022 18:55:24 GMT
etag: "51c5af7d71728569b41d03503fff2de7"
x-amz-server-side-encryption: AES256
cache-control: max-age: 86400
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 09G0U2-QOGrtHIOI5Mx--6n48mvin5cWXFLbU6x8FCrKxsajnW07_g==
age: 59404
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&pid=IwguSvMPhYpPh&cb=0&ws=0x0&v=22.1201.834&t=2000&slots=%5B%7B%22sd%22%3A%221cb3-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%5D&schain=1.0%2C1!nextmillennium.io%2C15042%2C1%2C%2C%2C&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 182 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&pid=IwguSvMPhYpPh&cb=0&ws=0x0&v=22.1201.834&t=2000&slots=%5B%7B%22sd%22%3A%221cb3-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%5D&schain=1.0%2C1!nextmillennium.io%2C15042%2C1%2C%2C%2C&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash 03206b3becd3f319748be27fac14e41e
de0bf799d74c58057efc333d7d44b443e17cbfa0
9ef6333d9a5248ee0a6db9b1a66792f5ae0c79f9588040fb555bb888bc5ea2de
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&pid=IwguSvMPhYpPh&cb=0&ws=0x0&v=22.1201.834&t=2000&slots=%5B%7B%22sd%22%3A%221cb3-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%7D%5D&schain=1.0%2C1!nextmillennium.io%2C15042%2C1%2C%2C%2C&pubid=79e40b05-e673-4b6c-85f9-79252a7f96a5&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 182
server: Server
date: Fri, 09 Dec 2022 18:13:09 GMT
x-amz-rid: RXVMP3WGDY6Z5706X8A2
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kLtHIyau84I0kMbSeN3cvawaBj59W3lf-YHReK9F1GCL1euuPIy7WA==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ea79fee2d5c6b70098b37bd996fdcc56
8e0ef5ab076025bd55a207b6445292fd711434e8
9ed29c71af91c69bd2bb17f93a2fe91d978f75d394d6c43baddefdc1564f416f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3805
Cache-Control: max-age=154601
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:09 GMT
Etag: "639324c1-117"
Expires: Sun, 11 Dec 2022 13:09:50 GMT
Last-Modified: Fri, 09 Dec 2022 12:06:25 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
ads.yieldmo.com/exchange/prebid?pbav=6.29.0&p=%5B%7B%22placement_id%22%3A%221-1cb3-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22callback_id%22%3A%224848770b4373f78%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%5D%2C%22ym_placement_id%22%3A%222422700953154036356%22%7D%5D&page_url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&bust=1670609587963&dnt=false&description=&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%7D&us_privacy=1---&pr=&scrd=1&title=Page%20not%20found%20-%20Perez%20Hilton&w=1280&h=939&pubcid=055480c5-80f6-4e64-9ba8-05fae7e9dfe4&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22055480c5-80f6-4e64-9ba8-05fae7e9dfe4%22%2C%22atype%22%3A1%7D%5D%7D%5D
204 No Content 0 B URL HTTP/2 ads.yieldmo.com/exchange/prebid?pbav=6.29.0&p=%5B%7B%22placement_id%22%3A%221-1cb3-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22callback_id%22%3A%224848770b4373f78%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%5D%2C%22ym_placement_id%22%3A%222422700953154036356%22%7D%5D&page_url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&bust=1670609587963&dnt=false&description=&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%7D&us_privacy=1---&pr=&scrd=1&title=Page%20not%20found%20-%20Perez%20Hilton&w=1280&h=939&pubcid=055480c5-80f6-4e64-9ba8-05fae7e9dfe4&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22055480c5-80f6-4e64-9ba8-05fae7e9dfe4%22%2C%22atype%22%3A1%7D%5D%7D%5D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/prebid?pbav=6.29.0&p=%5B%7B%22placement_id%22%3A%221-1cb3-%2F90814396%2C21733733414%2Fperezhilton_728x90_stickybottom_HB%22%2C%22callback_id%22%3A%224848770b4373f78%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%5D%2C%22ym_placement_id%22%3A%222422700953154036356%22%7D%5D&page_url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&bust=1670609587963&dnt=false&description=&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%7D&us_privacy=1---&pr=&scrd=1&title=Page%20not%20found%20-%20Perez%20Hilton&w=1280&h=939&pubcid=055480c5-80f6-4e64-9ba8-05fae7e9dfe4&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22nextmillennium.io%22%2C%22sid%22%3A%2215042%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22055480c5-80f6-4e64-9ba8-05fae7e9dfe4%22%2C%22atype%22%3A1%7D%5D%7D%5D HTTP/1.1
Host: ads.yieldmo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 09 Dec 2022 18:13:09 GMT
set-cookie: yieldmo_id=g29de305e413c8db7d63%7C1670609589457%7C3160421396781297123%7C; Domain=.yieldmo.com; Expires=Sat, 09-Dec-2023 18:13:09 GMT; Path=/; Secure; SameSite=None; Secure
x-robots-tag: none,NOINDEX,NOFOLLOW
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
access-control-request-headers: Cache-Control, Pragma
access-control-allow-methods: POST, GET, OPTIONS
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/uYzurxb5ulw
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/uYzurxb5ulw
IP
Hash 4af7ab1c93fa2cf6daa3805a9b0a83c5
a9df18aec4c7aef0212db446acc9ec43e6b4424b
c10e1f4487bcc90525c23eb0e80517054c4800d61f640251915dff1940f3609e
POST /s/gts1p5/uYzurxb5ulw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bcp.crwdcntrl.net/6/map
200 OK 60 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f70d1e30c2fdc8d20c7f1ec17866c46
035c9dbd45100d02fda6c39e67555241098d65ce
a7ae2833c58c768999743a522ac7baa525867512a148b4dd2e2c5a02be73fdb1
POST /6/map HTTP/1.1
Host: bcp.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 50
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: application/json;charset=utf-8
content-length: 60
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.12.241
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
p.ad.gt/api/v1/p/251
200 OK 13 kB IP
Hash ffa9296f9cb9afdb291c5ebfec5116e4
982dede88bf2d35eb8d30790e5c199c9180b2354
0af51af017ccc97cf3f95f86f587b496bed172661b725d9bf6e53881b50bcaed
GET /api/v1/p/251 HTTP/1.1
Host: p.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 17:07:14 GMT
cache-control: public, max-age=43200
expires: Sat, 10 Dec 2022 06:12:51 GMT
etag: W/"1670519234.0-43016-2710964840"
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 18
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb68dfbf90b41-OSL
X-Firefox-Spdy: h2
a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&ref=
200 OK 3.7 kB URL HTTP/2 a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&ref=
IP
File type C source, ASCII text, with very long lines (2298)
Hash 829c7cd1d69534410d6e2b7fae840032
b4a84a506821e937a3102c30d16adc87058e22be
59f43c43d135e2715cf8b4ad982a2a85385fda56ac791dc098d4ae5499f33ee1
GET /api/v1/u/matches/251?url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&ref= HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: application/javascript
server: nginx/1.20.0
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-sharethrough_n-onetag_rbd_n-MediaNet_cnv_an-db5_sovrn_3lift_n-Outbrain&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 09 Dec 2022 18:13:09 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: 7NEJCQYT0YK9WZNBN4JV
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
id.crwdcntrl.net/id?gdpr_applies=false&us_privacy=1---
200 OK 43 B URL HTTP/2 id.crwdcntrl.net/id?gdpr_applies=false&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id?gdpr_applies=false&us_privacy=1--- HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.20.91
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 50c5af9599cdab62e16a477bf0fe9486
ad7851af6a10db1983291b7bf9b063b904ac0516
f7fb8ddce845b7a3554626edaecacd1aa8620452b455a99373b7c264b8fdf012
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7FB8DDCE845B7A3554626EDAECACD1AA8620452B455A99373B7C264B8FDF012"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11389
Expires: Fri, 09 Dec 2022 21:22:59 GMT
Date: Fri, 09 Dec 2022 18:13:10 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 313 B IP
Hash 9b10cb780e85954caa98f26962acc256
c6e3e67d1f086dbc5ae4e67052e1ed202402a00f
a533b460171219776eabbca2acd5ccbdaf7752158738cdd6ed093f1334f4f8b5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2254
Cache-Control: max-age=149473
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "639316c9-139"
Expires: Sun, 11 Dec 2022 11:44:23 GMT
Last-Modified: Fri, 09 Dec 2022 11:06:49 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 9b10cb780e85954caa98f26962acc256
c6e3e67d1f086dbc5ae4e67052e1ed202402a00f
a533b460171219776eabbca2acd5ccbdaf7752158738cdd6ed093f1334f4f8b5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2296
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Last-Modified: Fri, 09 Dec 2022 17:34:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 313
id5-sync.com/g/v2/525.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/525.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4d8dd2533fa45a22421f2f979ce94621
e0ad91e1fc48b4d60e5a611ba501fbc40e8cdf5d
3db0249ea2487c2b9c6c652c5c612c5dedf7bc807cee2160bcc8a5c9bcfc573a
POST /g/v2/525.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 389
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Fri, 09 Dec 2022 18:13:09 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H
302 Found 473 B URL HTTP/2 ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (363)
Hash 3bb4477a03069ed5ec25493418eade3a
e28f594b08f6b04c3e5ec8700878743a5a817b05
cd6e368875ccb85b53e45793f3c9ec0a48020b8166c29953143d66d2856d6dec
GET /api/v1/g_hosted?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: text/html; charset=utf-8
content-length: 473
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY3MDYwOTU4OC00WkdRMko5RC1CQjVI
server: nginx/1.20.0
set-cookie: au_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H; Expires=Sun, 08 Dec 2024 18:13:09 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
g_hosted=; Expires=Sun, 08 Dec 2024 18:13:09 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b87227d6a1f0bae089f3502e52e090ff
a59fb4ba1aefaf39cb350907c853f43fdba42e00
fab5177ef331a3b8c22a4a481f2c72f4ebd8e3c5d94fdd2f946445941e9ff665
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5904
Cache-Control: max-age=127905
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "6392b447-1d7"
Expires: Sun, 11 Dec 2022 05:44:55 GMT
Last-Modified: Fri, 09 Dec 2022 04:06:31 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
jadserve.postrelease.com/gdprConsent?ntv_pl=1128373&ntv_gdpr_consent=&ntv_it
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/gdprConsent?ntv_pl=1128373&ntv_gdpr_consent=&ntv_it
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /gdprConsent?ntv_pl=1128373&ntv_gdpr_consent=&ntv_it HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.1
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Sat, 09-Dec-2023 18:13:10 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H
302 Found 381 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 93d6b03484cb4cd16c657c5533bf8065
89ebc3bacc76b7f040bf4a7d06c3ae2c78a28b50
16750b458ed30214a2831b8f8863a6452e304bc82c04c976c817cbcebab57fbc
GET /pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm=&google_sc=&google_ula=450542624&id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&google_tc=
date: Fri, 09 Dec 2022 18:13:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 381
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Dec-2022 18:28:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 09d844213a951d37aa8293af279cb00a
dc8d3e04d96efc0c42fdb3a6b2d687e1f2208dd1
926d1c3aafd082806e206c22f8e7e2f2a4fed049d01c97542838130925e39eda
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 18:13:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 13 Dec 2022 13:29:46 GMT
ETag: "dc8d3e04d96efc0c42fdb3a6b2d687e1f2208dd1"
Last-Modified: Fri, 09 Dec 2022 13:29:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3490
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776fb6928b290b06-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 247a5ee7f3fde4d8a0889ca510b75caa
adef9bc8c16fbe81b253ec0fc1ee4f4273e31af2
e71d77a90eb5abb0d7ccc370084fe62b8809f8d400dbc0be78d56e558bfd4863
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1979
Cache-Control: max-age=143783
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "639301a2-1d7"
Expires: Sun, 11 Dec 2022 10:09:33 GMT
Last-Modified: Fri, 09 Dec 2022 09:36:34 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 101b88a5a141e4659cc3150b7ca565b6
898ea48b6bb3c316e651cb4bc6451be06c050ab9
5ae54f788fa6724f16af03528f24db2ecbbefd8e5fc9af7fb2a79551911ca09f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5638
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Last-Modified: Fri, 09 Dec 2022 16:39:12 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6fdb9b8e1963d5f13d91db22e9294f97
f808d36103005c224eb6f7e4543d30271d2957b0
7ca8f99e7a6c7664a782af94d7b833d3a6374601a8a3a5cd382726d5d7fa3030
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 18:13:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 13:42:55 GMT
Expires: Wed, 14 Dec 2022 13:42:54 GMT
Etag: "f808d36103005c224eb6f7e4543d30271d2957b0"
Cache-Control: max-age=415183,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776fb6916cff0b51-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 09d844213a951d37aa8293af279cb00a
dc8d3e04d96efc0c42fdb3a6b2d687e1f2208dd1
926d1c3aafd082806e206c22f8e7e2f2a4fed049d01c97542838130925e39eda
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 18:13:10 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 13 Dec 2022 13:29:46 GMT
ETag: "dc8d3e04d96efc0c42fdb3a6b2d687e1f2208dd1"
Last-Modified: Fri, 09 Dec 2022 13:29:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3490
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776fb6929b420b06-OSL
pixel.tapad.com/idsync/ex/receive?partner_id=3185&partner_device_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&partner_url=https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26tapad_id%3D%24%7BTA_DEVICE_ID%7D
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive?partner_id=3185&partner_device_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&partner_url=https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26tapad_id%3D%24%7BTA_DEVICE_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive?partner_id=3185&partner_device_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&partner_url=https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26tapad_id%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 09 Dec 2022 18:13:10 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1670609590175;Expires=Tue, 07 Feb 2023 18:13:10 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=cf337004-9490-4b79-b617-09a79b7236e4;Expires=Tue, 07 Feb 2023 18:13:10 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3185&partner_device_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&partner_url=https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26tapad_id%3D%24%7BTA_DEVICE_ID%7D
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash d1030ea9043d88ab303a0fdf8be0f130
7db5c63014f3ebbf03a1055a90ce1680304a7b45
2298b415031814f765969d242b029fd92b118c4d7f81e98ac1c84f8167e4fd1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2018
Cache-Control: max-age=166508
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "63935a40-139"
Expires: Sun, 11 Dec 2022 16:28:18 GMT
Last-Modified: Fri, 09 Dec 2022 15:54:40 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
token.rubiconproject.com/token?pid=50242&puid=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&gdpr=0
204 No Content 0 B URL HTTP/1.1 token.rubiconproject.com/token?pid=50242&puid=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&gdpr=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /token?pid=50242&puid=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&gdpr=0 HTTP/1.1
Host: token.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 49049ff336235ad60cb44abcb1cec1d6
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: BK9h+AiJYNtUNJYuwPD1fyKDC/Et7Rxxn0Zgx+46tTmPLyvjvndAij6HRVYd/mgKRoU/yXjL6Xqnr6KTe3u1dg==
content-length: 27340
x-fb-trip-id: 1904183273
date: Fri, 09 Dec 2022 18:13:10 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c33a1d5d0fc5fe73ec55ac938817ea4
bfc100af7973feb3a7c3501dda66589f08bc6bde
668f1beac80500f1748643c27de6e413b0676a2fa94b0fbb7ef94b1cbab16e50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d883bed22e1ba5c2e2e1bb38c6242db5
2621aeb77153647efe0354e2e54dc40af417ac2f
dc338dcc35bf492fea57dcf2f23407ffbfd71d04c340bfb3057c1d791a152f46
GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Sun, 08 Jan 2023 18:13:10 GMT
vary: Origin
access-control-allow-origin: https://perezhilton.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&adnxs_id=$UID&gdpr=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&adnxs_id=$UID&gdpr=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&adnxs_id=$UID&gdpr=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Fri, 09 Dec 2022 18:13:10 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26adnxs_id%3D%24UID%26gdpr%3D0
AN-X-Request-Uuid: c29ad8ff-2907-4ae3-82ca-a81820220578
Set-Cookie: uuid2=4090336781768431405; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 09-Mar-2023 18:13:10 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
api.rlcdn.com/api/identity/envelope?pid=1258
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=1258
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=1258 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 18:13:10 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
IP
Hash 29d553fcc0929df46195df8fb818d70d
ca75092d675a39bde9f093ad3d5e3a55c230132f
15435ef40ceef1867c5da32cf7cd977c0a41452d2aa6c331138cf46f2254c6bb
POST /s/gts1d4/CobzvdRzzqc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&gdpr=0
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&gdpr=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&gdpr=0 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b87227d6a1f0bae089f3502e52e090ff
a59fb4ba1aefaf39cb350907c853f43fdba42e00
fab5177ef331a3b8c22a4a481f2c72f4ebd8e3c5d94fdd2f946445941e9ff665
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5930
Cache-Control: max-age=127931
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "6392b447-1d7"
Expires: Sun, 11 Dec 2022 05:45:21 GMT
Last-Modified: Fri, 09 Dec 2022 04:06:31 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26sas_uid%3D%5bsas_uid%5d&gdpr=0
302 Found 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26sas_uid%3D%5bsas_uid%5d&gdpr=0
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26sas_uid%3D%5bsas_uid%5d&gdpr=0 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Fri, 09 Dec 2022 18:13:09 GMT
cache-control: no-cache,no-store
location: https://sync.smartadserver.com:443/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&sas_uid=[sas_uid]&gdpr=0&cklb=1
pragma: no-cache
set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 09 Dec 2023 18:13:10 GMT; domain=.smartadserver.com; path=/
pbw=%24b%3d12100%3b%24o%3d11100; expires=Sat, 09 Dec 2023 18:13:10 GMT; domain=.smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-338092-8&cid=729171255.1670609587&jid=568795780&_u=YADAAUAAAAAAACAAI~&z=377188970
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-338092-8&cid=729171255.1670609587&jid=568795780&_u=YADAAUAAAAAAACAAI~&z=377188970
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-338092-8&cid=729171255.1670609587&jid=568795780&_u=YADAAUAAAAAAACAAI~&z=377188970 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Dec 2022 18:13:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 101b88a5a141e4659cc3150b7ca565b6
898ea48b6bb3c316e651cb4bc6451be06c050ab9
5ae54f788fa6724f16af03528f24db2ecbbefd8e5fc9af7fb2a79551911ca09f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2393
Cache-Control: max-age=167970
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "63935e7f-1d7"
Expires: Sun, 11 Dec 2022 16:52:40 GMT
Last-Modified: Fri, 09 Dec 2022 16:12:47 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 4e95309ba23214919c6e155d02aae114
827821b1b720cc658b3d348385f56c22eb397f7c
d48f9d588ae43ba46a64974385a93de32848965b1bea142778ad8f68796aefd8
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2441
Cache-Control: max-age=163338
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "63934c37-1d7"
Expires: Sun, 11 Dec 2022 15:35:28 GMT
Last-Modified: Fri, 09 Dec 2022 14:54:47 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a3d68e2dcef356f5130c6471129b2651
19bf6ff6ae3dd4b9fde18f6b0c430cb84babb32c
3d37757b484b29e0d1d8c4ceb2992be7092d364c16773c9bc89295c82921f1e8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=107744
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "639273a0-1d7"
Expires: Sun, 11 Dec 2022 00:08:54 GMT
Last-Modified: Thu, 08 Dec 2022 23:30:40 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cVNYc70g14dBzS4GlXJy5-JCPgmMeixSEqs9LnMrb1gu-6PpN8bbmw==
Age: 2294
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
u.openx.net/w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fopenx%3Fopenx_id%3D%7BOPENX_ID%7D%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26auid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H
200 OK 56 B URL HTTP/2 u.openx.net/w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fopenx%3Fopenx_id%3D%7BOPENX_ID%7D%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26auid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 15669dda86db3cbff7835fa202dc0b16
ce788cab9c1aa7e458a3971a59702c410b37e64d
5cc3f958039a8885c4e9526e22d454da47d579b9a02861e7a60b41fa0ba910df
GET /w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fopenx%3Fopenx_id%3D%7BOPENX_ID%7D%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26auid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H HTTP/1.1
Host: u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: text/html
content-length: 56
content-encoding: gzip
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 4e95309ba23214919c6e155d02aae114
827821b1b720cc658b3d348385f56c22eb397f7c
d48f9d588ae43ba46a64974385a93de32848965b1bea142778ad8f68796aefd8
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3482
Cache-Control: max-age=164379
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "63934c37-1d7"
Expires: Sun, 11 Dec 2022 15:52:49 GMT
Last-Modified: Fri, 09 Dec 2022 14:54:47 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
lexicon.33across.com/v1/envelope?pid=0010b00002e4MRRAA2&gdpr=0&us_privacy=1---
200 OK 49 B URL HTTP/2 lexicon.33across.com/v1/envelope?pid=0010b00002e4MRRAA2&gdpr=0&us_privacy=1---
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c466bd434db29cf02793f8522fde5f3a
f39a01bb0264479dbe9a4bfb0b80ae0b3b0e8154
d0d2e098cd489ef7bc528c86de8ab5c51b5d6cdf9b76a8b08766036992f0d2f4
GET /v1/envelope?pid=0010b00002e4MRRAA2&gdpr=0&us_privacy=1--- HTTP/1.1
Host: lexicon.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
cache-control: private, must-revalidate, max-age=28800
content-type: application/json
content-length: 49
date: Fri, 09 Dec 2022 18:13:10 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
200 OK 2.6 kB URL HTTP/2 test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
IP
File type JSON data\012- , ASCII text, with very long lines (10044), with no line terminators
Hash c36598859e69467b7b613d69c20db2ae
dc450ea176ae267c294c3e5d43bb51f97dce4eb6
86ca6049954b812917c18ae03b8cc1f37e3c32976eaea7ba280c04acc8b8e915
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Fri, 09 Dec 2022 03:00:38 GMT
last-modified: Wed, 30 Nov 2022 19:52:29 GMT
etag: W/"8980f3096e8d1a15cdb9518354d546f7"
x-amz-server-side-encryption: AES256
x-amz-version-id: KZ_abct9fxSnQsZ4cInZdlEfLgTLD6XT
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VvtzcEwEtxvCCtn6qoAb8kUp0e8kA6WMTptz0mG7AtqAiKrv2ld0TA==
age: 54751
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/tcfv2/23/cmp2ui-en.js
200 OK 126 kB URL HTTP/2 quantcast.mgr.consensu.org/tcfv2/23/cmp2ui-en.js
IP
File type ASCII text, with very long lines (65469)
Size 126 kB (125928 bytes)
Hash 6d425166500bdd506a173e0fb24c977a
b084760d64f682b41ecfd3c1cc80cfba26789adb
fa9ac2c4d2dfd33202677e985fdc33857bc9acfe920825667b836486ea749c97
GET /tcfv2/23/cmp2ui-en.js HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 604800
last-modified: Fri, 18 Dec 2020 15:09:43 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
cache-control: max-age=172800
date: Thu, 08 Dec 2022 02:45:56 GMT
etag: W/"b999c652510fc4edd897a1d667aaee33"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UZTFnO2EhWS_3G9EkHEdZORwVnMQuCAyijW24eTmTzpk5VXEaA1STw==
age: 142034
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/CobzvdRzzqc
IP
Hash 29d553fcc0929df46195df8fb818d70d
ca75092d675a39bde9f093ad3d5e3a55c230132f
15435ef40ceef1867c5da32cf7cd977c0a41452d2aa6c331138cf46f2254c6bb
POST /s/gts1d4/CobzvdRzzqc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:10 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pixels.ad.gt/api/v1/getpixels?tagger_id=5ad8072e0d451a3ccc417edde94568a0&url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&code=%27none%27
204 No Content 0 B URL HTTP/2 pixels.ad.gt/api/v1/getpixels?tagger_id=5ad8072e0d451a3ccc417edde94568a0&url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&code=%27none%27
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/getpixels?tagger_id=5ad8072e0d451a3ccc417edde94568a0&url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&code=%27none%27 HTTP/1.1
Host: pixels.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 09 Dec 2022 18:13:10 GMT
server: nginx/1.20.0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2b12c162d1e963f2af2e705ae1986669
65627a07bc1b8516a69b3f030b15a4954a55d620
bb5e5bd886ca0a35e3574e09d7592344116ebb099f0d10105f45a8f48fba343c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150972
Date: Fri, 09 Dec 2022 18:13:10 GMT
Etag: "63931c62-1d7"
Expires: Sun, 11 Dec 2022 12:09:22 GMT
Last-Modified: Fri, 09 Dec 2022 11:30:42 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4E2DNozNp4SQBMryCJFk1aJLgpwUt9cEOwTcqe8yvmU4KpTSEp_LdQ==
Age: 2320
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26adnxs_id%3D%24UID%26gdpr%3D0
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26adnxs_id%3D%24UID%26gdpr%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H%26adnxs_id%3D%24UID%26gdpr%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Fri, 09 Dec 2022 18:13:10 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ids.ad.gt/api/v1/match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&adnxs_id=0&gdpr=0
AN-X-Request-Uuid: a3bf5ef3-19d2-4618-afcd-e0a2cdb25ecf
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H
303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/audigent?buyer_user_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Fri, 09 Dec 2022 18:13:10 GMT
location: https://match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&_bee_ppp=1
Server: gunicorn
set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 09 Dec 2022 18:23:10 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&_bee_ppp=1
303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/audigent?buyer_user_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&_bee_ppp=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/audigent?buyer_user_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&_bee_ppp=1 HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Fri, 09 Dec 2022 18:13:10 GMT
location: https://ids.ad.gt/api/v1/beeswax_match?beeswax_id=&id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H
Server: gunicorn
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
www.facebook.com/tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&rl=&if=false&ts=1670609589555&cd[partner_id]=251&cd[tagger_id]=5ad8072e0d451a3ccc417edde94568a0&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670609589555.1318204284&it=1670609589253&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&rl=&if=false&ts=1670609589555&cd[partner_id]=251&cd[tagger_id]=5ad8072e0d451a3ccc417edde94568a0&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670609589555.1318204284&it=1670609589253&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1853083501571805&ev=PageView&dl=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton&rl=&if=false&ts=1670609589555&cd[partner_id]=251&cd[tagger_id]=5ad8072e0d451a3ccc417edde94568a0&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670609589555.1318204284&it=1670609589253&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 09 Dec 2022 18:13:10 GMT
X-Firefox-Spdy: h2
reporting.powerad.ai/
200 OK 2 B IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST / HTTP/1.1
Host: reporting.powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 132
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/g_match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&google_error=3
200 OK 43 B URL HTTP/2 ids.ad.gt/api/v1/g_match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /api/v1/g_match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&google_error=3 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 10 Dec 2022 06:13:10 GMT
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/beeswax_match?beeswax_id=&id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H
202 Accepted 546 B URL HTTP/2 ids.ad.gt/api/v1/beeswax_match?beeswax_id=&id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6f4b472400e946c1f9780528d71bba52
4e661b1f44cca8d9637776c4221f90f34486d30a
356566deb41ecb94cdda58527143c0e93e44502a4dfcc5707fcf827ea176a9b3
GET /api/v1/beeswax_match?beeswax_id=&id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 10 Dec 2022 06:13:10 GMT
set-cookie: au_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H; Expires=Sun, 08 Dec 2024 18:13:10 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
beeswax_id=; Expires=Sun, 08 Dec 2024 18:13:10 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
report2.hb.brainlyads.com/statistics
204 No Content 0 B URL HTTP/1.1 report2.hb.brainlyads.com/statistics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /statistics HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-nm-host,x-nm-url
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 09 Dec 2022 18:13:12 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
report2.hb.brainlyads.com/statistics
200 OK 0 B URL HTTP/1.1 report2.hb.brainlyads.com/statistics
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /statistics HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-nm-host: perezhilton.com
x-nm-url: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/
Content-Type: application/json
Content-Length: 5293
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 09 Dec 2022 18:13:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
ocsp.digicert.com/
200 OK 278 B IP
Hash c0d2e3858a9f2b8f90364a746bf2521c
14987633fe104668ee1cdd781fd5a94f5ee64e79
3b80b6b3bbd23dea14c8458f35607edb19ba05a040a6c8fe9e0cbd422af565e0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1557
Cache-Control: max-age=143031
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:12 GMT
Etag: "6393005a-116"
Expires: Sun, 11 Dec 2022 09:57:03 GMT
Last-Modified: Fri, 09 Dec 2022 09:31:06 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
onetag-sys.com/usync/?cb=1670609588300&us_privacy=1---
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?cb=1670609588300&us_privacy=1---
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1670609588300&us_privacy=1--- HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.html?us_privacy=1---
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?us_privacy=1---
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?us_privacy=1--- HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Fri, 09 Dec 2022 18:13:12 GMT
Connection: keep-alive
Vary: Accept-Encoding
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Unused62: 8096267
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Sat, 10 Dec 2022 18:13:14 GMT
Date: Fri, 09 Dec 2022 18:13:12 GMT
Connection: keep-alive
Vary: Accept-Encoding
image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H
200 OK 20 B URL HTTP/2 image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.js
200 OK 10 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
File type ASCII text, with very long lines (18728)
Hash 8deb7dbc8b2c345210076315246d243e
48da2b0f96ae0319416cd069c090acef1217dd08
792653092209c4e0ac57fbffab14833a2d9c4cbf4e7d37ff12aa82aa57efc152
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html?us_privacy=1---
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Thu, 08 Dec 2022 23:42:39 GMT
Content-Encoding: gzip
Content-Length: 10067
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=19731
Expires: Fri, 09 Dec 2022 23:42:03 GMT
Date: Fri, 09 Dec 2022 18:13:12 GMT
Connection: keep-alive
Vary: Accept-Encoding
js-sec.indexww.com/um/ixmatch.html
200 OK 1.4 kB URL HTTP/2 js-sec.indexww.com/um/ixmatch.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2920), with no line terminators
Hash 5afd6e52a87d99b7b9be7c2fc0b1a091
b6331e837ab190a6a2c616f940e56ef8e357aa77
8e48f6997aa3f9b4c3b853c8974843341b34ee4b50f9e84ac69ddf531b244158
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:12 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 25 Jul 2022 19:18:26 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
cf-cache-status: HIT
age: 988
expires: Fri, 09 Dec 2022 22:13:12 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb6a2afcdb517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ib.adnxs.com/getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 09 Dec 2022 18:13:12 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 7a413680-257d-46b2-9571-f8cb71433ad6
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1001.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
match.adsrvr.org/track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent=
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:12 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
cdn.hadronid.net/hadron.js?partner_id=251&sync=1&url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton
200 OK 11 kB URL HTTP/2 cdn.hadronid.net/hadron.js?partner_id=251&sync=1&url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton
IP
File type ASCII text, with very long lines (55891), with no line terminators
Hash 74e2b7262026ef4e4467d90b56a36f0b
7f2a8fbcb94b144d0b2cf74d77a47ddbfe0e2737
9cfb7b9e737d07ee7a0937d306aae5d751ab6e13eef195a76edb98c35428549d
GET /hadron.js?partner_id=251&sync=1&url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton HTTP/1.1
Host: cdn.hadronid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"2280e2148e4ee3c06f679f8fac039778"
last-modified: Fri, 18 Nov 2022 10:57:44 GMT
x-amz-id-2: AlHhfnaYFu7DcAqm/AZXcFZz8Z4At5Hcn9XqhUxeA24L5T6B/l+VTePOXZCvBx0dhJEtzYQ2PVA=
x-amz-request-id: FNK044PCM9Y7VVCR
cache-control: max-age=3600
cf-cache-status: HIT
age: 4250
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PYUPn%2BaoaEond4s51GCc5SgpoXykabjzdQFddUtht6lLJk%2BH50lA3k%2FINLAO%2FRDXH2wsSnlEKqI%2FfdPF6ZUJ7HOVDQPGk696epPc7G1ZGlTFJnJ4sDtJO6l%2F75NBNlSm6Z0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb68e9b64b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash df6e3fa55646d5e5619474daa064d4fe
1cacf5701062ed7acdc007e6e6c596a92eea9823
34543bfb82650e79e2a6e7296cbd3fed8dc9402f48b63c1cd58922d508fe75dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1608
Cache-Control: max-age=122896
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:12 GMT
Etag: "6392b180-117"
Expires: Sun, 11 Dec 2022 04:21:28 GMT
Last-Modified: Fri, 09 Dec 2022 03:54:40 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=12776
301 Moved Permanently 0 B URL HTTP/2 secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=12776
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utils/xapi/multi-sync.html?p=12776 HTTP/1.1
Host: secure-assets.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=12776
date: Fri, 09 Dec 2022 18:13:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ec2b6f559382dcf1c7edcd1d199662fb
ccbfed793bc16a9ffc65907ff1f3fbea7b1a45b1
57290cdf81575fc073fe7cb99caf39e5422c223aab1ac1c5306b2c824d684b55
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1795
Cache-Control: max-age=163748
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:13 GMT
Etag: "6393505a-1d7"
Expires: Sun, 11 Dec 2022 15:42:21 GMT
Last-Modified: Fri, 09 Dec 2022 15:12:26 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 4932475f17ad40e968f4dfe94856b55a
e277617c6ffa6e2847e0fe240f484910a543ce6a
f7b75b3e73bd550172d49b201679906b293852af33a56213f5bac076a4309288
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 214
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:13 GMT
Last-Modified: Fri, 09 Dec 2022 18:09:39 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
pixel.rubiconproject.com/exchange/sync.php?p=12776
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/exchange/sync.php?p=12776
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/sync.php?p=12776 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 49049ff336235ad60cb44abcb1cec1d6
Content-Type: image/gif
eus.rubiconproject.com/usync.html?p=12776
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?p=12776
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?p=12776 HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Fri, 09 Dec 2022 18:13:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID
302 Found 286 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash 04ce1d4a9e41ee4b95e37c41391b3877
ee74bb78f45fba78a27e183813cfb4b275568ec6
b8442a4a2a142a9cc1fde5885d88420f4e30be652e6950c2cebb9b2d5f3d17e1
GET /AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Fri, 09 Dec 2022 18:13:12 GMT
content-length: 286
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 09 Dec 2022 18:13:13 GMT
content-length: 0
location: /usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1
cf-ray: 776fb6a43d890b39-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y5N6uep3J88t9ZAQU9Sb6wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 09 Dec 2023 18:13:13 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=661; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Mar 2023 18:13:13 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=661; Path=/; Domain=casalemedia.com; Expires=Thu, 09 Mar 2023 18:13:13 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XpUzONi3jOn6IU9dQAGlVocOau4AKRaFCiaNhckie96hyNN4j%2FExubUgzi0X4wJkplehHfh2FYi%2FQ00PQJPfwpaz9YwCe4u913g2FodADw1JDfHSoIfzsiMV3du2I%2F0xrmphdexX6thZsw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pixel-sync.sitescout.com/dmp/pixelSync?nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
302 Found 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
set-cookie: ssi=8c3c2b3c-e801-404d-8466-390bdfe23662#1670609593036; Domain=.sitescout.com; Expires=Sat, 09-Dec-2023 18:13:13 GMT; Path=/; Secure; SameSite=None
location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
content-length: 0
date: Fri, 09 Dec 2022 18:13:12 GMT
server: AC1.1
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58545/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58545/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58545/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 09 Dec 2022 18:13:13 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58545/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBLl6k2MCEFe7C_DG_oz0Sbdd2cLWIFwFEgEBAQHMlGOdYwAAAAAA_eMAAA&S=AQAAAmMMDkYNUmcHO0RI9ZtNJ-I; Expires=Sun, 10 Dec 2023 00:13:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash df6e3fa55646d5e5619474daa064d4fe
1cacf5701062ed7acdc007e6e6c596a92eea9823
34543bfb82650e79e2a6e7296cbd3fed8dc9402f48b63c1cd58922d508fe75dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1740
Cache-Control: max-age=123027
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 18:13:13 GMT
Etag: "6392b180-117"
Expires: Sun, 11 Dec 2022 04:23:40 GMT
Last-Modified: Fri, 09 Dec 2022 03:54:40 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
204 No Content 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?cookieQ=1&nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D54%26uid%3D%7BuserId%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
date: Fri, 09 Dec 2022 18:13:12 GMT
server: AC1.1
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D160318%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fusr.undertone.com%252FuserPixel%252Fsync%253FpartnerId%253D53%2526uid%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:11 GMT
content-length: 0
X-Firefox-Spdy: h2
pixel.advertising.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
301 Moved Permanently 360 B URL HTTP/2 pixel.advertising.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 5bc073669c856f7252a4bec2a2525d0c
8eb8fae40e9893d3958946478d65bc5ab45b2496
c56c30dddc16d8c19e9046050f4df1af8c5856250ffe5ff0022d7675033816d0
GET /ups/58293/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.undertone.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 09 Dec 2022 18:13:13 GMT
server: ATS/9.1.10.25
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
content-type: text/html
content-language: en
set-cookie: A3=d=AQABBLl6k2MCEAKwBUx0j48-yep3DmnW_8AFEgEBAQHMlGOdYwAAAAAA_eMAAA&S=AQAAAi54McBHgtVqE9u8m-fGTFM; Expires=Sun, 10 Dec 2023 00:13:13 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 360
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58545/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58545/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58545/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 09 Dec 2022 18:13:13 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBLl6k2MCEH90SXjjyofbBFs2sx3aSVcFEgEBAQHMlGOdYwAAAAAA_eMAAA&S=AQAAAlzUCe5YdlAaSlyuq19-AFI; Expires=Sun, 10 Dec 2023 00:13:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58293/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 09 Dec 2022 18:13:13 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBLl6k2MCENBfYv5z5MkwYMn3M1WA6NsFEgEBAQHMlGOdYwAAAAAA_eMAAA&S=AQAAAg7fXCUkiOJwyqAzRQgjF0Q; Expires=Sun, 10 Dec 2023 00:13:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58293/sync?&gdpr=&gdpr_consent=&redir=true&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 09 Dec 2022 18:13:13 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBLl6k2MCEFYVuLOwS2gNFeSj6JTtzYkFEgEBAQHMlGOdYwAAAAAA_eMAAA&S=AQAAAsp4u7mc8iR7E9Ch4kUerTQ; Expires=Sun, 10 Dec 2023 00:13:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
usr.undertone.com/userPixel/sync?partnerId=57&uid=0
200 OK 0 B URL HTTP/2 usr.undertone.com/userPixel/sync?partnerId=57&uid=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userPixel/sync?partnerId=57&uid=0 HTTP/1.1
Host: usr.undertone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum-sec.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Fri, 09 Dec 2022 18:13:13 GMT
server: istio-envoy
x-envoy-upstream-service-time: 0
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UycFm7hlsbGE21F2jRCIL_l8wyG1eh1h8jUU0l7xkpyt_fytMQb7IQ==
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/tapad_match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&tapad_id=0a0ba6aa-01ae-49c8-aa1a-cebadea41044
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/tapad_match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&tapad_id=0a0ba6aa-01ae-49c8-aa1a-cebadea41044
IP
GET /api/v1/tapad_match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&tapad_id=0a0ba6aa-01ae-49c8-aa1a-cebadea41044 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 10 Dec 2022 06:13:10 GMT
set-cookie: au_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H; Expires=Sun, 08 Dec 2024 18:13:10 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.3
IP
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.5.3 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: application/javascript
last-modified: Mon, 21 Dec 2020 12:22:11 GMT
etag: W/"5fe09373-37a6"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7125
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U3ASFO8hOG58fzKNi3%2Fy1JIDjeWp056lLgtTf%2B0zCLQ%2FeFaGvYmCW0e0K9cReEC%2B5KnhJaF7cAv6XckeP7hjIb7peBEeRTnhhoblaJ6kbfSPHXUlGrH%2Fqpc3whocYqmp%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67f5816b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.undertone.com/js/usersync.html?ccpa=1---
200 OK 0 B URL HTTP/2 cdn.undertone.com/js/usersync.html?ccpa=1---
IP
GET /js/usersync.html?ccpa=1--- HTTP/1.1
Host: cdn.undertone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
x-amz-replication-status: COMPLETED
last-modified: Mon, 07 Nov 2022 14:19:07 GMT
x-amz-version-id: FcgX1qjTYQoJcn.Q.j6.Q9icc5uN_Nnv
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Dec 2022 19:25:10 GMT
etag: W/"5622b32305c47b2be916a6c424eed515"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vJhHDwIGKMRKhdhT9TSOvloH-mZN6g3HYnRPThcXP-l5RsWIdTcrlA==
age: 82083
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.3
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.3
IP
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.5.3 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: text/css
last-modified: Mon, 21 Dec 2020 12:22:11 GMT
etag: W/"5fe09373-d293"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SxXYVYt0thWuF7N99JKWjyE10HhSljzXihlrfHJjUwZSvic8i4nmBOn%2FHvCV7i%2F3sCB4NHtUmDtrkJl27%2B0iv98pz%2Bi%2FdZA0%2FE7nOTHHMlSl0VuKQ3Y91OVLT8NWU6EiWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67cec69b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/js/quantcast.js?ver=0.9.4.1636670677
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/js/quantcast.js?ver=0.9.4.1636670677
IP
GET /wp-content/themes/understrap-master/js/quantcast.js?ver=0.9.4.1636670677 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=3939
etag: W/"5f077cbb-f63"
last-modified: Thu, 09 Jul 2020 20:23:23 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 7124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iUGpTZXTDjVWVNKxPWBYrFaxunRHq4UVFLxU5S0T88Y6ZUHJKjw2NDndJxZO38O2Donr9ohkZgjB0XB%2BQyWJvKN8rBWKlS0PqLMiOYF%2BWjdkgh5ivHHl4KTRkg%2FgT1qwfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67cfc82b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/js/intersectionObserver.pollyfill.min.js?ver=0.9.4.1636670677
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/js/intersectionObserver.pollyfill.min.js?ver=0.9.4.1636670677
IP
GET /wp-content/themes/understrap-master/js/intersectionObserver.pollyfill.min.js?ver=0.9.4.1636670677 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
last-modified: Fri, 19 Jun 2020 14:51:05 GMT
etag: W/"5eecd0d9-1b4f"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4224
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HCOnHx2CSxcfddkyxhs5DlzeKoVEBYkztqD1%2B6Z9XN9fABLxvf5sR1q7Qgd9tqCT2trrHdH%2FTx4OPmz8PpZET4SZXlnpAfwxek5jtzdo2BPXhZunTYuRIlCQ5Jnfbm5rhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67d0c9fb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/choice/GANCBjEfRH5Fe/perezhilton.com/choice.js?timestamp=1670609586106
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/choice/GANCBjEfRH5Fe/perezhilton.com/choice.js?timestamp=1670609586106
IP
GET /choice/GANCBjEfRH5Fe/perezhilton.com/choice.js?timestamp=1670609586106 HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 18 Oct 2021 12:25:10 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: gzip
date: Fri, 09 Dec 2022 18:12:57 GMT
cache-control: max-age=3600
etag: W/"95f6844442aedd0c7781a1eb1fc1c669"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ks20NhyzNqJ-pk30BFWKLCLVTHi3GFczqMREQls33ynZ2_A01o00BA==
age: 13
X-Firefox-Spdy: h2
socialcanvas-cdn.kargo.com/js/scpb.js
200 OK 0 B URL HTTP/2 socialcanvas-cdn.kargo.com/js/scpb.js
IP
GET /js/scpb.js HTTP/1.1
Host: socialcanvas-cdn.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 09 Dec 2022 01:02:44 GMT
last-modified: Tue, 22 Nov 2022 18:54:34 GMT
etag: W/"4102c8de7c45dc9353378b8f31a06708"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wGrjg7LmuKdb07ObAn7KC0ANcQ7SX932kEqwJfhi1eZuIHuNqJ8qJA==
age: 61824
X-Firefox-Spdy: h2
perezhilton.com/wp-content/plugins/lazy-load-optimizer/assets/frontend/js/lazysizes.min.js?ver=1.4.7
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/plugins/lazy-load-optimizer/assets/frontend/js/lazysizes.min.js?ver=1.4.7
IP
GET /wp-content/plugins/lazy-load-optimizer/assets/frontend/js/lazysizes.min.js?ver=1.4.7 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
last-modified: Wed, 01 Jul 2020 22:16:26 GMT
etag: W/"5efd0b3a-1c43"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YwZqYnCM%2F8Fh3wNEPgVafbaZ2X10kO2uHIppbnLwQsrokHJKfpk6y3kASVnZDZrd7CUOeJB%2FiCVtq4y0NYOpyMXvZdeeWsEkh2JtTOOI8XSnKKdHvQa%2FiXA2QB2Wkgwarg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67d0ca1b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:08 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "KvGSi9leJgKNKEGESzHjYw=="
expires: Fri, 16 Dec 2022 18:13:08 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
200 OK 0 B URL HTTP/2 perezhilton.com/wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453
IP
GET /wp-content/themes/understrap-master/css/theme.min.css?ver=0.9.4.1669068453 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: text/css
last-modified: Mon, 21 Nov 2022 22:07:33 GMT
etag: W/"637bf6a5-5ffbb"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B4PHguUxFyaK6hG1fJL2by6bUZz6z5Fyvod8HtuhXo1ACb7lAKkoOrz7k22R3G36REiPdd9gFScv8NhxAEU3eCp0VxJUc%2Bhaq9OS9uSJs4ElfPh5%2FxgNwCj%2Fxy6Eug7D9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67cec6eb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/g_match?google_error=3
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/g_match?google_error=3
IP
GET /api/v1/g_match?google_error=3 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 10 Dec 2022 06:13:10 GMT
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
IP
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
last-modified: Wed, 28 Oct 2020 11:54:13 GMT
etag: W/"5f995be5-183ee"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4224
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rPDkaUb%2BIaUmOhqQY%2Fl1%2FADONDfszOdYnKLvTsA%2FnkCMAvlJJfAuiyRqEMezaLK7ocs%2BpH9g7TlLmq%2BSv9XrLRWcwZOyrvAoyGn6DPN0Vp23tdK5DMsbeduPNE%2Fb2LpYAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67d0c88b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js?ver=5.5.3
200 OK 0 B URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js?ver=5.5.3
IP
GET /sdks/OneSignalSDK.js?ver=5.5.3 HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 1729
expires: Mon, 12 Dec 2022 18:13:06 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 776fb67e1d3bb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 09 Dec 2022 17:36:38 GMT
last-modified: Wed, 07 Dec 2022 21:39:34 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 142ded88048f806cc40a5a225130cc8a.cloudfront.net (CloudFront), 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
etag: W/"909ff158818033daa43a2d271ecda3db"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-C1
x-amz-cf-id: 2HfTtPw1YJc5C0NnqXaMU3UCfCj2x3WG6IlOEyz8ObDgPNm6Ha5ReA==
age: 2191
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1
200 OK 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1
IP
GET /usermatch?cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2Fsync%3FpartnerId%3D57%26uid%3D&s=197137&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.undertone.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:13 GMT
content-type: text/html
cf-ray: 776fb6a4be0a0b39-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MvijRzZAGMzeT%2FM3bynrpdGpow0sAbCMKUQ1TZdJzct7BSlycLZBFvfOZm5Sw5yotEajloKbvjUj7w6LVW42WSjTFkUtsgFamQpjrlHfqw0jAlsHxcD6k7%2FksBTJDrNPC0PfZg%2FDXpSrng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 07 Dec 2022 02:43:04 GMT
x-amz-version-id: KO0V33_zzBQMkGMaMpLupHqINiAUum0D
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Dec 2022 02:46:27 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3Mof6uAAgy68gXLqOe3YMoChQFnit3to5ZpG_c7vHoVHiw82MFMY4w==
age: 55602
X-Firefox-Spdy: h2
powerad.ai/pubPls/?width=1280&url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton
200 OK 0 B URL HTTP/2 powerad.ai/pubPls/?width=1280&url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton
IP
GET /pubPls/?width=1280&url=https%3A%2F%2Fperezhilton.com%2Fperezitos%2F2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman%2F%3Ffrom%3Dblogroll_perezhilton HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:07 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: https://perezhilton.com
access-control-allow-headers: *
set-cookie: 12331dcr-g=1; Path=/; Secure; SameSite=None
12593dcr-g=1; Path=/; Secure; SameSite=None
12594dcr-g=1; Path=/; Secure; SameSite=None
12595dcr-g=1; Path=/; Secure; SameSite=None
12940dcr-g=1; Path=/; Secure; SameSite=None
13127dcr-g=1; Path=/; Secure; SameSite=None
etag: W/"ab8a-seFivCtTyz7LKNuV9NhoTfR2Hos"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
perezhilton.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
200 OK 0 B URL HTTP/2 perezhilton.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: perezhilton.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/perezitos/2014-02-16-simon-cowell-first-baby-pictures-eric-lauren-silverman/?from=blogroll_perezhilton
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=96873
access-control-allow-origin: *
etag: W/"5fe09373-17a69"
last-modified: Mon, 21 Dec 2020 12:22:11 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 7124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iNP%2FfAjjPsXDQ1BBGwEYvvtIARwCHDm%2BqA3Fa3yO8lyABxAh%2FJmEOM0qlXsaQeGnyK2l3hpae%2FZXvWgS51aPDQD4mnwt68EonnYe6iq1MGq9NmkKdOkh1b1t2ids6rSfxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776fb67cfc7db4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&adnxs_id=0&gdpr=0
202 Accepted 0 B URL HTTP/2 ids.ad.gt/api/v1/match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&adnxs_id=0&gdpr=0
IP
GET /api/v1/match?id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H&adnxs_id=0&gdpr=0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://perezhilton.com/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 09 Dec 2022 18:13:10 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 10 Dec 2022 06:13:10 GMT
set-cookie: au_id=AU1D-0100-001670609588-4ZGQ2J9D-BB5H; Expires=Sun, 08 Dec 2024 18:13:10 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H
302 Found 0 B URL HTTP/2 image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H
IP
GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 09 Dec 2022 18:13:09 GMT
set-cookie: KTPCACOOKIE=true; domain=pubmatic.com; secure; expires=Thu, 09-Mar-2023 18:13:09 GMT; path=/
location: https://image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001670609588-4ZGQ2J9D-BB5H
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
IP
GET /GVL-v2/vendor-list.json HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Fri, 09 Dec 2022 03:00:39 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Fri, 09 Dec 2022 03:00:32 GMT
etag: W/"291d1f91a88c85ad54e77e75a7ed176e"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ldV2gzqPDC_Fl1Kj7Cg_-xFQnDuUtx0hQ547Ab1IkxHKhAXcewl_ow==
age: 54751
X-Firefox-Spdy: h2
socialcanvas-cdn.kargo.com/js/rh.min.js
200 OK 0 B URL HTTP/2 socialcanvas-cdn.kargo.com/js/rh.min.js
IP
GET /js/rh.min.js HTTP/1.1
Host: socialcanvas-cdn.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 09 Dec 2022 01:02:59 GMT
last-modified: Fri, 09 Dec 2022 01:02:31 GMT
etag: W/"e6d56a486a95e1cfe46271076b893b00"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BU6JcMxlFTO_0Fgjvjiaf81zYClnnt93Frgq368ESLgmUDGL3jqV3g==
age: 61807
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://perezhilton.com/
Origin: https://perezhilton.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://perezhilton.com
server-processing-duration-in-ticks: 7844185
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-library.js
200 OK 0 B URL HTTP/2 dn0qt3r0xannq.cloudfront.net/perezhilton-DxtDG5qb8P/default/prebid-library.js
IP
GET /perezhilton-DxtDG5qb8P/default/prebid-library.js HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 07 Dec 2022 00:11:00 GMT
x-amz-version-id: q62VwzJ7xbn04SEH3EmbhNWERkjmHjVe
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Dec 2022 07:10:07 GMT
cache-control: max-age=86400
etag: W/"e70a6e6f9be79cf70620b94f395ff635"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 9MqDOeE0p3egBfkOrsPtbMZdZqRhdKx6ZE_1xiE41tCfiFDkl4MEoQ==
age: 40036
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/tcfv2/23/cmp2.js?referer=perezhilton.com
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/tcfv2/23/cmp2.js?referer=perezhilton.com
IP
GET /tcfv2/23/cmp2.js?referer=perezhilton.com HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
last-modified: Fri, 18 Dec 2020 15:09:37 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-qc-ineu: True
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
cache-control: max-age=172800
date: Thu, 08 Dec 2022 16:37:21 GMT
etag: W/"1d55b13d85c9837da884d1e8594cc025"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KTZHx6oVyAxC_fO8bM6ujj6jLKtLYeDAkpVrFve6sIEf1_K937Wb5A==
age: 92146
X-Firefox-Spdy: h2
hb.brainlyads.com/pbjs_wrapper.v2.0.js
200 OK 0 B URL HTTP/2 hb.brainlyads.com/pbjs_wrapper.v2.0.js
IP
GET /pbjs_wrapper.v2.0.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 09 Dec 2022 18:13:08 GMT
content-type: application/javascript
last-modified: Fri, 09 Dec 2022 10:08:51 GMT
vary: Accept-Encoding
etag: W/"63930933-c45e"
expires: Fri, 16 Dec 2022 18:13:08 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fperezhilton.com%2F&domain=perezhilton.com&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://perezhilton.com
Connection: keep-alive
Referer: https://perezhilton.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 18:13:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://perezhilton.com
server-processing-duration-in-ticks: 943160
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
104.26.0.93
52.30.134.174
157.240.221.35
3.126.56.137
178.250.2.146
104.18.21.226
104.85.187.217
2.18.173.43
147.75.85.234
188.114.99.234