ad-delivery.net/px.gif?ch=1&e=0.17058332806920162
172.67.69.19200 OK 43 B URL GET ad-delivery.net/px.gif?ch=1&e=0.17058332806920162
IP 172.67.69.19:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectad-delivery.net
FingerprintFC:E1:0D:08:D4:C2:F5:E0:18:F6:59:D3:06:4F:E6:CE:39:3F:63:2A
ValidityWed, 08 Jan 2025 13:37:25 GMT - Tue, 08 Apr 2025 14:37:06 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.17058332806920162 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:17 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: AHMx-iEPlqWOJSe9JQXZBeN3a_oe7dvVmocZkdI9rLTrLe9sw9eAcqLlZRp7OrfpkmFW3o_p
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Mon, 17 Feb 2025 02:13:29 GMT
cache-control: public, max-age=86400
age: 1337381
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2B60pDHa%2BJ27saB4klkBB1lXcdvBcv2iopyP3jxmEfDKTwsWXBuQa%2B0lKGcalQypo271sdYpGZX8mGtG15v7wlaleKI2%2B87yBOwwtkiKQGnDdA4BHA7zZcvdnZ5Lc6Akyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91b19e5e3a9a0b45-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1438&min_rtt=897&rtt_var=899&sent=10&recv=11&lost=0&retrans=0&sent_bytes=4331&recv_bytes=1170&delivery_rate=2087457&cwnd=254&unsent_bytes=0&cid=8cd53115c8328783&ts=54&x=0"
X-Firefox-Spdy: h2
rt.marphezis.com/hb
188.166.203.175204 No Content 0 B IP 188.166.203.175:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://rentry.co/623ua63r
Certificate IssuerSectigo Limited
Subject*.marphezis.com
Fingerprint8B:CE:53:5D:1B:ED:4A:D2:DD:CD:2A:AD:5F:F4:A9:CF:34:04:E0:2E
ValidityThu, 12 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /hb HTTP/1.1
Host: rt.marphezis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Content-Length: 1034
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 04 Mar 2025 13:11:16 GMT
access-control-allow-origin: https://rentry.co
access-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
access-control-allow-credentials: true
access-control-expose-headers: Content-Length
access-control-max-age: 86400
cache-control: no-store
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
ag.dns-finder.com/px.gif
0.0.0.0 0 B IP 0.0.0.0:0
Requested by https://rentry.co/623ua63r
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px.gif HTTP/1.1
Host: ag.dns-finder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
rentry.co/static/js/jquery.min.js?vsson=28
104.26.2.16200 OK 94 kB URL GET rentry.co/static/js/jquery.min.js?vsson=28
IP 104.26.2.16:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectrentry.co
Fingerprint81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52
ValidityMon, 10 Feb 2025 01:52:48 GMT - Sun, 11 May 2025 02:52:45 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash e188d3498d443f6756228e9deead947b
1dcd38b086030b5e54cfb76d68bfa01725e57761
e993773fb478d4f63d4ec15c0deb9891da6379535a9b659a65e18fdc2e78fae4
GET /static/js/jquery.min.js?vsson=28 HTTP/1.1
Host: rentry.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/623ua63r
DNT: 1
Connection: keep-alive
Cookie: sessionid=j82zuz82zuqz9xjpoiwfumc9ad8hfxar
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:16 GMT
content-type: application/javascript
last-modified: Tue, 29 Oct 2024 18:34:53 GMT
etag: W/"67212acd-16d32"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, vary
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
age: 10866715
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7gD8iOQD564OnVrGlz1itxkqxAheFhb8v49r2Of%2BRFpi9fp3KwfJmSx399UnYfIOMwYF8LZKactZk7wE8qGkWqrPf3ympPtMd%2FTiFUR0ZZAhT5iy8x%2Btuog5%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91b19e552e8c56c3-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1070&min_rtt=471&rtt_var=569&sent=54&recv=37&lost=0&retrans=0&sent_bytes=56700&recv_bytes=1630&delivery_rate=25459340&cwnd=249&unsent_bytes=0&cid=68180016167ad52d&ts=487&x=0"
X-Firefox-Spdy: h2
ex.ingage.tech/v1/openrtb
104.18.26.216204 No Content 0 B URL OPTIONS ex.ingage.tech/v1/openrtb
IP 104.18.26.216:443
Requested by https://rentry.co/623ua63r
Certificate IssuerSectigo Limited
Subject*.ingage.tech
Fingerprint46:86:6F:98:03:DC:EE:74:FF:C9:A9:4B:A9:46:36:BD:1C:E1:DE:2F
ValidityThu, 01 Aug 2024 00:00:00 GMT - Mon, 11 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/openrtb HTTP/1.1
Host: ex.ingage.tech
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rentry.co/
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 04 Mar 2025 13:11:17 GMT
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: https://rentry.co
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-max-age: 86400
cf-cache-status: DYNAMIC
set-cookie: LW_SERVER=lw31; path=/
__cf_bm=gauaWoE_ARlg8KFTje55EE38L4TAiV35wtdl6GMbNgc-1741093877-1.0.1.1-xybGV1IPfxrJwa5c4ltn3JxYNzJW3RTtLAtSEXUpr84b282xrL2n9dOLcakidYr.Ru1LiMmiJtMWF1oKtnyStMJm.FVJTsSjZmf2YT4rjzA; path=/; expires=Tue, 04-Mar-25 13:41:17 GMT; domain=.ingage.tech; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 91b19e5b8e56b500-OSL
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=2
172.67.69.19200 OK 43 B URL GET ad-delivery.net/px.gif?ch=2
IP 172.67.69.19:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectad-delivery.net
FingerprintFC:E1:0D:08:D4:C2:F5:E0:18:F6:59:D3:06:4F:E6:CE:39:3F:63:2A
ValidityWed, 08 Jan 2025 13:37:25 GMT - Tue, 08 Apr 2025 14:37:06 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:17 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: AHMx-iEPlqWOJSe9JQXZBeN3a_oe7dvVmocZkdI9rLTrLe9sw9eAcqLlZRp7OrfpkmFW3o_p
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Mon, 17 Feb 2025 02:13:29 GMT
cache-control: public, max-age=86400
age: 1337381
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9MQYY5h3qC8GguCfM417TuW718%2Bc4XErsT%2FPylqtnUVGLouNLQoiHCmAdDkIDkyE87pbyxwYoSwhHEfCtParXKFYZ7pAeInQ1rtB26JEZ1oVmQnVEsgCO6cwx%2FCUBxpoxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91b19e5e3a820b45-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1438&min_rtt=897&rtt_var=899&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3209&recv_bytes=1170&delivery_rate=2087457&cwnd=254&unsent_bytes=0&cid=8cd53115c8328783&ts=53&x=0"
X-Firefox-Spdy: h2
onetag-sys.com/usync/?cb=1741093877440
51.38.120.206204 No Content 0 B URL GET onetag-sys.com/usync/?cb=1741093877440
IP 51.38.120.206:443
Requested by https://rentry.co/623ua63r
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint26:2D:63:1A:A7:C6:41:9C:A2:F5:39:CB:C4:F2:77:55:75:D9:90:82
ValidityTue, 21 Jan 2025 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1741093877440 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
prebid.a-mo.net/cchain/0?gdpr=0&gdpr_consent=&us_privacy=1YN-&&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D327%26uid%3D
163.5.194.32302 Found 0 B URL GET prebid.a-mo.net/cchain/0?gdpr=0&gdpr_consent=&us_privacy=1YN-&&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D327%26uid%3D
IP 163.5.194.32:443
ASN #60558 Phoenix Nap, LLC.
Requested by https://public.servenobid.com/sync.html
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
FingerprintA2:A1:4C:F9:09:AA:E5:6A:EA:D6:2C:4A:D7:B0:53:8E:78:DC:F1:B8
ValiditySat, 01 Mar 2025 08:49:04 GMT - Fri, 30 May 2025 08:49:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cchain/0?gdpr=0&gdpr_consent=&us_privacy=1YN-&&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D327%26uid%3D HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://public.servenobid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 0
date: Tue, 04 Mar 2025 13:11:21 GMT
location: https://ads.servenobid.com/sync?pid=327&uid=&us_privacy=1YN-&gdpr=0
server: envoy
vary: accept-encoding
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
cdn4.buysellads.net/pub/rentryco.js?1741093800000
159.65.211.77200 OK 739 kB URL GET cdn4.buysellads.net/pub/rentryco.js?1741093800000
IP 159.65.211.77:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://rentry.co/623ua63r
Certificate IssuerLet's Encrypt
Subject*.cdn4.buysellads.net
FingerprintA9:6A:AA:26:3E:3E:D0:F6:B5:CC:03:2F:71:6B:2B:83:CA:9E:6B:20
ValidityThu, 16 Jan 2025 11:34:16 GMT - Wed, 16 Apr 2025 11:34:15 GMT
Size 739 kB (739120 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pub/rentryco.js?1741093800000 HTTP/1.1
Host: cdn4.buysellads.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=3600, stale-while-revalidate
content-encoding: br
content-type: application/javascript
etag: f6af9bf7b241d0538d44ca519f88bd92b7017d86
server: srv-lon1-0
vary: Accept-Encoding
date: Tue, 04 Mar 2025 13:11:16 GMT
X-Firefox-Spdy: h2
ads.servenobid.com/sync?pid=327&uid=&us_privacy=1YN-&gdpr=0
143.244.197.139200 OK 0 B URL GET ads.servenobid.com/sync?pid=327&uid=&us_privacy=1YN-&gdpr=0
IP 143.244.197.139:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://public.servenobid.com/sync.html
Certificate IssuerLet's Encrypt
Subjectads.servenobid.com
FingerprintF4:7E:C3:1C:7A:23:C7:7B:99:0A:D8:29:99:4F:44:0C:9A:B3:16:5B
ValidityThu, 27 Feb 2025 20:00:41 GMT - Wed, 28 May 2025 20:00:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?pid=327&uid=&us_privacy=1YN-&gdpr=0 HTTP/1.1
Host: ads.servenobid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://public.servenobid.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:21 GMT
content-type: image/avif;charset=ISO-8859-1
content-length: 0
access-control-allow-origin: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ads.servedxk.com/rsync?redirect=https%3A%2F%2Fidsync.rlcdn.com%2F712910.gif%3Fpartner_uid%3D%24UID
45.55.125.114302 Found 0 B URL GET ads.servedxk.com/rsync?redirect=https%3A%2F%2Fidsync.rlcdn.com%2F712910.gif%3Fpartner_uid%3D%24UID
IP 45.55.125.114:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://public.servenobid.com/sync.html
Certificate IssuerLet's Encrypt
Subjectads.servedxk.com
Fingerprint96:E7:7A:9B:F6:FF:E0:BA:79:FD:6A:B1:16:D4:AF:F8:0C:0B:DD:70
ValidityFri, 28 Feb 2025 14:14:03 GMT - Thu, 29 May 2025 14:14:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rsync?redirect=https%3A%2F%2Fidsync.rlcdn.com%2F712910.gif%3Fpartner_uid%3D%24UID HTTP/1.1
Host: ads.servedxk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://public.servenobid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 04 Mar 2025 13:11:21 GMT
content-type: image/avif;charset=ISO-8859-1
content-length: 0
location: https://idsync.rlcdn.com/712910.gif?partner_uid=v2a4f3f5ee-e149-4c9a-a790-736da483bdc8
access-control-allow-origin: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
set-cookie: mtuid=v2a4f3f5ee-e149-4c9a-a790-736da483bdc8; domain=servedxk.com; path=/; SameSite=None; Expires=Sun, 31 Aug 2025 13:11:21 GMT; secure
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
rentry.co/favicon.ico
104.26.2.16200 OK 15 kB IP 104.26.2.16:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectrentry.co
Fingerprint81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52
ValidityMon, 10 Feb 2025 01:52:48 GMT - Sun, 11 May 2025 02:52:45 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash b102d58bb28a83de9b59fedcd08d17ea
8b6edee7f5d96b69c6e4f0c4e8376c640a34aa63
93eab1e1c50b4ff5b4aa5eefa6e85ce7bae235b52886914529c8b8aa4319f26c
GET /favicon.ico HTTP/1.1
Host: rentry.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/623ua63r
DNT: 1
Connection: keep-alive
Cookie: sessionid=j82zuz82zuqz9xjpoiwfumc9ad8hfxar
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:16 GMT
content-type: image/x-icon
last-modified: Tue, 29 Oct 2024 18:39:27 GMT
etag: W/"67212bdf-3aee"
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=14400, vary
cf-cache-status: HIT
age: 5243
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=epsA16AbAcWjU3BoWEyn8QYVBBSTt%2BFim4A5zCfk%2B6FEnac7Y83Se6LKdbrHPiQh%2FmoqlRDy8jKgH6Jfd5IDMTxpNhSTQur2kkUreeJi%2Ba3%2Bdd52ZTohL1LtBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91b19e57299556c3-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1024&min_rtt=471&rtt_var=417&sent=80&recv=40&lost=0&retrans=0&sent_bytes=90537&recv_bytes=1733&delivery_rate=33704565&cwnd=249&unsent_bytes=0&cid=68180016167ad52d&ts=769&x=0"
X-Firefox-Spdy: h2
exchange.cootlogix.com/prebid/multi/65e9e879eab3382166f737dc
45.55.100.180204 No Content 0 B URL POST exchange.cootlogix.com/prebid/multi/65e9e879eab3382166f737dc
IP 45.55.100.180:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://rentry.co/623ua63r
Certificate IssuerStarfield Technologies, Inc.
Subject*.cootlogix.com
FingerprintB1:96:69:A6:B9:3D:78:9F:77:E2:3E:E8:49:17:ED:C9:4A:6C:B7:B8
ValiditySun, 13 Oct 2024 12:10:16 GMT - Mon, 13 Oct 2025 12:10:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/multi/65e9e879eab3382166f737dc HTTP/1.1
Host: exchange.cootlogix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Content-Length: 903
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
access-control-allow-origin: https://rentry.co
cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control
date: Tue, 04 Mar 2025 13:11:17 GMT
c.4dex.io/pba.gif?v=1&pbjsv=8.45.0&org_id=1116&site=rentry-co&pv_id=e6b08fa0-5f55-4750-8a5b-667870b59e1f&auct_id=973b0ff5-2aa1-4029-a4ca-dee666ef3615&adu_code=bsa-zone_1700727262982-7_123456&url_dmn=rentry.co&pgtyp=undefined&plcmt=Rentryco_S2S_TopLeaderboard_ROS&mts=ban&ban_szs=300x250%2C468x60%2C728x90%2C970x250%2C970x90&bdrs=adagio%2Cadyoulike%2Cappnexus%2Cconnectad%2Ccriteo%2Cgumgum%2Cinsticator%2Cnobid%2Coms%2Conetag%2Copenx%2Cpubmatic%2Crise%2Crubicon%2Csmartadserver%2Cvidazoo&adg_mts=ban
35.241.34.106200 OK 43 B URL GET c.4dex.io/pba.gif?v=1&pbjsv=8.45.0&org_id=1116&site=rentry-co&pv_id=e6b08fa0-5f55-4750-8a5b-667870b59e1f&auct_id=973b0ff5-2aa1-4029-a4ca-dee666ef3615&adu_code=bsa-zone_1700727262982-7_123456&url_dmn=rentry.co&pgtyp=undefined&plcmt=Rentryco_S2S_TopLeaderboard_ROS&mts=ban&ban_szs=300x250%2C468x60%2C728x90%2C970x250%2C970x90&bdrs=adagio%2Cadyoulike%2Cappnexus%2Cconnectad%2Ccriteo%2Cgumgum%2Cinsticator%2Cnobid%2Coms%2Conetag%2Copenx%2Cpubmatic%2Crise%2Crubicon%2Csmartadserver%2Cvidazoo&adg_mts=ban
IP 35.241.34.106:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectc.4dex.io
Fingerprint7C:94:BB:52:49:ED:81:3E:D0:3F:3C:F3:85:2E:5D:BD:4C:CC:3E:A8
ValidityWed, 12 Feb 2025 08:51:53 GMT - Tue, 13 May 2025 09:46:27 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pba.gif?v=1&pbjsv=8.45.0&org_id=1116&site=rentry-co&pv_id=e6b08fa0-5f55-4750-8a5b-667870b59e1f&auct_id=973b0ff5-2aa1-4029-a4ca-dee666ef3615&adu_code=bsa-zone_1700727262982-7_123456&url_dmn=rentry.co&pgtyp=undefined&plcmt=Rentryco_S2S_TopLeaderboard_ROS&mts=ban&ban_szs=300x250%2C468x60%2C728x90%2C970x250%2C970x90&bdrs=adagio%2Cadyoulike%2Cappnexus%2Cconnectad%2Ccriteo%2Cgumgum%2Cinsticator%2Cnobid%2Coms%2Conetag%2Copenx%2Cpubmatic%2Crise%2Crubicon%2Csmartadserver%2Cvidazoo&adg_mts=ban HTTP/1.1
Host: c.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 04 Mar 2025 13:11:17 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
expires: -1
cache-control: no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
onetag-sys.com/usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1YN-&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D
51.38.120.206204 No Content 0 B URL GET onetag-sys.com/usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1YN-&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D
IP 51.38.120.206:443
Requested by https://public.servenobid.com/sync.html
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint26:2D:63:1A:A7:C6:41:9C:A2:F5:39:CB:C4:F2:77:55:75:D9:90:82
ValidityTue, 21 Jan 2025 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=1YN-&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://public.servenobid.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
script.4dex.io/localstore.js
104.26.9.169200 OK 492 B URL GET script.4dex.io/localstore.js
IP 104.26.9.169:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectscript.4dex.io
FingerprintFC:CD:C5:57:2D:97:0B:DE:12:64:89:6A:50:66:8B:2D:AD:AF:F1:EB
ValiditySat, 18 Jan 2025 00:29:53 GMT - Fri, 18 Apr 2025 01:29:47 GMT
File type JavaScript source, ASCII text, with very long lines (501), with no line terminators
Hash 3a461820d65554e3c9fac0513c78762d
b2e11ddb4a89841d83c2f79f6c06ac210c7acc9f
bd15ee919b19377c361ae64c6ad39732415574bfb109afb7fe28c1a83f45efb3
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Mar 2025 13:11:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"56dbef354a963eec89c1c0d552909198"
Last-Modified: Tue, 04 Mar 2025 09:40:49 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 12405
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vIClhPBRE4EbDWjHBK%2Fesu45KtXRK2XHAgvyJWWC5LNMs7rxiNXwE3eEl9q9ur3q3tcNcHo2ChAVilLAfZvql2oox7Zs7pYtAGw7w6BfXgZGDNSfIPL1%2FYfD4eeAbGbH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 91b19e5b2f2a1c06-OSL
Content-Encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=626&min_rtt=498&rtt_var=298&sent=5&recv=8&lost=0&retrans=0&sent_bytes=3103&recv_bytes=1013&delivery_rate=4875420&cwnd=252&unsent_bytes=0&cid=2a35138c26515425&ts=82&x=0"
sync-eu.connectad.io/syncer/1
104.22.54.206204 No Content 0 B URL GET sync-eu.connectad.io/syncer/1
IP 104.22.54.206:443
Requested by https://cdn.connectad.io/connectmyusers.php?
Certificate IssuerLet's Encrypt
Subjectconnectad.io
Fingerprint6F:E7:AE:06:78:56:7F:46:09:07:DB:9C:C7:E1:58:B9:93:22:06:6D
ValiditySun, 02 Feb 2025 18:04:44 GMT - Sat, 03 May 2025 18:04:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /syncer/1 HTTP/1.1
Host: sync-eu.connectad.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.connectad.io/
Cookie: cadsync
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Tue, 04 Mar 2025 13:11:21 GMT
cache-control: no-cache, private
cf-cache-status: DYNAMIC
priority: u=4,i=?0
server: cloudflare
cf-ray: 91b19e778b88568b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
ib.adnxs.com/ut/v3/prebid
185.89.210.153200 OK 251 B URL POST ib.adnxs.com/ut/v3/prebid
IP 185.89.210.153:443
Requested by https://rentry.co/623ua63r
Certificate IssuerDigiCert Inc
Subject*.adnxs.com
FingerprintF4:EE:89:C7:20:BA:61:AE:F3:AA:39:44:BE:B4:55:C2:57:AE:7B:2E
ValidityFri, 21 Feb 2025 00:00:00 GMT - Mon, 23 Mar 2026 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash d4b7e3852b8b78f58de99657025a1aac
1d081ac897c89d9ca0f48f65d5299d129146fa02
e159b11c9a845fb3a7c216f99debf4b091ed85181f1568f861f6ac2cb074731e
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Content-Length: 1124
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.4
date: Tue, 04 Mar 2025 13:11:18 GMT
content-type: application/json; charset=utf-8
content-length: 251
cache-control: no-store, no-cache, private
pragma: no-cache
expires: Sat, 15 Nov 2008 16:00:00 GMT
p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://rentry.co
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
an-x-request-uuid: 78e4f79b-ef3a-4b68-ba44-febbca9cd1e9
x-proxy-origin: 91.90.42.154; 91.90.42.154; 943.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; *.adnxs.com
X-Firefox-Spdy: h2
c.4dex.io/pba.gif?v=2&pbjsv=8.45.0&org_id=1116&site=rentry-co&pv_id=e6b08fa0-5f55-4750-8a5b-667870b59e1f&auct_id=973b0ff5-2aa1-4029-a4ca-dee666ef3615&adu_code=bsa-zone_1700727262982-7_123456&url_dmn=rentry.co&pgtyp=undefined&plcmt=Rentryco_S2S_TopLeaderboard_ROS&mts=ban&ban_szs=300x250%2C468x60%2C728x90%2C970x250%2C970x90&bdrs=adagio%2Cadyoulike%2Cappnexus%2Cconnectad%2Ccriteo%2Cgumgum%2Cinsticator%2Cnobid%2Coms%2Conetag%2Copenx%2Cpubmatic%2Crise%2Crubicon%2Csmartadserver%2Cvidazoo&adg_mts=ban&bdrs_bid=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&bdrs_cpm=%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C
35.241.34.106200 OK 43 B URL GET c.4dex.io/pba.gif?v=2&pbjsv=8.45.0&org_id=1116&site=rentry-co&pv_id=e6b08fa0-5f55-4750-8a5b-667870b59e1f&auct_id=973b0ff5-2aa1-4029-a4ca-dee666ef3615&adu_code=bsa-zone_1700727262982-7_123456&url_dmn=rentry.co&pgtyp=undefined&plcmt=Rentryco_S2S_TopLeaderboard_ROS&mts=ban&ban_szs=300x250%2C468x60%2C728x90%2C970x250%2C970x90&bdrs=adagio%2Cadyoulike%2Cappnexus%2Cconnectad%2Ccriteo%2Cgumgum%2Cinsticator%2Cnobid%2Coms%2Conetag%2Copenx%2Cpubmatic%2Crise%2Crubicon%2Csmartadserver%2Cvidazoo&adg_mts=ban&bdrs_bid=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&bdrs_cpm=%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C
IP 35.241.34.106:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectc.4dex.io
Fingerprint7C:94:BB:52:49:ED:81:3E:D0:3F:3C:F3:85:2E:5D:BD:4C:CC:3E:A8
ValidityWed, 12 Feb 2025 08:51:53 GMT - Tue, 13 May 2025 09:46:27 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pba.gif?v=2&pbjsv=8.45.0&org_id=1116&site=rentry-co&pv_id=e6b08fa0-5f55-4750-8a5b-667870b59e1f&auct_id=973b0ff5-2aa1-4029-a4ca-dee666ef3615&adu_code=bsa-zone_1700727262982-7_123456&url_dmn=rentry.co&pgtyp=undefined&plcmt=Rentryco_S2S_TopLeaderboard_ROS&mts=ban&ban_szs=300x250%2C468x60%2C728x90%2C970x250%2C970x90&bdrs=adagio%2Cadyoulike%2Cappnexus%2Cconnectad%2Ccriteo%2Cgumgum%2Cinsticator%2Cnobid%2Coms%2Conetag%2Copenx%2Cpubmatic%2Crise%2Crubicon%2Csmartadserver%2Cvidazoo&adg_mts=ban&bdrs_bid=0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0&bdrs_cpm=%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C HTTP/1.1
Host: c.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 04 Mar 2025 13:11:18 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
expires: -1
cache-control: no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ads.servedxk.com/rsync?redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D369%26uid%3D%24UID
45.55.125.114302 Found 0 B URL GET ads.servedxk.com/rsync?redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D369%26uid%3D%24UID
IP 45.55.125.114:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://public.servenobid.com/sync.html
Certificate IssuerLet's Encrypt
Subjectads.servedxk.com
Fingerprint96:E7:7A:9B:F6:FF:E0:BA:79:FD:6A:B1:16:D4:AF:F8:0C:0B:DD:70
ValidityFri, 28 Feb 2025 14:14:03 GMT - Thu, 29 May 2025 14:14:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rsync?redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D369%26uid%3D%24UID HTTP/1.1
Host: ads.servedxk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://public.servenobid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 04 Mar 2025 13:11:21 GMT
content-type: image/avif;charset=ISO-8859-1
content-length: 0
location: https://ads.servenobid.com/sync?pid=369&uid=v260f975ef-f816-45fa-bc01-76b639eb029d
access-control-allow-origin: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
set-cookie: mtuid=v260f975ef-f816-45fa-bc01-76b639eb029d; domain=servedxk.com; path=/; SameSite=None; Expires=Sun, 31 Aug 2025 13:11:21 GMT; secure
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
hb.yellowblue.io/hb-multi
143.204.55.60403 Forbidden 919 B URL POST hb.yellowblue.io/hb-multi
IP 143.204.55.60:443
Requested by https://rentry.co/623ua63r
Certificate IssuerAmazon
Subject*.yellowblue.io
Fingerprint43:27:77:06:E0:F3:C5:8B:BC:DD:4F:66:5E:9E:23:9B:AD:DC:13:03
ValiditySun, 16 Feb 2025 00:00:00 GMT - Tue, 17 Mar 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (954), with no line terminators
Hash e407fb75565d76441b28d98b1c39de67
25df00cf824bc6f3e770bd15fb988a9d49299dc6
3558ca4b0111910b6bc6d02fd32b0895ef90a81b01053db138cb667af12a644f
POST /hb-multi HTTP/1.1
Host: hb.yellowblue.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Content-Length: 1369
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: CloudFront
date: Tue, 04 Mar 2025 13:11:17 GMT
content-type: text/html
content-length: 919
x-cache: Error from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hIzm831NxmfuhFQw2-yoQ_eKazu8ymBAYqcvcsmJEuxl8dkOdy_Z3g==
X-Firefox-Spdy: h2
sync.cootlogix.com/api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy=
143.198.117.81200 OK 109 B URL GET sync.cootlogix.com/api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy=
IP 143.198.117.81:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://rentry.co/623ua63r
Certificate IssuerStarfield Technologies, Inc.
Subject*.cootlogix.com
FingerprintB1:96:69:A6:B9:3D:78:9F:77:E2:3E:E8:49:17:ED:C9:4A:6C:B7:B8
ValiditySun, 13 Oct 2024 12:10:16 GMT - Mon, 13 Oct 2025 12:10:16 GMT
File type HTML document, ASCII text, with no line terminators
Hash d1c53a35cb8abdef76536363655c0b99
776a3051a3d7a8b0766c0752739a8965cbca206a
f8c0b3d8ccde15253d7a3720df25c27ed5ede613d98ddf0366789eb60713d8b5
GET /api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: sync.cootlogix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-credentials: true
p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa"
access-control-allow-methods: GET, HEAD, OPTIONS, POST
content-type: text/html
content-length: 109
date: Tue, 04 Mar 2025 13:11:21 GMT
X-Firefox-Spdy: h2
onetag-sys.com/usync/?pubId=5649f68000b2f63&gdpr=0
51.38.120.206204 No Content 0 B URL GET onetag-sys.com/usync/?pubId=5649f68000b2f63&gdpr=0
IP 51.38.120.206:443
Requested by https://rentry.co/623ua63r
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint26:2D:63:1A:A7:C6:41:9C:A2:F5:39:CB:C4:F2:77:55:75:D9:90:82
ValidityTue, 21 Jan 2025 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=5649f68000b2f63&gdpr=0 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
t.fullres.net/track/al
159.65.211.77200 OK 0 B IP 159.65.211.77:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://rentry.co/623ua63r
Certificate IssuerLet's Encrypt
Subject*.t.fullres.net
Fingerprint8E:E7:1F:39:05:06:37:97:50:0E:E7:12:A4:32:72:2D:3A:93:66:CD
ValidityThu, 16 Jan 2025 12:07:31 GMT - Wed, 16 Apr 2025 12:07:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /track/al HTTP/1.1
Host: t.fullres.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
Content-Type: text/plain;charset=UTF-8
Content-Length: 472
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: srv-lon1-2
vary: Accept-Encoding
content-type: text/plain; charset=utf-8
content-length: 16
date: Tue, 04 Mar 2025 13:11:17 GMT
X-Firefox-Spdy: h2
i.connectad.io/api/v2
104.22.54.206204 No Content 0 B IP 104.22.54.206:443
Requested by https://rentry.co/623ua63r
Certificate IssuerLet's Encrypt
Subjectconnectad.io
Fingerprint6F:E7:AE:06:78:56:7F:46:09:07:DB:9C:C7:E1:58:B9:93:22:06:6D
ValiditySun, 02 Feb 2025 18:04:44 GMT - Sat, 03 May 2025 18:04:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2 HTTP/1.1
Host: i.connectad.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Content-Length: 900
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 04 Mar 2025 13:11:17 GMT
cache-control: no-cache, private
access-control-allow-origin: https://rentry.co
access-control-allow-credentials: true
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
permissions-policy: browsing-topics=()
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91b19e5b9aa5b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
exchange.cootlogix.com/prebid/multi/65e9e879eab3382166f737dc
45.55.100.180204 No Content 0 B URL POST exchange.cootlogix.com/prebid/multi/65e9e879eab3382166f737dc
IP 45.55.100.180:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://rentry.co/623ua63r
Certificate IssuerStarfield Technologies, Inc.
Subject*.cootlogix.com
FingerprintB1:96:69:A6:B9:3D:78:9F:77:E2:3E:E8:49:17:ED:C9:4A:6C:B7:B8
ValiditySun, 13 Oct 2024 12:10:16 GMT - Mon, 13 Oct 2025 12:10:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/multi/65e9e879eab3382166f737dc HTTP/1.1
Host: exchange.cootlogix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Content-Length: 859
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
access-control-allow-origin: https://rentry.co
cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control
date: Tue, 04 Mar 2025 13:11:17 GMT
ex.ingage.tech/v1/openrtb
104.18.26.216200 OK 182 B URL POST ex.ingage.tech/v1/openrtb
IP 104.18.26.216:443
Requested by https://rentry.co/623ua63r
Certificate IssuerSectigo Limited
Subject*.ingage.tech
Fingerprint46:86:6F:98:03:DC:EE:74:FF:C9:A9:4B:A9:46:36:BD:1C:E1:DE:2F
ValidityThu, 01 Aug 2024 00:00:00 GMT - Mon, 11 Aug 2025 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 4b03579f246e3133efbf130e0038b4e3
329acf75eb388d4f0291c0c60ad8ce42a3f9d8a0
e3d626f29782db5730ee6e1162a14d0dd14d4104a348e2d1f9be289067540807
POST /v1/openrtb HTTP/1.1
Host: ex.ingage.tech
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: application/json
Content-Length: 1225
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:17 GMT
content-type: application/json; charset=utf-8
vary: Origin
access-control-allow-origin: https://rentry.co
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
set-cookie: LW_SERVER=lw39; path=/
__cf_bm=HbIPrOMITQxt6pWttVYdNIlywew06OsvIBZkEj7WmHs-1741093877-1.0.1.1-tNz6rDYoluc85eGnh6.3X9QqhtmGqIvdxcMQ0HHNHced5r5xV5dnD18nA9H3iE1pZbJUOx.Kk47MlpINYIwAlG6NzGi9CfwUHJEbH0D6Kh4; path=/; expires=Tue, 04-Mar-25 13:41:17 GMT; domain=.ingage.tech; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 91b19e5cca7f569d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cs-server-s2s.yellowblue.io/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D352%26uid%3D%7BpartnerId%7D
52.21.204.204204 No Content 0 B URL GET cs-server-s2s.yellowblue.io/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D352%26uid%3D%7BpartnerId%7D
IP 52.21.204.204:443
Requested by https://public.servenobid.com/sync.html
Certificate IssuerAmazon
Subject*.yellowblue.io
Fingerprint36:B5:3F:5C:78:1A:AF:39:E6:F8:46:8B:A7:4C:DB:3C:9C:B6:30:DD
ValiditySun, 16 Feb 2025 00:00:00 GMT - Tue, 17 Mar 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync-iframe?gdpr=0&gdpr_consent=&us_privacy=1YN-&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D352%26uid%3D%7BpartnerId%7D HTTP/1.1
Host: cs-server-s2s.yellowblue.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://public.servenobid.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 04 Mar 2025 13:11:21 GMT
x-envoy-upstream-service-time: 2
server: istio-envoy
X-Firefox-Spdy: h2
rentry.co/static/js/bootstrap.min.js?vsson=28
104.26.2.16200 OK 58 kB URL GET rentry.co/static/js/bootstrap.min.js?vsson=28
IP 104.26.2.16:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectrentry.co
Fingerprint81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52
ValidityMon, 10 Feb 2025 01:52:48 GMT - Sun, 11 May 2025 02:52:45 GMT
File type JavaScript source, ASCII text, with very long lines (57791)
Hash e1d98d47689e00f8ecbc5d9f61bdb42e
6778fed3cf095a318141a31f455c8f4663885bde
0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b
GET /static/js/bootstrap.min.js?vsson=28 HTTP/1.1
Host: rentry.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/623ua63r
DNT: 1
Connection: keep-alive
Cookie: sessionid=j82zuz82zuqz9xjpoiwfumc9ad8hfxar
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:16 GMT
content-type: application/javascript
last-modified: Tue, 29 Oct 2024 18:39:27 GMT
etag: W/"67212bdf-e2d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, vary
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
age: 1748836
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dndUJO%2BCBDEhvTkZ0TDWTLs3anZIdhfupEpAjN021JpAmZamywgnsNIYIBzdgzctHFF%2Bi0jWP5q2J2UiUyHM3wpisOC9MU74TrLzmZdt1767HqQAyoKsZfaFGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91b19e552e8e56c3-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1165&min_rtt=471&rtt_var=743&sent=40&recv=35&lost=0&retrans=0&sent_bytes=40086&recv_bytes=1630&delivery_rate=25459340&cwnd=249&unsent_bytes=0&cid=68180016167ad52d&ts=461&x=0"
X-Firefox-Spdy: h2
ads.servenobid.com/sync?pid=369&uid=v260f975ef-f816-45fa-bc01-76b639eb029d
143.244.197.139200 OK 0 B URL GET ads.servenobid.com/sync?pid=369&uid=v260f975ef-f816-45fa-bc01-76b639eb029d
IP 143.244.197.139:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://public.servenobid.com/sync.html
Certificate IssuerLet's Encrypt
Subjectads.servenobid.com
FingerprintF4:7E:C3:1C:7A:23:C7:7B:99:0A:D8:29:99:4F:44:0C:9A:B3:16:5B
ValidityThu, 27 Feb 2025 20:00:41 GMT - Wed, 28 May 2025 20:00:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?pid=369&uid=v260f975ef-f816-45fa-bc01-76b639eb029d HTTP/1.1
Host: ads.servenobid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://public.servenobid.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:21 GMT
content-type: image/avif;charset=ISO-8859-1
content-length: 0
set-cookie: pid_369=v260f975ef-f816-45fa-bc01-76b639eb029d; domain=servenobid.com; SameSite=None; Expires=Tue, 11 Mar 2025 13:11:21 GMT; secure
access-control-allow-origin: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
public.servenobid.com/sync.html
54.240.174.39200 OK 9.1 kB URL GET public.servenobid.com/sync.html
IP 54.240.174.39:443
Requested by https://rentry.co/623ua63r
Certificate IssuerAmazon
Subject*.servenobid.com
FingerprintE9:89:93:3F:34:33:BA:99:42:AB:42:A7:E3:38:7C:55:FA:3A:73:66
ValidityThu, 07 Nov 2024 00:00:00 GMT - Sat, 06 Dec 2025 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (9384), with no line terminators
Hash e4593badb335902d3707d1aa199e70e0
9a92110b68497dc1085687360aee47f03dbe71a9
29b320f76b1d7b59ad0d30705386e27785ead51fe07d6d98cd974c399c59c249
GET /sync.html HTTP/1.1
Host: public.servenobid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
last-modified: Mon, 16 Dec 2024 17:05:15 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: 9bac2a3a553531fc9a27d6f04ede990e94b20685fe3779ed78d7023a4303bacb
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:559734745816:build/adserver-public-prod:ddcfc341-8601-44da-84c9-5adf31277555
x-amz-meta-codebuild-content-md5: faa6a0b71089ae4e2e9f3e88430e621b
server: AmazonS3
date: Tue, 04 Mar 2025 05:30:11 GMT
cache-control: max-age=86400
etag: W/"ee5a228ed26b25eba533061e372a78de"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZWZDrhMEMxn7V5VTJkfklPNf-VHbd_cwlZGabGuDfnZh4_NJZzce9w==
age: 27692
vary: accept-encoding, Origin
X-Firefox-Spdy: h2
rentry.co/static/css/bootstrap.min.css?vsson=28
104.26.2.16200 OK 191 kB URL GET rentry.co/static/css/bootstrap.min.css?vsson=28
IP 104.26.2.16:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectrentry.co
Fingerprint81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52
ValidityMon, 10 Feb 2025 01:52:48 GMT - Sun, 11 May 2025 02:52:45 GMT
File type ASCII text, with very long lines (65324)
Size 191 kB (190727 bytes)
Hash 9eae62f922a6cd7f2abdea13d8bc0a32
c0875bc2662a303f288fea600bba5a5a53906e79
dab2f4b3f262998d8e8034b6714e34ebaa63cdf367ff35cb0a1823023b2ae79d
GET /static/css/bootstrap.min.css?vsson=28 HTTP/1.1
Host: rentry.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/623ua63r
DNT: 1
Connection: keep-alive
Cookie: sessionid=j82zuz82zuqz9xjpoiwfumc9ad8hfxar
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:16 GMT
content-type: text/css
last-modified: Tue, 29 Oct 2024 18:34:53 GMT
etag: W/"67212acd-2e907"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, vary
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
age: 10866715
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gkjtei8JUbkh3maVQwR2KmtUVJry7YUV%2BVQ6OCLe8Maw8BBHnCfD4j%2Bu1ekgAnW4u5a2oI9EwwHBkjh22Hmsk119I1vmwq%2FEMWyA1urvhsZgSBeXnYRbOVHpCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91b19e552e8656c3-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4064&min_rtt=471&rtt_var=6862&sent=14&recv=18&lost=0&retrans=0&sent_bytes=6592&recv_bytes=1630&delivery_rate=9495081&cwnd=249&unsent_bytes=0&cid=68180016167ad52d&ts=451&x=0"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-LLFSDKZXET
142.250.74.136200 OK 322 kB URL GET www.googletagmanager.com/gtag/js?id=G-LLFSDKZXET
IP 142.250.74.136:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintAE:1B:D4:56:41:F7:15:A7:24:B8:F3:55:83:91:17:2C:97:12:67:6E
ValidityWed, 26 Feb 2025 15:32:54 GMT - Wed, 21 May 2025 15:32:53 GMT
File type JavaScript source, ASCII text, with very long lines (5960)
Size 322 kB (322411 bytes)
Hash 244daf4761424e7bd9b74cb0a50843e0
a41ae6198bdadb8eba2256f5f0b3d6a517825ad3
67ef0990ea4f32b199a19e980639b77e0902065e4134c51aa0740a7a88656793
GET /gtag/js?id=G-LLFSDKZXET HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Mar 2025 13:11:16 GMT
expires: Tue, 04 Mar 2025 13:11:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1003:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1003:0
report-to: {"group":"ascgcycc:1003:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1003:0"}],}
server: Google Tag Manager
content-length: 111051
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
btloader.com/tag?o=5102648370397184&upapi=true
104.22.75.216200 OK 77 kB URL GET btloader.com/tag?o=5102648370397184&upapi=true
IP 104.22.75.216:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectbtloader.com
FingerprintE7:39:0B:06:36:E2:71:C8:5E:6F:F7:30:CF:56:9C:52:40:8D:64:1A
ValidityMon, 03 Feb 2025 12:32:37 GMT - Sun, 04 May 2025 13:32:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 4359459e11289a2e24387b9dbf33b0ac
cb8bd9b79c734ea585eb13056607d7761c0968a7
49f8e9e55f10368bd3fd3222c9ddeafed8d8843f645b3fccdc95c1310cbefc58
GET /tag?o=5102648370397184&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:17 GMT
content-type: application/javascript
content-length: 24297
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
content-encoding: gzip
etag: "ca506b811394f3463d22d4ff46a2ad0d"
last-modified: Tue, 04 Mar 2025 12:10:10 GMT
vary: Origin, Accept-Encoding
x-robots-tag: noindex, nofollow
via: 1.1 google
cf-cache-status: HIT
age: 3500
accept-ranges: bytes
server: cloudflare
cf-ray: 91b19e5b5ca29302-CPH
X-Firefox-Spdy: h2
script.4dex.io/a/latest/adagio.js
104.26.9.169200 OK 62 kB URL GET script.4dex.io/a/latest/adagio.js
IP 104.26.9.169:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectscript.4dex.io
FingerprintFC:CD:C5:57:2D:97:0B:DE:12:64:89:6A:50:66:8B:2D:AD:AF:F1:EB
ValiditySat, 18 Jan 2025 00:29:53 GMT - Fri, 18 Apr 2025 01:29:47 GMT
File type JavaScript source, ASCII text, with very long lines (62208)
Hash 0a208cce32aac1680274823785eea4d9
50ee1631e89aca8c76c979ddefedea6898970d65
5d08f1fe8f9710debaeb9c4e39ebce417f58ecae99658755992ae89f9f5c6fa6
GET /a/latest/adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Mar 2025 13:11:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
ETag: W/"0a208cce32aac1680274823785eea4d9"
Last-Modified: Tue, 04 Mar 2025 09:40:45 GMT
Vary: Origin, Accept-Encoding
Access-Control-Expose-Headers:
Expires: Tue, 04 Mar 2025 10:18:33 GMT
CF-Cache-Status: HIT
Age: 12164
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TEbvtDfOs0Ip66HQex4EgJ50kuMbmtbJnUDEMKs8XotabJlcLXRicjohv1Zryfun%2BKFxg3eoufWWhmUq7LajLXvj%2FyVGn01bjHCniKbdAn1G94Oh2ks5pFAkdPpevh65"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 91b19e5d99fc56c3-OSL
Content-Encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=710&min_rtt=556&rtt_var=266&sent=5&recv=8&lost=0&retrans=0&sent_bytes=3176&recv_bytes=1168&delivery_rate=7425641&cwnd=244&unsent_bytes=0&cid=e58231b9e54a429d&ts=36&x=0"
api.btloader.com/country?o=5102648370397184
130.211.23.194200 OK 37 B URL GET api.btloader.com/country?o=5102648370397184
IP 130.211.23.194:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectapi.btloader.com
FingerprintAC:B3:68:98:A1:F0:B7:DF:E9:0D:C7:4C:CF:31:EE:C9:35:D6:68:80
ValidityTue, 28 Jan 2025 02:22:40 GMT - Mon, 28 Apr 2025 03:16:34 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 184e332312061d1740184beb07bef7af
f8535d5ac4207eebee8a59f4014f916ae66c151f
637e3640e1e3ff9c0a20073ffb4dee2a6f1ea584b4ac2308cc3f4a4c413d41bc
GET /country?o=5102648370397184 HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600
content-type: application/json
vary: Origin
date: Tue, 04 Mar 2025 13:11:17 GMT
content-length: 37
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.connectad.io/connectmyusers.php?
104.22.54.206200 OK 1.2 kB URL GET cdn.connectad.io/connectmyusers.php?
IP 104.22.54.206:443
Requested by https://rentry.co/623ua63r
Certificate IssuerLet's Encrypt
Subjectconnectad.io
Fingerprint6F:E7:AE:06:78:56:7F:46:09:07:DB:9C:C7:E1:58:B9:93:22:06:6D
ValiditySun, 02 Feb 2025 18:04:44 GMT - Sat, 03 May 2025 18:04:43 GMT
File type HTML document, ASCII text, with very long lines (1225), with no line terminators
Hash b63363fd215fb2ef023fbbff8202ba82
11cc673ae862fe4ae453de503a2d15147c53987e
3990f703ed8907d70d0086715ab13049375aece6aca95b2922fe9ec0c67b8e7d
GET /connectmyusers.php? HTTP/1.1
Host: cdn.connectad.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 04 Mar 2025 13:11:21 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=3600
cf-cache-status: HIT
age: 2786
last-modified: Tue, 04 Mar 2025 12:24:55 GMT
priority: u=4,i=?0
server: cloudflare
cf-ray: 91b19e757f80568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
104.26.2.16200 OK 9.1 kB IP 104.26.2.16:443
Certificate IssuerGoogle Trust Services
Subjectrentry.co
Fingerprint81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52
ValidityMon, 10 Feb 2025 01:52:48 GMT - Sun, 11 May 2025 02:52:45 GMT
File type HTML document, ASCII text, with very long lines (9661), with no line terminators
Hash d382911ba20779b8ae9c7d87bf443cb3
dd37aa914ed89c22e928f310a9d2dce940f481dc
3aa4d7829f4f1a5be9d7e2f1eb3e30c96980604ae0c463b88c12949a9ebe8416
GET /623ua63r HTTP/1.1
Host: rentry.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:15 GMT
content-type: text/html; charset=utf-8
vary: Origin, Cookie, accept-encoding
x-xss-protection: 1; mode=block
set-cookie: sessionid=j82zuz82zuqz9xjpoiwfumc9ad8hfxar; expires=Fri, 07 Mar 2025 13:11:15 GMT; HttpOnly; Max-Age=259200; Path=/; SameSite=Lax; Secure
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: Vary
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uM6LikCjjZghqOAa4d6xEjkSBdB45zePEffaiKQ2vlhufS6XMSEcoclbcoiTZXTTEZYWNonIfmg25A8YBWOjWuJM86lgSw0LcJMvHnwfR%2B0W2S7q62uVmZGPSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91b19e529af556c3-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=6585&min_rtt=505&rtt_var=11292&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3268&recv_bytes=1249&delivery_rate=2500863&cwnd=246&unsent_bytes=0&cid=68180016167ad52d&ts=104&x=0"
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
51.38.120.206200 OK 15 B URL POST onetag-sys.com/prebid-request
IP 51.38.120.206:443
Requested by https://rentry.co/623ua63r
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint26:2D:63:1A:A7:C6:41:9C:A2:F5:39:CB:C4:F2:77:55:75:D9:90:82
ValidityTue, 21 Jan 2025 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash ba3521ccf7af080a568234f8e8a12a05
7d395437fdda85c7043352a30e356d095f77b19e
e81b0645d550bb2f6da79d0d92ab1b6b7e984dfbaef4db76ebf4216bb896ef8b
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Content-Length: 1871
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://rentry.co
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
mp.4dex.io/prebid
172.64.153.78200 OK 66 B IP 172.64.153.78:443
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectmp.4dex.io
Fingerprint7A:DA:F3:B5:17:58:97:F4:74:18:FD:39:85:E2:C5:02:10:13:F8:F1
ValiditySat, 22 Feb 2025 03:17:29 GMT - Fri, 23 May 2025 04:17:25 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 11d1ae94e48460e0405bcc40b31de384
b149e18e71fde2a2a413017f2e077400fe8984f5
d747208190f9be45b2509596f8d09bba483af78f595147f1fa81defdcd9c49c0
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Content-Length: 1323
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:17 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://rentry.co
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin, Accept-Encoding
x-err: Splits. no seat with adunits, mapping rule and shaping
x-version: 3.0.0-gcp-ams
x-warn: Process Splits. all case seats filetered for: ban_bsa-zone_1700727262982-7_123456
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91b19e5bcc2c712e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
api.btloader.com/pv?tid=R9h4K7jXev-KOHIWObLL-956148358b&w=5123465689956352&o=5102648370397184&cv=2.177-1-g719a5a7&widget=false&r=false&vr=1280x1024&pageURL=https%3A%2F%2Frentry.co%2F623ua63r&sid=zLiPmoPXM-PikIRpbL6O-956148358b&pm=true&upapi=true
130.211.23.194204 No Content 0 B URL GET api.btloader.com/pv?tid=R9h4K7jXev-KOHIWObLL-956148358b&w=5123465689956352&o=5102648370397184&cv=2.177-1-g719a5a7&widget=false&r=false&vr=1280x1024&pageURL=https%3A%2F%2Frentry.co%2F623ua63r&sid=zLiPmoPXM-PikIRpbL6O-956148358b&pm=true&upapi=true
IP 130.211.23.194:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://rentry.co/623ua63r
Certificate IssuerGoogle Trust Services
Subjectapi.btloader.com
FingerprintAC:B3:68:98:A1:F0:B7:DF:E9:0D:C7:4C:CF:31:EE:C9:35:D6:68:80
ValidityTue, 28 Jan 2025 02:22:40 GMT - Mon, 28 Apr 2025 03:16:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pv?tid=R9h4K7jXev-KOHIWObLL-956148358b&w=5123465689956352&o=5102648370397184&cv=2.177-1-g719a5a7&widget=false&r=false&vr=1280x1024&pageURL=https%3A%2F%2Frentry.co%2F623ua63r&sid=zLiPmoPXM-PikIRpbL6O-956148358b&pm=true&upapi=true HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
vary: Origin
date: Tue, 04 Mar 2025 13:11:17 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ssp.disqus.com/redirectuser?r=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D346%26uid%3DBUYERUID
54.243.193.130204 No Content 0 B URL GET ssp.disqus.com/redirectuser?r=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D346%26uid%3DBUYERUID
IP 54.243.193.130:443
Requested by https://public.servenobid.com/sync.html
Certificate IssuerAmazon
Subjectssp.disqus.com
FingerprintB7:96:BD:15:65:56:33:FE:02:3A:A7:8A:57:8F:70:4E:6A:F5:33:36
ValidityThu, 19 Sep 2024 00:00:00 GMT - Fri, 17 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirectuser?r=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D346%26uid%3DBUYERUID HTTP/1.1
Host: ssp.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://public.servenobid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 04 Mar 2025 13:11:22 GMT
cache-control: no-store
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
ads.servenobid.com/adreq?cb=5341
143.244.197.139200 OK 92 B URL POST ads.servenobid.com/adreq?cb=5341
IP 143.244.197.139:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://rentry.co/623ua63r
Certificate IssuerLet's Encrypt
Subjectads.servenobid.com
FingerprintF4:7E:C3:1C:7A:23:C7:7B:99:0A:D8:29:99:4F:44:0C:9A:B3:16:5B
ValidityThu, 27 Feb 2025 20:00:41 GMT - Wed, 28 May 2025 20:00:40 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash e9b84c03062471ff6c7b91fe7efdb2aa
d6bfce017d4efe5cb4436c8319bf997d055105bd
e2dbba9994a7fe7f56194281a5b5386552140199beea9f175546d7d796e46434
POST /adreq?cb=5341 HTTP/1.1
Host: ads.servenobid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentry.co/
content-type: text/plain
Content-Length: 849
Origin: https://rentry.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Mar 2025 13:11:17 GMT
content-type: application/json
access-control-allow-origin: https://rentry.co
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
vary: accept-encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2