ocsp.pki.goog/gts1c3
472 B IP
Hash 9c320af7047f9368e0536de66d6d2658
2cdb5bfd4bb4ddf85559ff29d06ed964e04119ab
64bb80bd8947d7d658ce8f20fc2bebab85d391bf2baa953c67201ebd194cd1b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 05:44:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-HYFGD9RQ6Y&l=dataLayer
200 OK 82 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-HYFGD9RQ6Y&l=dataLayer
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintEB:A2:AF:B3:20:F1:B1:77:23:0B:85:D2:B1:16:33:A7:97:49:EE:51
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (3288)
Hash c1c7c70ab69a56855fde09e8f1765614
51c5dbb6ca9463d16d142088fe3167f74513d730
38a35fe82c17329b44cf0e7dc22f11ad84dd416572a5d883319f79f5a624d54a
GET /gtag/js?id=G-HYFGD9RQ6Y&l=dataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Jun 2023 05:44:07 GMT
expires: Fri, 02 Jun 2023 05:44:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81495
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 9c320af7047f9368e0536de66d6d2658
2cdb5bfd4bb4ddf85559ff29d06ed964e04119ab
64bb80bd8947d7d658ce8f20fc2bebab85d391bf2baa953c67201ebd194cd1b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 05:44:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mrgay.com/upd/20230510.105924.7032/assets/previewl1b.20210114.1.js
200 OK 9.6 kB URL GET HTTP/2 mrgay.com/upd/20230510.105924.7032/assets/previewl1b.20210114.1.js
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Hash 6935d7c9f7e25440bf7cd8f5ec6b6321
8a6f68700fd542df9df1557a1ec55cd373e3f763
1485c2c1ffe86e78585e0088825d6a8787688418d86e97142e1eba57cdc851ce
GET /upd/20230510.105924.7032/assets/previewl1b.20210114.1.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: application/javascript
last-modified: Wed, 10 May 2023 10:59:24 GMT
vary: Accept-Encoding
etag: W/"645b790c-1b78"
expires: Sun, 02 Jul 2023 05:44:07 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/static/images/favicons/favicon-16x16.png
200 OK 898 B URL GET HTTP/2 mrgay.com/static/images/favicons/favicon-16x16.png
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 91528e124af26ec2be210daa2c811631
0736f1f88761cc33d6b2fd21a558336bc70bb9e7
b2ee3ce01d5ee9a4498c8d3de26ce85260ef715f4afbfb5979b25edf86765eac
GET /static/images/favicons/favicon-16x16.png HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/png
content-length: 898
last-modified: Wed, 10 May 2023 10:59:24 GMT
etag: "645b790c-382"
expires: Fri, 02 Jun 2023 06:14:08 GMT
cache-control: max-age=1800, public
pragma: public
accept-ranges: bytes
X-Firefox-Spdy: h2
mrgay.com/api/json/suggester/43200/1000.json
200 OK 54 kB URL GET HTTP/2 mrgay.com/api/json/suggester/43200/1000.json
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Hash 313eaaae53fd129db9e296c4a960eeb5
fffecd01448af22c032f039e49679b62345056c0
6f1489873adab82d519fda1f4a9ba862b0d61092871e8f3c2c1a155465105e89
GET /api/json/suggester/43200/1000.json HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: application/json
last-modified: Fri, 02 Jun 2023 01:21:06 GMT
vary: Accept-Encoding
etag: W/"64794402-37bd"
expires: Fri, 02 Jun 2023 05:49:07 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10374455_1.jpg
200 OK 33 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10374455_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 9521da7dc4dfb42a6c179dc4be08841d
2f515ddfa2233a9ba692d22046907f784395bea3
7e2ad4820927847cb98cf7678e89cd9dba7785f41c690482ce1e9854747b5ddf
GET /media/tn/10374455_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: image/jpeg
content-length: 33188
server: nginx/1.21.0
last-modified: Sun, 21 May 2023 16:57:29 GMT
etag: "646a4d79-81a4"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10371781_1.jpg
200 OK 24 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10371781_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 975863b711c876f6ce3b1f5bffd874fb
dd9a8efc7ce1f10faf0c0c1656edeed9eba7adeb
6701edfeb917d231763da8966e7c6cddea475e0f90f5a1a05d7e4db0890a3a4f
GET /media/tn/10371781_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: image/jpeg
content-length: 24091
server: nginx/1.21.0
last-modified: Fri, 28 Apr 2023 17:47:18 GMT
etag: "644c06a6-5e1b"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10371431_1.jpg
200 OK 20 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10371431_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash e94c21dd3c36934849e513a7c4d68c7d
c22e5a992db1236009fa4f98795ec4b50f136f0e
604f66f783acef3a3bf6c9ac92c2252508043f6a4cb535d42d448fe77b61f8ce
GET /media/tn/10371431_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: image/jpeg
content-length: 19824
server: nginx/1.21.0
last-modified: Fri, 28 Apr 2023 15:30:35 GMT
etag: "644be69b-4d70"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10175567_1.jpg
200 OK 18 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10175567_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash cbe416b8ddcd1af54996cddbce65e9b0
77b51d18f082ab7dc44708967677db7aa8c520c0
c5db0c1eb0c81462b1e889b848230428b5df8bc591d7ee4831c03fca072c7a8e
GET /media/tn/10175567_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: image/jpeg
content-length: 18369
server: nginx/1.21.0
last-modified: Sun, 01 May 2022 17:52:12 GMT
etag: "626ec8cc-47c1"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10118373_1.jpg
200 OK 19 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10118373_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 77425583569f55f5271858881c1c4c50
9bfdf9d9e7845b127a527283943b3fbfdaf2b2ea
90320bd02626be5f6619fd57850bd085ae8631e2c8aaa7abb05fe5e900e3174a
GET /media/tn/10118373_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: image/jpeg
content-length: 19223
server: nginx/1.21.0
last-modified: Sat, 26 Feb 2022 17:14:14 GMT
etag: "621a5fe6-4b17"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10066985_1.jpg
200 OK 22 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10066985_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash d54c5b86dd3370c66f792f836dc67dff
cd91c4204d290acca1a0c6a011e59dc7a22f4653
e9a97a439a29c5c3ebfde98fba9f3f6002576becd3e236f8611a8c034be796b1
GET /media/tn/10066985_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: image/jpeg
content-length: 22101
server: nginx/1.21.0
last-modified: Tue, 11 Jan 2022 05:26:54 GMT
etag: "61dd151e-5655"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10337101_1.jpg
200 OK 21 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10337101_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 7bbcd07a2b5de6981525c4dadd93b4fc
ef6c0591cb5c9cb9ce49ab658d2ab209250f07f6
2e1e949ff52e86a87fce5cb1c6fa470f5cebf95da80d409c83463a85ebef72e1
GET /media/tn/10337101_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: image/jpeg
content-length: 21069
server: nginx/1.21.0
last-modified: Tue, 24 Jan 2023 10:07:11 GMT
etag: "63cfadcf-524d"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10118713_1.jpg
200 OK 20 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10118713_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash db94e37ea5606e498537cd3a78556153
9d01805f94153b767b16a46747ea093e85c67fd9
63949389b37910e791c4785762e1ea316c8d62fbe0f99fddaed9ffa3867d9917
GET /media/tn/10118713_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: image/jpeg
content-length: 19591
server: nginx/1.21.0
last-modified: Sat, 26 Feb 2022 23:09:11 GMT
etag: "621ab317-4c87"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mrgay.com/upd/20230510.110102.674687/static/js/index.js
200 OK 228 kB URL GET HTTP/2 mrgay.com/upd/20230510.110102.674687/static/js/index.js
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Size 228 kB (228221 bytes)
Hash 09444be03bdda318e0453cdee6b73ce0
648a0db64abc81ee44b7263561d49de94664ddbd
f4c65868ff5cb7fa7080eaa7a0ba2ab11124706998822d2a5876306ab859e472
GET /upd/20230510.110102.674687/static/js/index.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: application/javascript
last-modified: Wed, 10 May 2023 11:01:02 GMT
vary: Accept-Encoding
etag: W/"645b796e-a4b7f"
expires: Fri, 02 Jun 2023 06:14:07 GMT
cache-control: max-age=1800, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10374881_1.jpg
200 OK 24 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10374881_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash a9baefa8f7b4204af7bd84e20444f07f
cc01f30c17127918ccbfa893c67f39f5c6687f48
adfeacd838830d9fa37c6cd11837e04c333e4571effc95c7d45665a9115e959e
GET /media/tn/10374881_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/jpeg
content-length: 24074
server: nginx/1.21.0
last-modified: Sun, 21 May 2023 19:56:11 GMT
etag: "646a775b-5e0a"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:08 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10240061_1.jpg
200 OK 20 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10240061_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 5528daff2141d1129314e5fe72507b98
9ef50e8ba01446bd01c405ff97d02bc010c0c8e9
8ae401c19d4b8dd6b9d217cbb741aafe9cd79482a80353753ef27c7590f5ebb4
GET /media/tn/10240061_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/jpeg
content-length: 20068
server: nginx/1.21.0
last-modified: Fri, 17 Jun 2022 23:46:16 GMT
etag: "62ad1248-4e64"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:08 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10294595_1.jpg
200 OK 24 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10294595_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash db48fe3f95058c8f6b64ea24ad44b521
47d75307aa974ea71b57fdb31b86e472d9de5c49
955a7cb983e8b18286b64f4b36225c8149600dbb886e711bf34f1b9275ff9037
GET /media/tn/10294595_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/jpeg
content-length: 23488
server: nginx/1.21.0
last-modified: Wed, 21 Dec 2022 15:54:05 GMT
etag: "63a32c1d-5bc0"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:08 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10370629_1.jpg
200 OK 20 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10370629_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash e1032da4ca53ddbecb5a9748d825bfed
fab889e8ab3a9062f1f823fa16a6c264ffa0a134
72e0ff95c34530cd9c464b0fabdc3145cc8dad8df8287a892e3b067bf145a64f
GET /media/tn/10370629_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/jpeg
content-length: 19626
server: nginx/1.21.0
last-modified: Wed, 26 Apr 2023 02:29:18 GMT
etag: "64488c7e-4caa"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:08 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10371325_1.jpg
200 OK 25 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10371325_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 4d53ecc6a380d26d830406423ffaae64
db165bb377bf93ec50f63275191b78073f8fa25a
0f644fd0ddd3a8390a52d9b83f006c5a97aa5f8a2885c45284bcd60c6a9eca72
GET /media/tn/10371325_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/jpeg
content-length: 25263
server: nginx/1.21.0
last-modified: Fri, 28 Apr 2023 15:04:12 GMT
etag: "644be06c-62af"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:08 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10325217_1.jpg
200 OK 19 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10325217_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash f59adf23e9c2176ec1a0033bfa5bd6cd
7f8a661a99dfc7fb66a5b32015805b501671cb91
be0630dfc23f518ea20c932147398e90ce73a25cb361dbfa001f7251d905a645
GET /media/tn/10325217_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/jpeg
content-length: 19203
server: nginx/1.21.0
last-modified: Mon, 09 Jan 2023 19:10:17 GMT
etag: "63bc6699-4b03"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:08 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10369209_1.jpg
200 OK 18 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10369209_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 605298ac6c102f6e95099a8a412d2c80
2e1abceed58ba3c11a5d70fd36ccce6f88919f38
c3b3a1235f1197b88e88a5b6a5ee4d139b8bc3ec521753f6e781243c4fa4c000
GET /media/tn/10369209_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/jpeg
content-length: 18122
server: nginx/1.21.0
last-modified: Tue, 25 Apr 2023 14:15:51 GMT
etag: "6447e097-46ca"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:08 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
metricswpsh.com/in/track?data=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
200 OK 0 B URL GET HTTP/2 metricswpsh.com/in/track?data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 05:44:08 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=14760
204 No Content 0 B URL OPTIONS HTTP/1.1 fp.metricswpsh.com/fp?tag_id=14760
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=14760 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://mrgay.com/
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Fri, 02 Jun 2023 05:44:08 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://mrgay.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
vast.yomeno.xyz/prepare
204 No Content 0 B IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint13:5C:08:D5:3E:F3:37:AC:41:C6:11:A5:10:49:63:DF:DB:41:C5:5E
ValiditySun, 28 May 2023 03:08:58 GMT - Sat, 26 Aug 2023 03:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://mrgay.com/
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 02 Jun 2023 05:44:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://mrgay.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
204 No Content 0 B IP
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint13:5C:08:D5:3E:F3:37:AC:41:C6:11:A5:10:49:63:DF:DB:41:C5:5E
ValiditySun, 28 May 2023 03:08:58 GMT - Sat, 26 Aug 2023 03:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 993
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 02 Jun 2023 05:44:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://mrgay.com
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=14760
204 No Content 27 B URL OPTIONS HTTP/1.1 fp.metricswpsh.com/fp?tag_id=14760
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
File type JSON data\012- , ASCII text
Hash c4bea7951aaa542768f63f72d171ff83
7f57b3ce5d3a9bb0a15c32b34745b0214710e185
d4fbb24457a99cbf28127e8a416979ca0f2ab97c64a59b8d38760c40d4934756
POST /fp?tag_id=14760 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 23166
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 02 Jun 2023 05:44:08 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 27
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://mrgay.com
Set-Cookie: id=6588729740728615512; Expires=Sat, 01 Jun 2024 05:44:08 GMT; Secure; SameSite=None
Vary: Origin
rtbrennab.com/banner/in/show/?mid=2044028589059868899&pid=0&site=28113&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-2&site_id=0&spot_id=28113&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.005778733953261057&placement_type_id=8&skin_test=&verify_hash=&score=0.48627385930491107&ml=&tag_ab=b&v2=0&ttl=&space_id=28113&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=2044028589059868899&pid=0&site=28113&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-2&site_id=0&spot_id=28113&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.005778733953261057&placement_type_id=8&skin_test=&verify_hash=&score=0.48627385930491107&ml=&tag_ab=b&v2=0&ttl=&space_id=28113&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=2044028589059868899&pid=0&site=28113&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-2&site_id=0&spot_id=28113&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.005778733953261057&placement_type_id=8&skin_test=&verify_hash=&score=0.48627385930491107&ml=&tag_ab=b&v2=0&ttl=&space_id=28113&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTMsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwOTAsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTEzLCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExMyIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU2ODQ2NDc5Nzd9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Fri, 02 Jun 2023 05:44:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
s.optnx.com/cimp.php?data=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
302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=TVRZNE5UWTRORFkwT0h3NE9XVTJZMkppTldOalpERmpaR1ZoTVRNelpEbG1aakJtWTJRNE4ySmxNdy0tfC9saWJyYXJ5LzYyMjg3OS83MjkyNzQyYTM0ZmYxM2M5NTU1ZDhlZTQxNzE2Yzk0ZDA3MTUzNDE1LmdpZnxodHRwc3w5MS45MC40Mi4xNTR8Tk9SfDQxfG1yZ2F5LmNvbXw2MjI4Nzl8NjY2MTczfDk0MzUzOHw0NjMyNTUyfDExOHw0MjE3MzU2fDQ3MDU5NzI2fDE1fDN8MHwwfDI1MzQ0fDB8MXw4MHxFVVJ8VVNEfDAuOTMyfDF8MjF8MzAweDI1MHwxfE5PUnx8NzJ8MnwxfHw0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YXxjNzk5ZTdkOWU5OWQ3MDNmYThmNzU1Y2NkOTQwMDkyMnwxfDB8bXJnYXkuY29tfDB8MHwwfDB8MXwwfGV4Y2hhbmdlX2Jhbm5lcnwwfDB8MzE0MzI0MnwtMXwwfDMxNDMyNDR8fHwxfDE0NDB8fDB8MHwwfDB8MHwwfDF8MHx8OHwxfE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6MTA5LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTExLjB8fE9LfGZiYzAzYTUxZmQyMWIyNmEzZmM3Y2RlZDE2OWQ0YTc5
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectoptnx.com
FingerprintE8:B5:4A:26:89:37:E9:85:D8:D0:28:5A:AB:D3:C5:95:5F:E3:BC:5D
ValidityTue, 09 May 2023 12:53:09 GMT - Mon, 07 Aug 2023 12:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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 HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 02 Jun 2023 05:44:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22647981a91fb877.784884602730182482%22%3B%7D; expires=Sun, 01 Jun 2025 05:44:09 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/622879/7292742a34ff13c9555d8ee41716c94d07153415.gif
X-Robots-Tag: noindex, follow
rtbrennab.com/banner/in/show/?mid=7374008406179185127&pid=0&site=28115&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-6&site_id=0&spot_id=28115&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.00570540674514938&placement_type_id=8&skin_test=&verify_hash=&score=0.48575093418226845&ml=&tag_ab=b&v2=0&ttl=&space_id=28115&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=7374008406179185127&pid=0&site=28115&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-6&site_id=0&spot_id=28115&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.00570540674514938&placement_type_id=8&skin_test=&verify_hash=&score=0.48575093418226845&ml=&tag_ab=b&v2=0&ttl=&space_id=28115&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=7374008406179185127&pid=0&site=28115&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-6&site_id=0&spot_id=28115&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.00570540674514938&placement_type_id=8&skin_test=&verify_hash=&score=0.48575093418226845&ml=&tag_ab=b&v2=0&ttl=&space_id=28115&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Fri, 02 Jun 2023 05:44:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=263961767091088920&pid=0&site=28114&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-3&site_id=0&spot_id=28114&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.004315012888539799&placement_type_id=8&skin_test=&verify_hash=&score=0.48695438682235015&ml=&tag_ab=b&v2=0&ttl=&space_id=28114&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=263961767091088920&pid=0&site=28114&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-3&site_id=0&spot_id=28114&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.004315012888539799&placement_type_id=8&skin_test=&verify_hash=&score=0.48695438682235015&ml=&tag_ab=b&v2=0&ttl=&space_id=28114&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=263961767091088920&pid=0&site=28114&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-3&site_id=0&spot_id=28114&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.004315012888539799&placement_type_id=8&skin_test=&verify_hash=&score=0.48695438682235015&ml=&tag_ab=b&v2=0&ttl=&space_id=28114&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Fri, 02 Jun 2023 05:44:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=5553183351382828936&pid=0&site=28112&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-2&site_id=0&spot_id=28112&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.006892757562497724&placement_type_id=8&skin_test=&verify_hash=&score=0.4851799324124801&ml=&tag_ab=b&v2=0&ttl=&space_id=28112&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=5553183351382828936&pid=0&site=28112&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-2&site_id=0&spot_id=28112&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.006892757562497724&placement_type_id=8&skin_test=&verify_hash=&score=0.4851799324124801&ml=&tag_ab=b&v2=0&ttl=&space_id=28112&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
IP
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=5553183351382828936&pid=0&site=28112&sc=NO&usage_type=DCH&subid=0&sid=0&cid=12752&price=0&is_cpm=1&cpm=0.007975683200000002&ecpm=0.005515982501120001&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-2&site_id=0&spot_id=28112&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.006892757562497724&placement_type_id=8&skin_test=&verify_hash=&score=0.4851799324124801&ml=&tag_ab=b&v2=0&ttl=&space_id=28112&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Fri, 02 Jun 2023 05:44:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
s.optnx.com/cimp.php?data=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--
302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=TVRZNE5UWTRORFkwT0h3NE9XVTJZMkppTldOalpERmpaR1ZoTVRNelpEbG1aakJtWTJRNE4ySmxNdy0tfC9saWJyYXJ5LzgzOTg5LzIwNzZjZGJmYzIwMzAzOTRhMjk2YTZhMzIwZWZjZDY4MGE5ZGQ5NGEuZ2lmfGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8bXJnYXkuY29tfDgzOTg5fDY2NjE3M3w5NDM1Mzh8NDYzMjU1MnwxMTh8NTY3NjY1MHw4MDI2ODczNnwxNXwzfDB8MHwyNTM0NHwwfDF8ODB8RVVSfFVTRHwwLjkzMnwxfDIxfDMwMHgyNTB8MXxOT1J8fDIwfDR8MXx8NGNiNzI1NjYwYzQzMDMxZTNiMDZjNzU4OTJkOTZjNWF8Yzc5OWU3ZDllOTlkNzAzZmE4Zjc1NWNjZDk0MDA5MjJ8MXwwfG1yZ2F5LmNvbXwwfDB8MHwwfDF8MHxleGNoYW5nZV9iYW5uZXJ8MHwwfDMxNDMyNDJ8LTF8MHwzMTQzMjQ0fHx8MXwxNDQwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2OjEwOS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzExMS4wfHxPS3wwMmYxNTllNWFiZTY5NDk5NThkNDFkZTM0MmZhNjZiZQ--
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectoptnx.com
FingerprintE8:B5:4A:26:89:37:E9:85:D8:D0:28:5A:AB:D3:C5:95:5F:E3:BC:5D
ValidityTue, 09 May 2023 12:53:09 GMT - Mon, 07 Aug 2023 12:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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-- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 02 Jun 2023 05:44:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22647981a92d34b9.596547274259230455%22%3B%7D; expires=Sun, 01 Jun 2025 05:44:09 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
X-Robots-Tag: noindex, follow
s.optnx.com/cimp.php?data=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--
302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=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--
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTUsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUxMDAsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE1LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU2ODQ2NDc5OTF9fQ==
Certificate IssuerLet's Encrypt
Subjectoptnx.com
FingerprintE8:B5:4A:26:89:37:E9:85:D8:D0:28:5A:AB:D3:C5:95:5F:E3:BC:5D
ValidityTue, 09 May 2023 12:53:09 GMT - Mon, 07 Aug 2023 12:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=TVRZNE5UWTRORFkwT0h3NE9XVTJZMkppTldOalpERmpaR1ZoTVRNelpEbG1aakJtWTJRNE4ySmxNdy0tfC9saWJyYXJ5LzgzOTg5LzIwNzZjZGJmYzIwMzAzOTRhMjk2YTZhMzIwZWZjZDY4MGE5ZGQ5NGEuZ2lmfGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8bXJnYXkuY29tfDgzOTg5fDY2NjE3M3w5NDM1Mzh8NDYzMjU1MnwxMTh8NTY3NjY1MHw4MDI2ODczNnwxNXwzfDB8MHwyNTM0NHwwfDF8ODB8RVVSfFVTRHwwLjkzMnwxfDIxfDMwMHgyNTB8MXxOT1J8fDIwfDR8MXx8NGNiNzI1NjYwYzQzMDMxZTNiMDZjNzU4OTJkOTZjNWF8Yzc5OWU3ZDllOTlkNzAzZmE4Zjc1NWNjZDk0MDA5MjJ8MXwwfG1yZ2F5LmNvbXwwfDB8MHwwLjAxfDF8MHxleGNoYW5nZV9iYW5uZXJ8MHwwfDMxNDMyNDJ8LTF8MHwzMTQzMjQ0fHx8MXwxNDQwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2OjEwOS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzExMS4wfHxPS3w4NWUzYzlhNGQ5YjExNTFjZWI4NGQyODdkZjUyYzMxZQ-- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 02 Jun 2023 05:44:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22647981a92fa136.829037563839030099%22%3B%7D; expires=Sun, 01 Jun 2025 05:44:09 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
X-Robots-Tag: noindex, follow
s.optnx.com/cimp.php?data=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--
302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=TVRZNE5UWTRORFkwT0h3NE9XVTJZMkppTldOalpERmpaR1ZoTVRNelpEbG1aakJtWTJRNE4ySmxNdy0tfC9saWJyYXJ5LzgzOTg5LzIwNzZjZGJmYzIwMzAzOTRhMjk2YTZhMzIwZWZjZDY4MGE5ZGQ5NGEuZ2lmfGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8bXJnYXkuY29tfDgzOTg5fDY2NjE3M3w5NDM1Mzh8NDYzMjU1MnwxMTh8NTY3NjY1MHw4MDI2ODczNnwxNXwzfDB8MHwyNTM0NHwwfDF8ODB8RVVSfFVTRHwwLjkzMnwxfDIxfDMwMHgyNTB8MXxOT1J8fDIwfDR8MXx8NGNiNzI1NjYwYzQzMDMxZTNiMDZjNzU4OTJkOTZjNWF8Yzc5OWU3ZDllOTlkNzAzZmE4Zjc1NWNjZDk0MDA5MjJ8MXwwfG1yZ2F5LmNvbXwwfDB8MHwwfDF8MHxleGNoYW5nZV9iYW5uZXJ8MHwwfDMxNDMyNDJ8LTF8MHwzMTQzMjQ0fHx8MXwxNDQwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2OjEwOS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzExMS4wfHxPS3wwMmYxNTllNWFiZTY5NDk5NThkNDFkZTM0MmZhNjZiZQ--
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectoptnx.com
FingerprintE8:B5:4A:26:89:37:E9:85:D8:D0:28:5A:AB:D3:C5:95:5F:E3:BC:5D
ValidityTue, 09 May 2023 12:53:09 GMT - Mon, 07 Aug 2023 12:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=TVRZNE5UWTRORFkwT0h3NE9XVTJZMkppTldOalpERmpaR1ZoTVRNelpEbG1aakJtWTJRNE4ySmxNdy0tfC9saWJyYXJ5LzgzOTg5LzIwNzZjZGJmYzIwMzAzOTRhMjk2YTZhMzIwZWZjZDY4MGE5ZGQ5NGEuZ2lmfGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8bXJnYXkuY29tfDgzOTg5fDY2NjE3M3w5NDM1Mzh8NDYzMjU1MnwxMTh8NTY3NjY1MHw4MDI2ODczNnwxNXwzfDB8MHwyNTM0NHwwfDF8ODB8RVVSfFVTRHwwLjkzMnwxfDIxfDMwMHgyNTB8MXxOT1J8fDIwfDR8MXx8NGNiNzI1NjYwYzQzMDMxZTNiMDZjNzU4OTJkOTZjNWF8Yzc5OWU3ZDllOTlkNzAzZmE4Zjc1NWNjZDk0MDA5MjJ8MXwwfG1yZ2F5LmNvbXwwfDB8MHwwfDF8MHxleGNoYW5nZV9iYW5uZXJ8MHwwfDMxNDMyNDJ8LTF8MHwzMTQzMjQ0fHx8MXwxNDQwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2OjEwOS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzExMS4wfHxPS3wwMmYxNTllNWFiZTY5NDk5NThkNDFkZTM0MmZhNjZiZQ-- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 02 Jun 2023 05:44:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22647981a93723a5.320382604136821379%22%3B%7D; expires=Sun, 01 Jun 2025 05:44:09 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
X-Robots-Tag: noindex, follow
rtbrennab.com/get/?go=1&data=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
200 OK 28 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type gzip compressed data, from Unix\012- data
Hash f431beb603c87a2ea9387ff32725dff4
4a94cfe98047a5d83be9a17923eb08e5b3162983
e5e6c07cdcc8b70b5f4941ad43215b893a59a2470314e5ac4637e8b3007d513c
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
200 OK 26 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
IP
ASN #60068 Datacamp Limited
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTQsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwOTIsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNCIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU2ODQ2NDc5ODR9fQ==
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint5F:D9:0E:52:17:61:88:ED:50:45:B4:DD:D4:F3:5F:30:D8:07:F5:F7
ValidityTue, 09 May 2023 12:30:19 GMT - Mon, 07 Aug 2023 12:30:18 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash b84bc3b7f8bab08bc5ea1ce70fde37db
2076cdbfc2030394a296a6a320efcd680a9dd94a
5c3aba940c05259789b56295566cb12d81d26913ba63a910318fb9f78a6f912b
GET /library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:09 GMT
content-type: image/gif
content-length: 25660
last-modified: Mon, 13 Feb 2023 08:47:25 GMT
etag: "63e9f91d-643c"
expires: Fri, 08 Mar 2024 11:08:09 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ1OfyD/WL1vAA
x-77-nzt-ray: c0a4cc286ba055d7a9817964f373000e
x-accel-expires: @1709897681
x-accel-date: 1678361681
x-cache: HIT
x-age: 7322968
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/622879/7292742a34ff13c9555d8ee41716c94d07153415.gif
200 OK 288 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/622879/7292742a34ff13c9555d8ee41716c94d07153415.gif
IP
ASN #60068 Datacamp Limited
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTMsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwOTAsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTEzLCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExMyIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU2ODQ2NDc5Nzd9fQ==
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint5F:D9:0E:52:17:61:88:ED:50:45:B4:DD:D4:F3:5F:30:D8:07:F5:F7
ValidityTue, 09 May 2023 12:30:19 GMT - Mon, 07 Aug 2023 12:30:18 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Size 288 kB (288179 bytes)
Hash 40403fc076bca57d52fd3fe3799711ab
7292742a34ff13c9555d8ee41716c94d07153415
8b4144105461bbbe77b574e4f8c702a07156d17bbeac58333e08b999f3df4023
GET /library/622879/7292742a34ff13c9555d8ee41716c94d07153415.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:09 GMT
content-type: image/gif
content-length: 288179
last-modified: Thu, 06 Jun 2019 06:44:49 GMT
etag: "5cf8b661-465b3"
expires: Wed, 25 Oct 2023 04:43:51 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ2gvbP/iLdfAA
x-77-nzt-ray: c0a4cc286ba055d7a98179649853f40d
x-accel-expires: @1710947745
x-accel-date: 1679411745
x-cache: HIT
x-age: 6272904
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
200 OK 42 B URL GET HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecthostave3.net
FingerprintC6:67:A3:9A:39:99:56:AE:03:D5:CD:A0:20:C9:34:2B:6A:EC:45:1F
ValidityWed, 17 May 2023 01:20:03 GMT - Tue, 15 Aug 2023 01:20:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:09 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 649195
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bvp0hpVhCElHFruSD5PeiUtLAxnOT4iXtrJRH2n6CDatiUWUNWWT%2Br6AV5%2F%2Bdnhs5Y2WDdr0jmsrB%2FfXTwWwcjD4XCmHUPc8ug94JAZK28OidPcIxF6TxDe3WC7kKKAw2h4ZzMHDjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7d0d62023bc6385a-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
200 OK 42 B URL GET HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecthostave3.net
FingerprintC6:67:A3:9A:39:99:56:AE:03:D5:CD:A0:20:C9:34:2B:6A:EC:45:1F
ValidityWed, 17 May 2023 01:20:03 GMT - Tue, 15 Aug 2023 01:20:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:09 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 649195
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GUmLGTaWd5oyHSEibApzAioQadyEhHIh1%2B5VBkWaJ2wjjFV3izxT4BhderR2trO43rXG%2FhhXViGmslhqwhFqlVSdrP0YcQbN6%2BlI5qDupsOxswQE46YeIJUG3y1VhnFaCNbamwNolw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7d0d62023bca385a-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
200 OK 42 B URL GET HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecthostave3.net
FingerprintC6:67:A3:9A:39:99:56:AE:03:D5:CD:A0:20:C9:34:2B:6A:EC:45:1F
ValidityWed, 17 May 2023 01:20:03 GMT - Tue, 15 Aug 2023 01:20:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:09 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 649195
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yy71njyJZdSSUtb9wnAPQmQfQeuaBs4Th%2BykWpCfo6%2B0nC6jbasRRuhJGjIYJA4FiNgOqmXX5FHjVspZ1NoVXUVVtxGNylqdR%2FvhcRZW6gTtHj8cFzAgY6SwfioAksS%2BdqAKo6TTuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7d0d62023bcc385a-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 2.1 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type gzip compressed data, from Unix\012- data
Hash b64dd4c6dba7ca2597c41de97eff5401
dbbd76b7500a9160ceb96ff118a286d075cab327
0737365095fb1e5065ea5b22cbf5dba5339e8769404af5fe024b3ccf09096a00
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
200 OK 26 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
IP
ASN #60068 Datacamp Limited
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint5F:D9:0E:52:17:61:88:ED:50:45:B4:DD:D4:F3:5F:30:D8:07:F5:F7
ValidityTue, 09 May 2023 12:30:19 GMT - Mon, 07 Aug 2023 12:30:18 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash b84bc3b7f8bab08bc5ea1ce70fde37db
2076cdbfc2030394a296a6a320efcd680a9dd94a
5c3aba940c05259789b56295566cb12d81d26913ba63a910318fb9f78a6f912b
GET /library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:09 GMT
content-type: image/gif
content-length: 25660
last-modified: Mon, 13 Feb 2023 08:47:25 GMT
etag: "63e9f91d-643c"
expires: Fri, 08 Mar 2024 11:08:09 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ2r/kz/WL1vAA
x-77-nzt-ray: c0a4cc286ba055d7a9817964af5fac1b
x-accel-expires: @1709897681
x-accel-date: 1678361681
x-cache: HIT
x-age: 7322968
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
mrgay.com/ofdipdhh/oubyvrpf.js
200 OK 21 kB URL GET HTTP/2 mrgay.com/ofdipdhh/oubyvrpf.js
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type ASCII text, with very long lines (21361)
Hash 06e33912403c3009e3df2cc587f4154a
8b442512b0c79c72a42461aa595787325ad79380
1451e91e2e00f6a2f3f682270ec309626ed4a4fac78ebd5792800ce37011638e
GET /ofdipdhh/oubyvrpf.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en; _ga_HYFGD9RQ6Y=GS1.1.1685684647.1.0.1685684647.0.0.0; _ga=GA1.1.1049418825.1685684647
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:09 GMT
content-type: application/javascript
last-modified: Fri, 02 Jun 2023 05:02:33 GMT
vary: Accept-Encoding
etag: W/"647977e9-53b3"
expires: Sun, 02 Jul 2023 05:44:09 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/livesmatter/holly7.10.8.d1792b2bad02c6bf9e80dcc22172b12a.js
200 OK 312 kB URL GET HTTP/2 mrgay.com/livesmatter/holly7.10.8.d1792b2bad02c6bf9e80dcc22172b12a.js
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
Size 312 kB (311663 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /livesmatter/holly7.10.8.d1792b2bad02c6bf9e80dcc22172b12a.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: application/javascript
last-modified: Mon, 15 May 2023 12:02:44 GMT
vary: Accept-Encoding
etag: W/"64621f64-4c16f"
expires: Sun, 02 Jul 2023 05:44:07 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/upd/20230510.110102.98906/static/css/index.css
200 OK 99 kB URL GET HTTP/2 mrgay.com/upd/20230510.110102.98906/static/css/index.css
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5e4a8cee2193a4119e600f85fce03f33
392fb40b17ec850089a3f19c056f4cc951d91899
d0be73284c92490824f1a7d180edc5d21b457feee1140bee5d566e042564a296
GET /upd/20230510.110102.98906/static/css/index.css HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: text/css
last-modified: Wed, 10 May 2023 11:01:02 GMT
vary: Accept-Encoding
etag: W/"645b796e-1825a"
expires: Fri, 02 Jun 2023 06:14:07 GMT
cache-control: max-age=1800, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10277243_1.jpg
200 OK 24 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10277243_1.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 54a1973e4d65dc8dcd7aa2867dff04bb
1e4a53cf41f0797d365dbc531bee685e69a71457
d37b991d5ef8c805d8ac17994ce123222d5734188a091ccefde81e349a9b78fa
GET /media/tn/10277243_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/jpeg
content-length: 23566
server: nginx/1.21.0
last-modified: Wed, 19 Oct 2022 14:57:14 GMT
etag: "6350104a-5c0e"
cache-control: max-age=15552000
expires: Wed, 29 Nov 2023 05:44:08 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 3.7 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTMsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwOTAsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTEzLCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExMyIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU2ODQ2NDc5Nzd9fQ==
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (3789), with no line terminators
Hash 890b314de653509dedd32de498602cd7
60aa0af2f8bf8458e1226078bb109ef60438e0a0
695922bc44998fa7481d4ee5c8a0b64151a43e0ee6acb10cbb79eccdd605668a
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/ofdipdhh/vklknjlu.js
200 OK 284 kB URL GET HTTP/2 mrgay.com/ofdipdhh/vklknjlu.js
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
Size 284 kB (284327 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ofdipdhh/vklknjlu.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: application/javascript
last-modified: Fri, 02 Jun 2023 05:02:34 GMT
vary: Accept-Encoding
etag: W/"647977ea-456a7"
expires: Sun, 02 Jul 2023 05:44:07 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/static/images/favicons/apple-touch-icon.png
200 OK 6.4 kB URL GET HTTP/2 mrgay.com/static/images/favicons/apple-touch-icon.png
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 186bd11e6b8481871c42087c3a8567da
658a8df1bf20c4ccd9546870d106a116674fdfbd
1f3990b4dd7c7d3ab89723cff39267b2d42b41fe6cf89bf17a6516982e27f2db
GET /static/images/favicons/apple-touch-icon.png HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: image/png
content-length: 6367
last-modified: Wed, 10 May 2023 10:59:24 GMT
etag: "645b790c-18df"
expires: Fri, 02 Jun 2023 06:14:08 GMT
cache-control: max-age=1800, public
pragma: public
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-213377078-5&l=dataLayer&cx=c
200 OK 122 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-213377078-5&l=dataLayer&cx=c
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintEB:A2:AF:B3:20:F1:B1:77:23:0B:85:D2:B1:16:33:A7:97:49:EE:51
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (2271)
Size 122 kB (122160 bytes)
Hash 031a4b2dc842bee4de0e2b399eb60204
fb3dcf5c24732042ffeb8c73fe441c5fcd58af6b
f14b903b095a33e15019d6fc7e397be48f8b7c5b330b697e81fa3e0fa27971e7
GET /gtag/js?id=UA-213377078-5&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Jun 2023 05:44:07 GMT
expires: Fri, 02 Jun 2023 05:44:07 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Jun 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47407
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
mrgay.com/ofdipdhh/yugtadxadqu.js
200 OK 54 kB URL GET HTTP/2 mrgay.com/ofdipdhh/yugtadxadqu.js
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ofdipdhh/yugtadxadqu.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en; _ga_HYFGD9RQ6Y=GS1.1.1685684647.1.0.1685684647.0.0.0; _ga=GA1.1.1049418825.1685684647
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:09 GMT
content-type: application/javascript
last-modified: Fri, 02 Jun 2023 05:02:34 GMT
vary: Accept-Encoding
etag: W/"647977ea-d1cb"
expires: Sun, 02 Jul 2023 05:44:09 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
200 OK 3.8 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTUsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUxMDAsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE1LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU2ODQ2NDc5OTF9fQ==
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (3859), with no line terminators
Hash 7db15c26c3a00b3b14e1e6c9566b68e9
6da800f58f971e206d01ab351b3ebbc8794bbc73
b9ce3a013887fd02a665344b61cdc589282db0d21507304943246e072765a966
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Fri, 02 Jun 2023 05:44:08 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/api/json/main/14400/str.en.json
200 OK 6.3 kB URL GET HTTP/2 mrgay.com/api/json/main/14400/str.en.json
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type troff or preprocessor input, ASCII text, with very long lines (7348), with no line terminators
Hash 608ec41ff1d9075b71686ccb0d35c1a5
2e3fd7a30f7c887077bfaf48e59abed211b721e5
f1c6c93b614e0ce67dcd67935e529e6adc0051ed46b0023cfeee204379d2d4f8
GET /api/json/main/14400/str.en.json HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: application/json
last-modified: Fri, 02 Jun 2023 05:04:05 GMT
vary: Accept-Encoding
etag: W/"64797845-1882"
expires: Fri, 02 Jun 2023 05:49:07 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
200 OK 173 kB URL User Request GET HTTP/2 IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (50025)
Size 173 kB (173424 bytes)
Hash d6ba34eb9998f8d2aa0e48c79a03a900
8f029dbe2ca077802763f2af8d4c83bd2d2a50e8
b661eba3616a46d29d1775362578e76a3d2a816a02291c1293789fe8301cb47f
GET / HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
set-cookie: kt_lang=en; expires=Mon, 27-May-2024 05:44:06 GMT; Max-Age=31104000; path=/; domain=.mrgay.com
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/api/json/videos2/14400/gay/most-popular/40/..1.all..day.json
200 OK 57 kB URL GET HTTP/2 mrgay.com/api/json/videos2/14400/gay/most-popular/40/..1.all..day.json
IP
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type JSON data\012- , ASCII text, with very long lines (57365), with no line terminators
Hash 36e503d1a8ebb387526cee4f90427670
07edd2eed7ba9534a018a260e0c7435703784fcd
e0a3d35066528e29795bb936c23efb2ac7cfcbffdb02b675a1f973a94bc9ae6c
GET /api/json/videos2/14400/gay/most-popular/40/..1.all..day.json HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Fri, 02 Jun 2023 05:44:07 GMT
content-type: application/json
last-modified: Fri, 02 Jun 2023 02:56:49 GMT
vary: Accept-Encoding
etag: W/"64795a71-e015"
expires: Fri, 02 Jun 2023 05:49:07 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
109.206.176.50
157.90.84.242
142.250.74.168
185.76.9.15
104.21.235.4
0.0.0.0