ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash f76aec436e4a09ac0168f72992464de4
b27c2ad12b9bc62e7761f39398b52434ab4f76b0
a027a7e0c828dea11becdced03e497722a9a50511aff1efef6df73542bae3f42
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 23 May 2023 05:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mrgay.com/livesmatter/holly7.10.8.d1792b2bad02c6bf9e80dcc22172b12a.js
109.206.176.50200 OK 176 kB URL GET HTTP/2 mrgay.com/livesmatter/holly7.10.8.d1792b2bad02c6bf9e80dcc22172b12a.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Size 176 kB (175617 bytes)
Hash 9c291fc4a7eec01122d9ef196b4af34f
6a428cc1040c47bae125761150fecfb15b0614da
ab962550eb04e093bdda972c502529d6d394fcd8d2ca9b0faef08f9eb813eb82
GET /livesmatter/holly7.10.8.d1792b2bad02c6bf9e80dcc22172b12a.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:08 GMT
content-type: application/javascript
last-modified: Mon, 15 May 2023 12:02:44 GMT
vary: Accept-Encoding
etag: W/"64621f64-4c16f"
expires: Thu, 22 Jun 2023 05:44:08 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash f76aec436e4a09ac0168f72992464de4
b27c2ad12b9bc62e7761f39398b52434ab4f76b0
a027a7e0c828dea11becdced03e497722a9a50511aff1efef6df73542bae3f42
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 23 May 2023 05:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mrgay.com/static/images/favicons/apple-touch-icon.png
109.206.176.50200 OK 6.4 kB URL GET HTTP/2 mrgay.com/static/images/favicons/apple-touch-icon.png
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 186bd11e6b8481871c42087c3a8567da
658a8df1bf20c4ccd9546870d106a116674fdfbd
1f3990b4dd7c7d3ab89723cff39267b2d42b41fe6cf89bf17a6516982e27f2db
GET /static/images/favicons/apple-touch-icon.png HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/png
content-length: 6367
last-modified: Wed, 10 May 2023 10:59:24 GMT
etag: "645b790c-18df"
expires: Tue, 23 May 2023 06:14:09 GMT
cache-control: max-age=1800, public
pragma: public
accept-ranges: bytes
X-Firefox-Spdy: h2
mrgay.com/static/images/favicons/favicon-16x16.png
109.206.176.50200 OK 898 B URL GET HTTP/2 mrgay.com/static/images/favicons/favicon-16x16.png
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 91528e124af26ec2be210daa2c811631
0736f1f88761cc33d6b2fd21a558336bc70bb9e7
b2ee3ce01d5ee9a4498c8d3de26ce85260ef715f4afbfb5979b25edf86765eac
GET /static/images/favicons/favicon-16x16.png HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/png
content-length: 898
last-modified: Wed, 10 May 2023 10:59:24 GMT
etag: "645b790c-382"
expires: Tue, 23 May 2023 06:14:09 GMT
cache-control: max-age=1800, public
pragma: public
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-213377078-5&l=dataLayer&cx=c
142.250.74.72200 OK 46 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-213377078-5&l=dataLayer&cx=c
IP 142.250.74.72:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint55:51:32:58:36:72:A1:C8:50:5E:5A:8D:CE:A5:2F:DC:D7:1E:62:03
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT
File type ASCII text, with very long lines (2271)
Hash 184d1e47148c86da30515f109f4fa77a
f6c5fe5e7c4c554d7971fe01b86343f0047ab6d0
08077bbead31b22d4d58990d82188defe50c789c8f4538b59ae880dee5c5515a
GET /gtag/js?id=UA-213377078-5&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 23 May 2023 05:44:09 GMT
expires: Tue, 23 May 2023 05:44:09 GMT
cache-control: private, max-age=900
last-modified: Tue, 23 May 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46542
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
mgim1.m3pd.com/media/tn/10370629_1.jpg
45.133.44.24200 OK 20 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10370629_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash e1032da4ca53ddbecb5a9748d825bfed
fab889e8ab3a9062f1f823fa16a6c264ffa0a134
72e0ff95c34530cd9c464b0fabdc3145cc8dad8df8287a892e3b067bf145a64f
GET /media/tn/10370629_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 19626
server: nginx/1.21.0
last-modified: Wed, 26 Apr 2023 02:29:18 GMT
etag: "64488c7e-4caa"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10345241_1.jpg
45.133.44.24200 OK 17 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10345241_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash aea8fabfa2e1b76967b520e8d901dde9
409e38fe68f83889085fa13f14ee0f1da37196ae
21ff290fcb1d004962c691071d3c3c04eed939f38784a8e8b7c14f1da3636c7f
GET /media/tn/10345241_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 16665
server: nginx/1.21.0
last-modified: Thu, 02 Feb 2023 21:13:28 GMT
etag: "63dc2778-4119"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10364745_1.jpg
45.133.44.24200 OK 23 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10364745_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 287909c8a58bb7341c2852036dd9cfa6
9f87799f5ff2f61759b2ddf885b617b96c386a3d
392b9f8f7d16f15abfdda6702b82cf4e30c175523e4b0ca6998e6be44d99dfe4
GET /media/tn/10364745_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 23114
server: nginx/1.21.0
last-modified: Fri, 07 Apr 2023 03:08:04 GMT
etag: "642f8914-5a4a"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10277243_1.jpg
45.133.44.24200 OK 24 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10277243_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 54a1973e4d65dc8dcd7aa2867dff04bb
1e4a53cf41f0797d365dbc531bee685e69a71457
d37b991d5ef8c805d8ac17994ce123222d5734188a091ccefde81e349a9b78fa
GET /media/tn/10277243_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 23566
server: nginx/1.21.0
last-modified: Wed, 19 Oct 2022 14:57:14 GMT
etag: "6350104a-5c0e"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10271091_1.jpg
45.133.44.24200 OK 28 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10271091_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash e8f8abb007f5238dfb7e486bae27dc2e
d11b6eae0aa33489bf95a5581ad606b09f81d28b
d55d7ff3901c00c275905375ee2935b4e85e15579d19cbfa092ba5ca0b057d28
GET /media/tn/10271091_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 27785
server: nginx/1.21.0
last-modified: Mon, 03 Oct 2022 15:59:10 GMT
etag: "633b06ce-6c89"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10022473_1.jpg
45.133.44.24200 OK 26 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10022473_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 6ed24a5fb6c85dacb5737b0d542dae7c
168ddf811739ed4fcc9f53890b2d9b7c8c7a31b1
ec793ecb182ab3ca868581b2b5753cbbcd97c5e9e0155876e10ad3315553d4c5
GET /media/tn/10022473_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 25724
server: nginx/1.21.0
last-modified: Mon, 20 Dec 2021 18:50:09 GMT
etag: "61c0d061-647c"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10106183_1.jpg
45.133.44.24200 OK 22 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10106183_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 1a3dcf66c17bc567c11bf2fcf8559c85
4285ab2395964f6093879003c938dfb044504fbc
eba8049af48ce295d5b83e18d8c6f306617f2b20a94e1fd64908e38e6f3cd391
GET /media/tn/10106183_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 22136
server: nginx/1.21.0
last-modified: Mon, 14 Feb 2022 05:51:10 GMT
etag: "6209edce-5678"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10050849_1.jpg
45.133.44.24200 OK 22 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10050849_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 8e8dbdb26f1df6979a0ede936a93967f
8ece90d9399665f08b83770681f8615c3b4272f4
29e2b42da0e39f3b93b5b98d743736c9243292f1fe22bfe1d34cfe9ac6580119
GET /media/tn/10050849_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 22032
server: nginx/1.21.0
last-modified: Tue, 04 Jan 2022 11:33:10 GMT
etag: "61d43076-5610"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10272755_1.jpg
45.133.44.24200 OK 17 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10272755_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 914451aab5965917716c16c68967f15c
d324f0e0014e6f579d8676afa02f96183c6c1e7d
b44d1e3072493458a9997b3748b2a6e63fe292fe20785a9c1b928cce2bb489c1
GET /media/tn/10272755_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 17089
server: nginx/1.21.0
last-modified: Tue, 04 Oct 2022 03:53:45 GMT
etag: "633bae49-42c1"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10080843_1.jpg
45.133.44.24200 OK 26 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10080843_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 2f3b8dd149852e82e274268640b34850
86558026c6a471a47c9ce536d1298e73b3d8134b
dcef69a9b591ffdf647918f19354ae6d656e97f6eb69da67dda1d77deab214ad
GET /media/tn/10080843_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 25728
server: nginx/1.21.0
last-modified: Tue, 18 Jan 2022 08:56:48 GMT
etag: "61e680d0-6480"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10037467_1.jpg
45.133.44.24200 OK 23 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10037467_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 073209e07aa61dc95ee70ea8036e49b2
a052ae966ecfb15c43df3b3a7a4ac2518a5ce348
fd3a929f3f50046e6fec3c36fb48d336495cb11e803d2626acf4b0e7ae11463f
GET /media/tn/10037467_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 23399
server: nginx/1.21.0
last-modified: Wed, 29 Dec 2021 13:30:32 GMT
etag: "61cc62f8-5b67"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10325217_1.jpg
45.133.44.24200 OK 19 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10325217_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash f59adf23e9c2176ec1a0033bfa5bd6cd
7f8a661a99dfc7fb66a5b32015805b501671cb91
be0630dfc23f518ea20c932147398e90ce73a25cb361dbfa001f7251d905a645
GET /media/tn/10325217_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 19203
server: nginx/1.21.0
last-modified: Mon, 09 Jan 2023 19:10:17 GMT
etag: "63bc6699-4b03"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mrgay.com/dgifasawjgj/yrbqjavk.js
109.206.176.50200 OK 104 kB URL GET HTTP/2 mrgay.com/dgifasawjgj/yrbqjavk.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Size 104 kB (104509 bytes)
Hash 6949804b7c9540128ca792f8ffb2e890
2c74dc26379acf105a56bde558c81530acb8d9d8
6046ff176dab91b2cf4fdd12370203d52e45839ec22fb737e0f0de3714deca3f
GET /dgifasawjgj/yrbqjavk.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:08 GMT
content-type: application/javascript
last-modified: Tue, 23 May 2023 05:02:44 GMT
vary: Accept-Encoding
etag: W/"646c48f4-456b7"
expires: Thu, 22 Jun 2023 05:44:08 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10175567_1.jpg
45.133.44.24200 OK 18 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10175567_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash cbe416b8ddcd1af54996cddbce65e9b0
77b51d18f082ab7dc44708967677db7aa8c520c0
c5db0c1eb0c81462b1e889b848230428b5df8bc591d7ee4831c03fca072c7a8e
GET /media/tn/10175567_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 18369
server: nginx/1.21.0
last-modified: Sun, 01 May 2022 17:52:12 GMT
etag: "626ec8cc-47c1"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10370601_1.jpg
45.133.44.24200 OK 23 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10370601_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash e74de253b0943c67d76e6a22d3df5e96
8661ffb814bf0fe1a2ccdc3b454da0583433d5fe
e871a45534202d903205bb2c8c969d40e184f6e67034cfc758604b3583b31248
GET /media/tn/10370601_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 23362
server: nginx/1.21.0
last-modified: Wed, 26 Apr 2023 02:50:10 GMT
etag: "64489162-5b42"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10370625_1.jpg
45.133.44.24200 OK 22 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10370625_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 47710c56a73f4fd75ad45201fe838dd5
3598ec8db0884395cc5e4439e217d4ab1cb207d1
ccef799a043c5795f90c13b760135ce4b943cce691148d515b94d1dc493e6d21
GET /media/tn/10370625_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 22029
server: nginx/1.21.0
last-modified: Wed, 26 Apr 2023 02:35:18 GMT
etag: "64488de6-560d"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
metricswpsh.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxODAzNDA2MjI0NjYwODMxODAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjQ5LjAiLCJ0YWdfaWQiOjE0NzYwLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjozLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuODMsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MCwidXNlcl9rZXl3b3JkcyI6Ik1yR2F5LmNvbSUyQ0dheSUyQ1Bvcm4lMkNWaWRlb3MlMkNGcmVlJTJDSEQlMkNPbmxpbmUlMkNHYXklMkNzZXglMkNHYXklMkNwb3JuJTJDR2F5JTJDWFhYJTJDR2F5JTJDZnVjayUyQ1R3aW5rJTJDc2V4JTJDVHdpbmslMkNwb3JuJTJDVHdpbmslMkNYWFglMkNUd2luayUyQ2Z1Y2slMkNCZWFycyUyQ3NleCUyQ0JlYXJzJTJDcG9ybiUyQ0JlYXJzJTJDWFhYJTJDQmVhcnMlMkNmdWNrJTJDTWFsZSUyQ3NleCUyQ01hbGUlMkNwb3JuJTJDTWFsZSUyQ1hYWCUyQ01hbGUlMkNmdWNrJTJDT25seSUyQ2hlcmUlMkN5b3UlMkNjYW4lMkNmaW5kJTJDcmFyZSUyQ2dheSUyQ3Bvcm4lMkN2aWRlb3MlMkN0aGF0JTJDaXMlMkNzaW1wbHklMkNub3QlMkNhdmFpbGFibGUlMkNvbiUyQ290aGVyJTJDc2l0ZXMlMkNTZWxlY3RlZCUyQ0hEJTJDbWFsZSUyQ3NleCUyQ21vdmllcyUyQ01yR2F5LmNvbSEifQ==
88.198.200.36200 OK 0 B URL GET HTTP/2 metricswpsh.com/in/track?data=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
IP 88.198.200.36:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxODAzNDA2MjI0NjYwODMxODAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjQ5LjAiLCJ0YWdfaWQiOjE0NzYwLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjozLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuODMsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MCwidXNlcl9rZXl3b3JkcyI6Ik1yR2F5LmNvbSUyQ0dheSUyQ1Bvcm4lMkNWaWRlb3MlMkNGcmVlJTJDSEQlMkNPbmxpbmUlMkNHYXklMkNzZXglMkNHYXklMkNwb3JuJTJDR2F5JTJDWFhYJTJDR2F5JTJDZnVjayUyQ1R3aW5rJTJDc2V4JTJDVHdpbmslMkNwb3JuJTJDVHdpbmslMkNYWFglMkNUd2luayUyQ2Z1Y2slMkNCZWFycyUyQ3NleCUyQ0JlYXJzJTJDcG9ybiUyQ0JlYXJzJTJDWFhYJTJDQmVhcnMlMkNmdWNrJTJDTWFsZSUyQ3NleCUyQ01hbGUlMkNwb3JuJTJDTWFsZSUyQ1hYWCUyQ01hbGUlMkNmdWNrJTJDT25seSUyQ2hlcmUlMkN5b3UlMkNjYW4lMkNmaW5kJTJDcmFyZSUyQ2dheSUyQ3Bvcm4lMkN2aWRlb3MlMkN0aGF0JTJDaXMlMkNzaW1wbHklMkNub3QlMkNhdmFpbGFibGUlMkNvbiUyQ290aGVyJTJDc2l0ZXMlMkNTZWxlY3RlZCUyQ0hEJTJDbWFsZSUyQ3NleCUyQ21vdmllcyUyQ01yR2F5LmNvbSEifQ== HTTP/1.1
Host: metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 23 May 2023 05:44:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=14760
157.90.84.242204 No Content 0 B URL OPTIONS HTTP/1.1 fp.metricswpsh.com/fp?tag_id=14760
IP 157.90.84.242:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=14760 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://mrgay.com/
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Tue, 23 May 2023 05:44:09 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://mrgay.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
vast.yomeno.xyz/prepare
109.206.181.2204 No Content 0 B IP 109.206.181.2:443
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
FingerprintED:08:F2:F5:23:3A:AC:50:E1:71:EA:1F:F5:D7:B2:CE:79:58:D2:0A
ValidityWed, 29 Mar 2023 03:07:33 GMT - Tue, 27 Jun 2023 03:07:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://mrgay.com/
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Tue, 23 May 2023 05:44:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://mrgay.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
109.206.181.2204 No Content 0 B IP 109.206.181.2:443
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
FingerprintED:08:F2:F5:23:3A:AC:50:E1:71:EA:1F:F5:D7:B2:CE:79:58:D2:0A
ValidityWed, 29 Mar 2023 03:07:33 GMT - Tue, 27 Jun 2023 03:07:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 993
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Tue, 23 May 2023 05:44:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://mrgay.com
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=14760
157.90.84.242204 No Content 27 B URL OPTIONS HTTP/1.1 fp.metricswpsh.com/fp?tag_id=14760
IP 157.90.84.242:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
File type JSON data\012- , ASCII text
Hash c4bea7951aaa542768f63f72d171ff83
7f57b3ce5d3a9bb0a15c32b34745b0214710e185
d4fbb24457a99cbf28127e8a416979ca0f2ab97c64a59b8d38760c40d4934756
POST /fp?tag_id=14760 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 23168
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 23 May 2023 05:44:10 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 27
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://mrgay.com
Set-Cookie: id=4263722142907236234; Expires=Wed, 22 May 2024 05:44:10 GMT; Secure; SameSite=None
Vary: Origin
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 1.0 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1376)
Hash fabfbfeb1048f298e6d86de2b23a0758
fbf2f89bac5132a673e2f39cd022fbffd13461ac
9fcf3452637b7b0c017e3fc38fddf18bb82ebad02c0babe732c19ae4e9361d3c
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 23 May 2023 05:44:10 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=6248165325817434922&pid=0&site=28115&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-0&site_id=0&spot_id=28115&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003477&placement_type_id=8&skin_test=&verify_hash=&score=99.06992345560512&ml=&tag_ab=c&v2=0&ttl=&space_id=28115&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28115%26source%3D0%26idzone%3D4515100%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28115%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28115%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.06992345560512%26bf%3D0.003477&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003477
159.69.163.6302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=6248165325817434922&pid=0&site=28115&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-0&site_id=0&spot_id=28115&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003477&placement_type_id=8&skin_test=&verify_hash=&score=99.06992345560512&ml=&tag_ab=c&v2=0&ttl=&space_id=28115&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28115%26source%3D0%26idzone%3D4515100%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28115%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28115%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.06992345560512%26bf%3D0.003477&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003477
IP 159.69.163.6:443
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=6248165325817434922&pid=0&site=28115&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-0&site_id=0&spot_id=28115&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003477&placement_type_id=8&skin_test=&verify_hash=&score=99.06992345560512&ml=&tag_ab=c&v2=0&ttl=&space_id=28115&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28115%26source%3D0%26idzone%3D4515100%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28115%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28115%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.06992345560512%26bf%3D0.003477&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003477 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 23 May 2023 05:44:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=28115&source=0&idzone=4515100&w=300&h=250&mo=&ve=&site_id=28115&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28115&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.06992345560512&bf=0.003477
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImMiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTQsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwOTIsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNCIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODQ4MjA2NDk3Nzl9fQ==
159.69.163.6 1.0 kB URL GET rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1374)
Hash fcd59c2c6dd83698e8a7f3854edd8180
9321bbcd585d91bae8d39ad5c91c3516a732873a
19787eefbba80cd680a8a05403336dbeffb79f3a6ac559f923726cf9df6f19af
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImMiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTQsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwOTIsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNCIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODQ4MjA2NDk3Nzl9fQ== HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 23 May 2023 05:44:10 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=2879131122298626847&pid=0&site=28113&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-9&site_id=0&spot_id=28113&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003282&placement_type_id=8&skin_test=&verify_hash=&score=99.0695783359587&ml=&tag_ab=c&v2=0&ttl=&space_id=28113&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28113%26source%3D0%26idzone%3D4515090%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28113%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28113%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.0695783359587%26bf%3D0.003282&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003282
159.69.163.6302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=2879131122298626847&pid=0&site=28113&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-9&site_id=0&spot_id=28113&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003282&placement_type_id=8&skin_test=&verify_hash=&score=99.0695783359587&ml=&tag_ab=c&v2=0&ttl=&space_id=28113&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28113%26source%3D0%26idzone%3D4515090%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28113%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28113%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.0695783359587%26bf%3D0.003282&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003282
IP 159.69.163.6:443
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=2879131122298626847&pid=0&site=28113&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-9&site_id=0&spot_id=28113&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003282&placement_type_id=8&skin_test=&verify_hash=&score=99.0695783359587&ml=&tag_ab=c&v2=0&ttl=&space_id=28113&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28113%26source%3D0%26idzone%3D4515090%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28113%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28113%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.0695783359587%26bf%3D0.003282&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003282 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 23 May 2023 05:44:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=28113&source=0&idzone=4515090&w=300&h=250&mo=&ve=&site_id=28113&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28113&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0695783359587&bf=0.003282
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 1.5 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type gzip compressed data, from Unix\012- data
Hash 7a46d00b0d5d76d550e1afd54f557477
69a2c15b6064a636b337d89eb96eef9820be6419
bf3e8c4c8975bb492696e1df0bee0b199d7713406aa726edbccf4da68103575a
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 23 May 2023 05:44:10 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=28112&source=0&idzone=4515084&w=300&h=250&mo=&ve=&site_id=28112&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28112&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0700078367991&bf=0.003301
109.206.161.16302 Found 0 B URL GET HTTP/2 btds.zog.link/in/912/?sid=28112&source=0&idzone=4515084&w=300&h=250&mo=&ve=&site_id=28112&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28112&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0700078367991&bf=0.003301
IP 109.206.161.16:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint25:A7:09:C3:3B:F3:B5:CA:2C:EB:6A:A7:27:25:1A:40:90:11:88:BD
ValidityTue, 28 Mar 2023 03:03:12 GMT - Mon, 26 Jun 2023 03:03:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=28112&source=0&idzone=4515084&w=300&h=250&mo=&ve=&site_id=28112&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28112&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0700078367991&bf=0.003301 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Tue, 23 May 2023 05:44:10 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://12007250.pix-cdn.org/a/pjexo.html?idzone=4515084&w=300&h=250&ad_sub=0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=28114&source=0&idzone=4515092&w=300&h=250&mo=&ve=&site_id=28114&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28114&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0675677147807&bf=0.003317
109.206.161.16302 Found 0 B URL GET HTTP/2 btds.zog.link/in/912/?sid=28114&source=0&idzone=4515092&w=300&h=250&mo=&ve=&site_id=28114&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28114&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0675677147807&bf=0.003317
IP 109.206.161.16:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint25:A7:09:C3:3B:F3:B5:CA:2C:EB:6A:A7:27:25:1A:40:90:11:88:BD
ValidityTue, 28 Mar 2023 03:03:12 GMT - Mon, 26 Jun 2023 03:03:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=28114&source=0&idzone=4515092&w=300&h=250&mo=&ve=&site_id=28114&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28114&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0675677147807&bf=0.003317 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Tue, 23 May 2023 05:44:10 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://twinrdack.com/link.engine?z=57160&guid=f0b12bf0-fe63-4f6b-9a84-0959a8912652&tid=0&kw=Gay,
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=28115&source=0&idzone=4515100&w=300&h=250&mo=&ve=&site_id=28115&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28115&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.06992345560512&bf=0.003477
109.206.161.16302 Found 0 B URL GET HTTP/2 btds.zog.link/in/912/?sid=28115&source=0&idzone=4515100&w=300&h=250&mo=&ve=&site_id=28115&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28115&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.06992345560512&bf=0.003477
IP 109.206.161.16:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint25:A7:09:C3:3B:F3:B5:CA:2C:EB:6A:A7:27:25:1A:40:90:11:88:BD
ValidityTue, 28 Mar 2023 03:03:12 GMT - Mon, 26 Jun 2023 03:03:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=28115&source=0&idzone=4515100&w=300&h=250&mo=&ve=&site_id=28115&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28115&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.06992345560512&bf=0.003477 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Tue, 23 May 2023 05:44:10 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://12007250.pix-cdn.org/a/pjexo.html?idzone=4515100&w=300&h=250&ad_sub=0
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=28113&source=0&idzone=4515090&w=300&h=250&mo=&ve=&site_id=28113&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28113&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0695783359587&bf=0.003282
109.206.161.16302 Found 0 B URL GET HTTP/2 btds.zog.link/in/912/?sid=28113&source=0&idzone=4515090&w=300&h=250&mo=&ve=&site_id=28113&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28113&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0695783359587&bf=0.003282
IP 109.206.161.16:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectbtds.zog.link
Fingerprint25:A7:09:C3:3B:F3:B5:CA:2C:EB:6A:A7:27:25:1A:40:90:11:88:BD
ValidityTue, 28 Mar 2023 03:03:12 GMT - Mon, 26 Jun 2023 03:03:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=28113&source=0&idzone=4515090&w=300&h=250&mo=&ve=&site_id=28113&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28113&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0695783359587&bf=0.003282 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Tue, 23 May 2023 05:44:10 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://12007250.pix-cdn.org/a/pjexo.html?idzone=4515090&w=300&h=250&ad_sub=0
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Wed, 24 May 2023 05:44:10 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
twinrdack.com/link.engine?z=57160&guid=f0b12bf0-fe63-4f6b-9a84-0959a8912652&tid=0&kw=Gay,
172.66.40.122302 Found 1.5 kB URL GET HTTP/2 twinrdack.com/link.engine?z=57160&guid=f0b12bf0-fe63-4f6b-9a84-0959a8912652&tid=0&kw=Gay,
IP 172.66.40.122:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintFC:1F:70:D7:44:D9:0B:30:AC:4E:F1:C4:19:A7:87:3B:EA:6E:B1:CE
ValidityTue, 15 Nov 2022 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 6210f27ecf7376edbcfc9999798bc47b
0d67cabb78cc6f8213c53a6ffce813f2625412f4
bea4c864f91a67cb3ea9aefc328eddf49811debbb533499ad6e73db315f82a4c
GET /link.engine?z=57160&guid=f0b12bf0-fe63-4f6b-9a84-0959a8912652&tid=0&kw=Gay, HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 23 May 2023 05:44:11 GMT
content-type: text/html; charset=utf-8
location: https://twinrdack.com/Redirect.eng?MediaSegmentId=40566&dcid=3_ctx_af444071-4137-4eed-a7b1-2e5b51a22e45&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=vzdJURB3dQ72Ax3HtarQYrWfK1BQcHA6A4TPvo58yixZf15SG_p8r6g8jEImUU1e4HsLUvgqPKW3xpHipaAqMxwxqKe1Uw8Bt1V1i0mx6u_k9uMEXDTurGMK7hAPk_BsVu8NY9OhPQGtbJfQeDHkcyE6f46bH362nqCidjhalsITAfgObWD0uKFCq8ERlQV2bNDPfvpRmWn38uH9A0a_cyg2_pnysj0CgQ2ATXd_wKFxGm07_9NDYa-sf_SAHTs6FFxk7sPXdra9A1yaBORIj8i_3wbORawHpt-6ZqSiZIha3Zi5B2prvWqJ9jW2Go0MQJG3neMrTtuLB1zK9mHiyaPkrXj5RhDzcdOx9A28LVH9eMYTzeBKnra4Or7OCvNXhfijbRpircXqcyipfaFfuAYZzb8R-1saTJ2H6SUZFmuNmbBCdGjE6mfiW9-U0uTV0dccKDzlc0bFfX8goe-LDhF6Pyah90_bxOrG8op2jE7IssDGFIqN-jtFz7QswCEvJh3wjjW6Sj-AP43lz4vNzDSQ6O0xxF8-t-o9umf0xp3qyrfVTbk-Byy_olVGPF16ExijqziOkg3vzXNjAYu23V3slNtdZLP5SGtplhm-npFdld6c5-m_UJ9D4yX3L2xzXKraYRyRFp9mpnTjIainy-EZUzwwQouLQtoM_QfevGHFZjvoe4bjEKQSQ2nFT87OIYs0KTHdKx79UtIDEyFV4GdclBFRFSGqJ7wU-_mnU1HGDw2ewiJ4lXbcaKP9Qq8JSFaVJnsl9DCCspOT-TlMGZApSTw9qbDSKZflXrq7_oR31bISfHlsBL8PvsvbUr6tY5-3OWTYOAjqbCXe-jQukebs6QFftLIPolq6Ly6i3VdZtaOHVax2v_PK3MO1wnAFsdMyuk_PyTNtPmEzssozPalzdACnNuRThcfZHgpv2EBdaeX8mYkwtGstvaDG_9HkRk0-GpFBQNptcdAGteJJVnEsRqMSCxzT50nW6fgEDXk1&kw=Gay&mw=300&mh=250
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=ad2678aa-fe9e-45f2-8d11-93e8f1672d12; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure
ISSH=6B71F4; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
IPLH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Tue, 23-May-2023 09:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14245":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14245]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UslLRxnvPYw1atFdFOQmDtCqYdKtYB3fvkzHrg686%2F91USAz0ladmP8isZtykpoyFaUrLkJxRLcVwbs%2BCx2f8iFadOwEWCtbDHEX7kjm3isVXNzpjURed1b%2BFKUwOAo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cbafc4c0861b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
twinrdack.com/mediahosting.engine?MediaId=71381&AId=11491&CId=29583&PId=65072&SiteId=14245&ZoneId=57160&VolumeMetricId=227e0277-c216-43d2-99d6-d33ac2fe036b&PassBackUrl=&res=&dcid=3_ctx_af444071-4137-4eed-a7b1-2e5b51a22e45&cu=&kw=Gay&mw=300&mh=250
172.66.40.122200 OK 407 B URL GET HTTP/3 twinrdack.com/mediahosting.engine?MediaId=71381&AId=11491&CId=29583&PId=65072&SiteId=14245&ZoneId=57160&VolumeMetricId=227e0277-c216-43d2-99d6-d33ac2fe036b&PassBackUrl=&res=&dcid=3_ctx_af444071-4137-4eed-a7b1-2e5b51a22e45&cu=&kw=Gay&mw=300&mh=250
IP 172.66.40.122:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintFC:1F:70:D7:44:D9:0B:30:AC:4E:F1:C4:19:A7:87:3B:EA:6E:B1:CE
ValidityTue, 15 Nov 2022 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash a5a9cd569484a3cefbc4501c4529f213
a16f124e024de15f94c3d168a7509d25f01c1eef
2da0a3384c6af20b2019c3310aa374036747ade1170556f303a36d58e17cfae7
GET /mediahosting.engine?MediaId=71381&AId=11491&CId=29583&PId=65072&SiteId=14245&ZoneId=57160&VolumeMetricId=227e0277-c216-43d2-99d6-d33ac2fe036b&PassBackUrl=&res=&dcid=3_ctx_af444071-4137-4eed-a7b1-2e5b51a22e45&cu=&kw=Gay&mw=300&mh=250 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Cookie: IKSR={}; INF_DFL8=false; IUID=ad2678aa-fe9e-45f2-8d11-93e8f1672d12; ISSH=6B71F4; VMI=227e0277-c216-43d2-99d6-d33ac2fe036b; IPLH=#{"65072":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; IPLH_Q=#[65072]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{"57160":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; IZH_Q=#[57160]; IMCH=#{}; IMCH_Q=#[]; IMH=#{"71381":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; IMH_Q=#[71381]; ISH=#{"14245":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; ISH_Q=#[14245]; ISPH=#{"14245":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; ISPH_Q=#[14245]; ICH=#{"29583":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; ICH_Q=#[29583]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 May 2023 05:44:11 GMT
content-type: text/html; charset=utf-8
content-length: 407
cache-control: private, no-transform
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=ad2678aa-fe9e-45f2-8d11-93e8f1672d12; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure
ISSH=6B71F4; path=/; SameSite=None; secure
VMI=227e0277-c216-43d2-99d6-d33ac2fe036b; path=/; SameSite=None; secure
IPLH=#{"65072":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[65072]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Tue, 23-May-2023 09:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"57160":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[57160]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"71381":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[71381]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14245":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14245]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"14245":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[14245]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"29583":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[29583]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=49RubtTfUgsy6lK23tZeIfun%2B3zfIW81xOouLP427gjkhaVe2rTkwHuWDP6zEfNC%2BVWnNm1lNmLONAD9sadOMCOn55IulXThdr3JZr4kKMIIFqIy8e4Ior07veheBuY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cbafc4ff82b0b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
static.goasrv.com/data/creatives/1164/37936.mp4
217.22.19.195206 Partial Content 892 kB URL GET HTTP/2 static.goasrv.com/data/creatives/1164/37936.mp4
IP 217.22.19.195:443
Requested by https://go.goaserv.com/banner.go?spaceid=1195888&sid2=9dae600d-d371-4a30-a33a-504eeecc9b5d&keywords=
Certificate IssuerLet's Encrypt
Subjectstatic.goasrv.com
Fingerprint2B:EC:08:04:CB:A9:55:48:4E:FD:27:8C:8E:20:A8:68:0D:9E:76:AC
ValidityThu, 06 Apr 2023 18:44:11 GMT - Wed, 05 Jul 2023 18:44:10 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 892 kB (892480 bytes)
Hash 8a8f1276b92d0f540d39fcd30f478529
ce57fd8c47fd78054073db368a42f25f9f3bbf83
3a5b39936d6912dd94d00c14d8c74e888db8a17134f250931c793a0b7f02ef89
GET /data/creatives/1164/37936.mp4 HTTP/1.1
Host: static.goasrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://go.goaserv.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx
date: Tue, 23 May 2023 05:44:12 GMT
content-type: video/mp4
content-length: 892480
last-modified: Mon, 23 Jan 2023 13:53:05 GMT
etag: "63ce9141-d9e40"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-backend-server: nl2-static-225
content-range: bytes 0-892479/892480
X-Firefox-Spdy: h2
twinrdack.com/Redirect.eng?MediaSegmentId=40566&dcid=3_ctx_af444071-4137-4eed-a7b1-2e5b51a22e45&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=vzdJURB3dQ72Ax3HtarQYrWfK1BQcHA6A4TPvo58yixZf15SG_p8r6g8jEImUU1e4HsLUvgqPKW3xpHipaAqMxwxqKe1Uw8Bt1V1i0mx6u_k9uMEXDTurGMK7hAPk_BsVu8NY9OhPQGtbJfQeDHkcyE6f46bH362nqCidjhalsITAfgObWD0uKFCq8ERlQV2bNDPfvpRmWn38uH9A0a_cyg2_pnysj0CgQ2ATXd_wKFxGm07_9NDYa-sf_SAHTs6FFxk7sPXdra9A1yaBORIj8i_3wbORawHpt-6ZqSiZIha3Zi5B2prvWqJ9jW2Go0MQJG3neMrTtuLB1zK9mHiyaPkrXj5RhDzcdOx9A28LVH9eMYTzeBKnra4Or7OCvNXhfijbRpircXqcyipfaFfuAYZzb8R-1saTJ2H6SUZFmuNmbBCdGjE6mfiW9-U0uTV0dccKDzlc0bFfX8goe-LDhF6Pyah90_bxOrG8op2jE7IssDGFIqN-jtFz7QswCEvJh3wjjW6Sj-AP43lz4vNzDSQ6O0xxF8-t-o9umf0xp3qyrfVTbk-Byy_olVGPF16ExijqziOkg3vzXNjAYu23V3slNtdZLP5SGtplhm-npFdld6c5-m_UJ9D4yX3L2xzXKraYRyRFp9mpnTjIainy-EZUzwwQouLQtoM_QfevGHFZjvoe4bjEKQSQ2nFT87OIYs0KTHdKx79UtIDEyFV4GdclBFRFSGqJ7wU-_mnU1HGDw2ewiJ4lXbcaKP9Qq8JSFaVJnsl9DCCspOT-TlMGZApSTw9qbDSKZflXrq7_oR31bISfHlsBL8PvsvbUr6tY5-3OWTYOAjqbCXe-jQukebs6QFftLIPolq6Ly6i3VdZtaOHVax2v_PK3MO1wnAFsdMyuk_PyTNtPmEzssozPalzdACnNuRThcfZHgpv2EBdaeX8mYkwtGstvaDG_9HkRk0-GpFBQNptcdAGteJJVnEsRqMSCxzT50nW6fgEDXk1&kw=Gay&mw=300&mh=250
172.66.40.122302 Found 407 B URL GET HTTP/2 twinrdack.com/Redirect.eng?MediaSegmentId=40566&dcid=3_ctx_af444071-4137-4eed-a7b1-2e5b51a22e45&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=vzdJURB3dQ72Ax3HtarQYrWfK1BQcHA6A4TPvo58yixZf15SG_p8r6g8jEImUU1e4HsLUvgqPKW3xpHipaAqMxwxqKe1Uw8Bt1V1i0mx6u_k9uMEXDTurGMK7hAPk_BsVu8NY9OhPQGtbJfQeDHkcyE6f46bH362nqCidjhalsITAfgObWD0uKFCq8ERlQV2bNDPfvpRmWn38uH9A0a_cyg2_pnysj0CgQ2ATXd_wKFxGm07_9NDYa-sf_SAHTs6FFxk7sPXdra9A1yaBORIj8i_3wbORawHpt-6ZqSiZIha3Zi5B2prvWqJ9jW2Go0MQJG3neMrTtuLB1zK9mHiyaPkrXj5RhDzcdOx9A28LVH9eMYTzeBKnra4Or7OCvNXhfijbRpircXqcyipfaFfuAYZzb8R-1saTJ2H6SUZFmuNmbBCdGjE6mfiW9-U0uTV0dccKDzlc0bFfX8goe-LDhF6Pyah90_bxOrG8op2jE7IssDGFIqN-jtFz7QswCEvJh3wjjW6Sj-AP43lz4vNzDSQ6O0xxF8-t-o9umf0xp3qyrfVTbk-Byy_olVGPF16ExijqziOkg3vzXNjAYu23V3slNtdZLP5SGtplhm-npFdld6c5-m_UJ9D4yX3L2xzXKraYRyRFp9mpnTjIainy-EZUzwwQouLQtoM_QfevGHFZjvoe4bjEKQSQ2nFT87OIYs0KTHdKx79UtIDEyFV4GdclBFRFSGqJ7wU-_mnU1HGDw2ewiJ4lXbcaKP9Qq8JSFaVJnsl9DCCspOT-TlMGZApSTw9qbDSKZflXrq7_oR31bISfHlsBL8PvsvbUr6tY5-3OWTYOAjqbCXe-jQukebs6QFftLIPolq6Ly6i3VdZtaOHVax2v_PK3MO1wnAFsdMyuk_PyTNtPmEzssozPalzdACnNuRThcfZHgpv2EBdaeX8mYkwtGstvaDG_9HkRk0-GpFBQNptcdAGteJJVnEsRqMSCxzT50nW6fgEDXk1&kw=Gay&mw=300&mh=250
IP 172.66.40.122:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintFC:1F:70:D7:44:D9:0B:30:AC:4E:F1:C4:19:A7:87:3B:EA:6E:B1:CE
ValidityTue, 15 Nov 2022 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Redirect.eng?MediaSegmentId=40566&dcid=3_ctx_af444071-4137-4eed-a7b1-2e5b51a22e45&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=vzdJURB3dQ72Ax3HtarQYrWfK1BQcHA6A4TPvo58yixZf15SG_p8r6g8jEImUU1e4HsLUvgqPKW3xpHipaAqMxwxqKe1Uw8Bt1V1i0mx6u_k9uMEXDTurGMK7hAPk_BsVu8NY9OhPQGtbJfQeDHkcyE6f46bH362nqCidjhalsITAfgObWD0uKFCq8ERlQV2bNDPfvpRmWn38uH9A0a_cyg2_pnysj0CgQ2ATXd_wKFxGm07_9NDYa-sf_SAHTs6FFxk7sPXdra9A1yaBORIj8i_3wbORawHpt-6ZqSiZIha3Zi5B2prvWqJ9jW2Go0MQJG3neMrTtuLB1zK9mHiyaPkrXj5RhDzcdOx9A28LVH9eMYTzeBKnra4Or7OCvNXhfijbRpircXqcyipfaFfuAYZzb8R-1saTJ2H6SUZFmuNmbBCdGjE6mfiW9-U0uTV0dccKDzlc0bFfX8goe-LDhF6Pyah90_bxOrG8op2jE7IssDGFIqN-jtFz7QswCEvJh3wjjW6Sj-AP43lz4vNzDSQ6O0xxF8-t-o9umf0xp3qyrfVTbk-Byy_olVGPF16ExijqziOkg3vzXNjAYu23V3slNtdZLP5SGtplhm-npFdld6c5-m_UJ9D4yX3L2xzXKraYRyRFp9mpnTjIainy-EZUzwwQouLQtoM_QfevGHFZjvoe4bjEKQSQ2nFT87OIYs0KTHdKx79UtIDEyFV4GdclBFRFSGqJ7wU-_mnU1HGDw2ewiJ4lXbcaKP9Qq8JSFaVJnsl9DCCspOT-TlMGZApSTw9qbDSKZflXrq7_oR31bISfHlsBL8PvsvbUr6tY5-3OWTYOAjqbCXe-jQukebs6QFftLIPolq6Ly6i3VdZtaOHVax2v_PK3MO1wnAFsdMyuk_PyTNtPmEzssozPalzdACnNuRThcfZHgpv2EBdaeX8mYkwtGstvaDG_9HkRk0-GpFBQNptcdAGteJJVnEsRqMSCxzT50nW6fgEDXk1&kw=Gay&mw=300&mh=250 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Cookie: IKSR={}; INF_DFL8=false; IUID=ad2678aa-fe9e-45f2-8d11-93e8f1672d12; ISSH=6B71F4; VMI=; IPLH=#{}; IPLH_Q=#[]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{}; IZH_Q=#[]; IMCH=#{}; IMCH_Q=#[]; IMH=#{}; IMH_Q=#[]; ISH=#{"14245":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; ISH_Q=#[14245]; ISPH=#{}; ISPH_Q=#[]; ICH=#{}; ICH_Q=#[]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 23 May 2023 05:44:11 GMT
content-type: text/html; charset=utf-8
content-length: 423
location: https://twinrdack.com/mediahosting.engine?MediaId=71381&AId=11491&CId=29583&PId=65072&SiteId=14245&ZoneId=57160&VolumeMetricId=227e0277-c216-43d2-99d6-d33ac2fe036b&PassBackUrl=&res=&dcid=3_ctx_af444071-4137-4eed-a7b1-2e5b51a22e45&cu=&kw=Gay&mw=300&mh=250
cache-control: private, no-transform
access-control-allow-origin: *
p3p: CP="CAO PSA OUR IND"
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=ad2678aa-fe9e-45f2-8d11-93e8f1672d12; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure
ISSH=6B71F4; path=/; SameSite=None; secure
VMI=227e0277-c216-43d2-99d6-d33ac2fe036b; path=/; SameSite=None; secure
IPLH=#{"65072":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[65072]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Tue, 23-May-2023 09:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"57160":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[57160]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"71381":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[71381]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"14245":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[14245]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"14245":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[14245]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"29583":[{"SId":"6B71F4","D":"23/5/22T22:44:11"}]}; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[29583]; expires=Mon, 23-May-2033 05:44:11 GMT; path=/; SameSite=None; secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XeZCF%2FX2T02C%2FEup5CoaRD3PBBueu12hNfQtPFOhcWQAOtnO2E8TRJXHjzm394lGCuaCAzauNmoWw04hwpYdN2W5ofnT0XrDn3PWV2ln7%2Begk6rgyOmghdObvvvx6fs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cbafc4ebb2cb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mrgay.com/upd/20230510.105924.7032/assets/previewl1b.20210114.1.js
109.206.176.50200 OK 7.0 kB URL GET HTTP/2 mrgay.com/upd/20230510.105924.7032/assets/previewl1b.20210114.1.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type ASCII text, with very long lines (7285), with no line terminators
Hash 90cf6a69887d94f0920d87449a068127
c4dad2942f79b0dd45ca03631a69f88404b415ca
f8baf7a50927b054b0757ce1a02a64629ca610bdd89241058d1457e34131385a
GET /upd/20230510.105924.7032/assets/previewl1b.20210114.1.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:08 GMT
content-type: application/javascript
last-modified: Wed, 10 May 2023 10:59:24 GMT
vary: Accept-Encoding
etag: W/"645b790c-1b78"
expires: Thu, 22 Jun 2023 05:44:08 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/upd/20230510.110102.674687/static/js/index.js
109.206.176.50200 OK 675 kB URL GET HTTP/2 mrgay.com/upd/20230510.110102.674687/static/js/index.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
Size 675 kB (674687 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upd/20230510.110102.674687/static/js/index.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:08 GMT
content-type: application/javascript
last-modified: Wed, 10 May 2023 11:01:02 GMT
vary: Accept-Encoding
etag: W/"645b796e-a4b7f"
expires: Tue, 23 May 2023 06:14:08 GMT
cache-control: max-age=1800, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/api/json/main/14400/str.en.json
109.206.176.50200 OK 6.1 kB URL GET HTTP/2 mrgay.com/api/json/main/14400/str.en.json
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type troff or preprocessor input, ASCII text, with very long lines (7209), with no line terminators
Hash 933b5012ed4926dc75a2af58dd0e6ea2
badc0b1cf2081e9368d590253ff9a038484f4486
deee0421d37cab9b377c30ecc56ddeab797790cf193257fd29750407ff50d7f7
GET /api/json/main/14400/str.en.json HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:09 GMT
content-type: application/json
last-modified: Tue, 23 May 2023 04:08:05 GMT
vary: Accept-Encoding
etag: W/"646c3c25-1804"
expires: Tue, 23 May 2023 05:49:09 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=5320659566920158128&pid=0&site=28114&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-8&site_id=0&spot_id=28114&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003317&placement_type_id=8&skin_test=&verify_hash=&score=99.0675677147807&ml=&tag_ab=c&v2=0&ttl=&space_id=28114&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28114%26source%3D0%26idzone%3D4515092%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28114%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28114%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.0675677147807%26bf%3D0.003317&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003317
159.69.163.6302 Found 407 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=5320659566920158128&pid=0&site=28114&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-8&site_id=0&spot_id=28114&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003317&placement_type_id=8&skin_test=&verify_hash=&score=99.0675677147807&ml=&tag_ab=c&v2=0&ttl=&space_id=28114&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28114%26source%3D0%26idzone%3D4515092%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28114%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28114%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.0675677147807%26bf%3D0.003317&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003317
IP 159.69.163.6:443
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImMiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTQsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwOTIsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNCIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODQ4MjA2NDk3Nzl9fQ==
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=5320659566920158128&pid=0&site=28114&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-8&site_id=0&spot_id=28114&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003317&placement_type_id=8&skin_test=&verify_hash=&score=99.0675677147807&ml=&tag_ab=c&v2=0&ttl=&space_id=28114&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28114%26source%3D0%26idzone%3D4515092%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28114%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28114%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.0675677147807%26bf%3D0.003317&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003317 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 23 May 2023 05:44:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=28114&source=0&idzone=4515092&w=300&h=250&mo=&ve=&site_id=28114&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28114&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0675677147807&bf=0.003317
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-HYFGD9RQ6Y&l=dataLayer
142.250.74.72200 OK 229 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-HYFGD9RQ6Y&l=dataLayer
IP 142.250.74.72:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint55:51:32:58:36:72:A1:C8:50:5E:5A:8D:CE:A5:2F:DC:D7:1E:62:03
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT
File type ASCII text, with very long lines (3288)
Size 229 kB (229067 bytes)
Hash 53c4ab944cbb59fe00317aeb78419668
cd0e775a0e3ef083414ccc1e47fe371fd8067da7
242bffca684ef639d1baf345e78c6c908bfd1e82247cae1399ad6d51a38ca15d
GET /gtag/js?id=G-HYFGD9RQ6Y&l=dataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 23 May 2023 05:44:08 GMT
expires: Tue, 23 May 2023 05:44:08 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80652
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mrgay.com/dgifasawjgj/xirtonkzecqp.js
109.206.176.50200 OK 54 kB URL GET HTTP/2 mrgay.com/dgifasawjgj/xirtonkzecqp.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dgifasawjgj/xirtonkzecqp.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en; _ga_HYFGD9RQ6Y=GS1.1.1684820648.1.0.1684820648.0.0.0; _ga=GA1.1.2068799209.1684820649
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:10 GMT
content-type: application/javascript
last-modified: Tue, 23 May 2023 05:02:44 GMT
vary: Accept-Encoding
etag: W/"646c48f4-d1cb"
expires: Thu, 22 Jun 2023 05:44:10 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/dgifasawjgj/andddujayb.js
109.206.176.50200 OK 21 kB URL GET HTTP/2 mrgay.com/dgifasawjgj/andddujayb.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type ASCII text, with very long lines (21361)
Hash 8005050e729e379ff61568b54d0a2f50
8772182953b9938b45a9da25b1786b9751952781
87cee94e7cd7745cd2e9dc62523739b3799fe0a3630ea3ab73fafd9b537332a0
GET /dgifasawjgj/andddujayb.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en; _ga_HYFGD9RQ6Y=GS1.1.1684820648.1.0.1684820648.0.0.0; _ga=GA1.1.2068799209.1684820649
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:10 GMT
content-type: application/javascript
last-modified: Tue, 23 May 2023 05:02:44 GMT
vary: Accept-Encoding
etag: W/"646c48f4-53b3"
expires: Thu, 22 Jun 2023 05:44:10 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
159.69.163.6200 OK 1.8 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 159.69.163.6:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1920), with no line terminators
Hash e2dcc00123f30d1303e8dfa1aef20ce9
b910a53c050b514dd61d8c4b75c549b790f5f7e8
245e4d35362007501e8e87a61fe8b1a2b7cc596cd049d3e5c845b709a54691c5
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 23 May 2023 05:44:10 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10118373_1.jpg
45.133.44.24200 OK 19 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10118373_1.jpg
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintAE:F6:56:92:A9:28:41:5D:57:4A:01:D8:87:7A:E7:98:08:57:8D:4B
ValiditySun, 26 Mar 2023 00:04:58 GMT - Sat, 24 Jun 2023 00:04:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 77425583569f55f5271858881c1c4c50
9bfdf9d9e7845b127a527283943b3fbfdaf2b2ea
90320bd02626be5f6619fd57850bd085ae8631e2c8aaa7abb05fe5e900e3174a
GET /media/tn/10118373_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 19223
server: nginx/1.21.0
last-modified: Sat, 26 Feb 2022 17:14:14 GMT
etag: "621a5fe6-4b17"
cache-control: max-age=15552000
expires: Sun, 19 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
12007250.pix-cdn.org/a/pjexo.html?idzone=4515100&w=300&h=250&ad_sub=0
45.133.44.24200 OK 592 B URL GET HTTP/2 12007250.pix-cdn.org/a/pjexo.html?idzone=4515100&w=300&h=250&ad_sub=0
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subject12007250.pix-cdn.org
FingerprintE6:F6:68:FA:EE:4E:48:68:94:C6:FF:56:81:19:37:0A:24:69:27:4C
ValidityMon, 27 Mar 2023 01:04:22 GMT - Sun, 25 Jun 2023 01:04:21 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (652), with no line terminators
Hash 5491214258d76135a199fc1a6c801f41
ac81d98b671bd52a9874288e3f438b758d147f4b
339dea08a2e1897e619dec3a05f812ab16ef438b508db0be234aca71ae5004f9
GET /a/pjexo.html?idzone=4515100&w=300&h=250&ad_sub=0 HTTP/1.1
Host: 12007250.pix-cdn.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:11 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 15 May 2023 15:46:08 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qZEtaYMzk7GW8LoH8cBOXIbA6cmLYlipw6qSI%2B6sXX9eyAuijUBu2wlmGoyjy6jSCFa2pzFSNLhbZQ35Ae6SlMz0PNbBIjG%2B8lkL9UFKC%2BhJId1pPlozLFEtDvMP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cb49bfe2a44727f-HAM
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expires: Tue, 23 May 2023 06:44:11 GMT
cache-control: max-age=3600
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
go.goaserv.com/banner.go?spaceid=1195888&sid2=9dae600d-d371-4a30-a33a-504eeecc9b5d&keywords=
217.22.19.197200 OK 1.5 kB URL GET HTTP/2 go.goaserv.com/banner.go?spaceid=1195888&sid2=9dae600d-d371-4a30-a33a-504eeecc9b5d&keywords=
IP 217.22.19.197:443
Requested by https://twinrdack.com/mediahosting.engine?MediaId=71381&AId=11491&CId=29583&PId=65072&SiteId=14245&ZoneId=57160&VolumeMetricId=227e0277-c216-43d2-99d6-d33ac2fe036b&PassBackUrl=&res=&dcid=3_ctx_af444071-4137-4eed-a7b1-2e5b51a22e45&cu=&kw=Gay&mw=300&mh=250
Certificate IssuerLet's Encrypt
Subjectgo.goaserv.com
Fingerprint13:FE:24:45:49:A3:3F:F7:E1:8C:09:99:E7:0B:8C:72:B1:61:FA:39
ValidityThu, 06 Apr 2023 18:44:35 GMT - Wed, 05 Jul 2023 18:44:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1521), with no line terminators
Hash 87f4a3c45b26dab559fff2b95734ade0
c442834e5d7dc0f8ef4e6dd837ed887f3839131e
fcc6bdc9b944b1cc106cda40f0f0771f136d594404110e0c632f1e4c93db1393
GET /banner.go?spaceid=1195888&sid2=9dae600d-d371-4a30-a33a-504eeecc9b5d&keywords= HTTP/1.1
Host: go.goaserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://twinrdack.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 May 2023 05:44:12 GMT
content-type: text/html; charset=utf-8
expires: Mon, 03 Jul 2001 06:00:00 GMT
last-modified: Tue, 23 05 2023 05:44:12 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
x-backend-server: nl2-go-web-243
content-encoding: gzip
X-Firefox-Spdy: h2
109.206.176.50200 OK 174 kB URL User Request GET HTTP/2 IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (50025)
Size 174 kB (174298 bytes)
Hash ac101ece145ab2e3f1c2c20a042e6552
2866360015f41b5e580a97b5c504b20fe351acd9
15219614dd5dbe36f3c0861e60d1eef5fb2c32ac2837498d9efac123b542b519
GET / HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
set-cookie: kt_lang=en; expires=Fri, 17-May-2024 05:44:08 GMT; Max-Age=31104000; path=/; domain=.mrgay.com
content-encoding: gzip
X-Firefox-Spdy: h2
12007250.pix-cdn.org/a/pjexo.html?idzone=4515090&w=300&h=250&ad_sub=0
45.133.44.24200 OK 592 B URL GET HTTP/2 12007250.pix-cdn.org/a/pjexo.html?idzone=4515090&w=300&h=250&ad_sub=0
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subject12007250.pix-cdn.org
FingerprintE6:F6:68:FA:EE:4E:48:68:94:C6:FF:56:81:19:37:0A:24:69:27:4C
ValidityMon, 27 Mar 2023 01:04:22 GMT - Sun, 25 Jun 2023 01:04:21 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (652), with no line terminators
Hash 5491214258d76135a199fc1a6c801f41
ac81d98b671bd52a9874288e3f438b758d147f4b
339dea08a2e1897e619dec3a05f812ab16ef438b508db0be234aca71ae5004f9
GET /a/pjexo.html?idzone=4515090&w=300&h=250&ad_sub=0 HTTP/1.1
Host: 12007250.pix-cdn.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:11 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 15 May 2023 15:46:08 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1D3flHCbaRCW0tKnyiFAefhr9HZjXwGHU9t2hneg4tKYTxeRlG3otsVdp3G8LcpvKz7%2F%2BAUhN48HP6WfF5dWo69DVsQcO382elcETRdjp0sTu0XlVqvaRG6SZ7Xh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cba5c7b682a727f-HAM
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expires: Tue, 23 May 2023 06:44:11 GMT
cache-control: max-age=3600
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
mrgay.com/api/json/suggester/43200/1000.json
109.206.176.50200 OK 14 kB URL GET HTTP/2 mrgay.com/api/json/suggester/43200/1000.json
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type JSON data\012- , ASCII text, with very long lines (14391), with no line terminators
Hash 36bb5b1f6fe62e776aafe5c7d8192f39
58f964c4e855fe2d35e66985bfd00af9f8e92868
dddfd80fffd9f126fef5e0269355529a5b3780af8caeeaaa02da80eaf7adab31
GET /api/json/suggester/43200/1000.json HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:09 GMT
content-type: application/json
last-modified: Mon, 22 May 2023 21:47:05 GMT
vary: Accept-Encoding
etag: W/"646be2d9-3837"
expires: Tue, 23 May 2023 05:49:09 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=2037826440594319242&pid=0&site=28112&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-7&site_id=0&spot_id=28112&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003301&placement_type_id=8&skin_test=&verify_hash=&score=99.0700078367991&ml=&tag_ab=c&v2=0&ttl=&space_id=28112&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28112%26source%3D0%26idzone%3D4515084%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28112%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28112%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.0700078367991%26bf%3D0.003301&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003301
159.69.163.6302 Found 592 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=2037826440594319242&pid=0&site=28112&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-7&site_id=0&spot_id=28112&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003301&placement_type_id=8&skin_test=&verify_hash=&score=99.0700078367991&ml=&tag_ab=c&v2=0&ttl=&space_id=28112&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28112%26source%3D0%26idzone%3D4515084%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28112%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28112%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.0700078367991%26bf%3D0.003301&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003301
IP 159.69.163.6:443
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=2037826440594319242&pid=0&site=28112&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-7&site_id=0&spot_id=28112&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003301&placement_type_id=8&skin_test=&verify_hash=&score=99.0700078367991&ml=&tag_ab=c&v2=0&ttl=&space_id=28112&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D28112%26source%3D0%26idzone%3D4515084%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D28112%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DGay%2C%26spot_id%3D28112%26p%3Dhttps%253A%252F%252Fmrgay.com%252F%26katds_labels%3D%26btype%3D0%26score%3D99.0700078367991%26bf%3D0.003301&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.003301 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 23 May 2023 05:44:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=28112&source=0&idzone=4515084&w=300&h=250&mo=&ve=&site_id=28112&utm1=&utm2=&utm3=&utm4=&ad_tags=Gay,&spot_id=28112&p=https%3A%2F%2Fmrgay.com%2F&katds_labels=&btype=0&score=99.0700078367991&bf=0.003301
X-Firefox-Spdy: h2
mrgay.com/api/json/videos2/14400/gay/most-popular/40/..1.all..day.json
109.206.176.50200 OK 58 kB URL GET HTTP/2 mrgay.com/api/json/videos2/14400/gay/most-popular/40/..1.all..day.json
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type JSON data\012- , ASCII text, with very long lines (58084), with no line terminators
Hash 79064762dd08529900a28316b84ceb32
7f40bbdab7f244d97390507792201dacfcb0020d
52eec206208059b88ff68f531b7bf65916cefd6d3c4f87bada39bb2747556fa4
GET /api/json/videos2/14400/gay/most-popular/40/..1.all..day.json HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:09 GMT
content-type: application/json
last-modified: Tue, 23 May 2023 05:26:08 GMT
vary: Accept-Encoding
etag: W/"646c4e70-e2e4"
expires: Tue, 23 May 2023 05:49:09 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
12007250.pix-cdn.org/a/pjexo.html?idzone=4515084&w=300&h=250&ad_sub=0
45.133.44.24200 OK 592 B URL GET HTTP/2 12007250.pix-cdn.org/a/pjexo.html?idzone=4515084&w=300&h=250&ad_sub=0
IP 45.133.44.24:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subject12007250.pix-cdn.org
FingerprintE6:F6:68:FA:EE:4E:48:68:94:C6:FF:56:81:19:37:0A:24:69:27:4C
ValidityMon, 27 Mar 2023 01:04:22 GMT - Sun, 25 Jun 2023 01:04:21 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (652), with no line terminators
Hash 5491214258d76135a199fc1a6c801f41
ac81d98b671bd52a9874288e3f438b758d147f4b
339dea08a2e1897e619dec3a05f812ab16ef438b508db0be234aca71ae5004f9
GET /a/pjexo.html?idzone=4515084&w=300&h=250&ad_sub=0 HTTP/1.1
Host: 12007250.pix-cdn.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 May 2023 05:44:11 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 15 May 2023 15:46:08 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BJ649aXZfaWiPiaQO1TtkzoHPQVyTCC8waTX3bK5QmkIojsdnx2xeZTIlbK%2Fd1Rh5FjHUUopTbwjCmh0rC1WHhCtz37fkOR%2BG37IRr2TymwMqbtWBc%2BYbuUvGBTu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7cb48c36fffeca95-HAM
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expires: Tue, 23 May 2023 06:44:11 GMT
cache-control: max-age=3600
x-proxy-cache: REVALIDATED
access-control-allow-origin: *
X-Firefox-Spdy: h2
mrgay.com/upd/20230510.110102.98906/static/css/index.css
109.206.176.50200 OK 99 kB URL GET HTTP/2 mrgay.com/upd/20230510.110102.98906/static/css/index.css
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5e4a8cee2193a4119e600f85fce03f33
392fb40b17ec850089a3f19c056f4cc951d91899
d0be73284c92490824f1a7d180edc5d21b457feee1140bee5d566e042564a296
GET /upd/20230510.110102.98906/static/css/index.css HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Tue, 23 May 2023 05:44:08 GMT
content-type: text/css
last-modified: Wed, 10 May 2023 11:01:02 GMT
vary: Accept-Encoding
etag: W/"645b796e-1825a"
expires: Tue, 23 May 2023 06:14:08 GMT
cache-control: max-age=1800, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2