ocsp.pki.goog/gts1c3
142.250.74.3 472 B IP 142.250.74.3:0
Hash 5b53f2fcda25e30bbbf202b507fac96c
1d1cfb1765f42aba83c3b3e89417b228ed9f0b22
6971f9675ef64b91754cc952302f0a4e9d93b0435625536165dde4c7fe71b235
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 05:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-HYFGD9RQ6Y&l=dataLayer
142.250.74.168200 OK 82 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-HYFGD9RQ6Y&l=dataLayer
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintEB:A2:AF:B3:20:F1:B1:77:23:0B:85:D2:B1:16:33:A7:97:49:EE:51
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (3288)
Hash 01bc359c0ba47050cf704e9f4a406258
a1f53a3133d2d0e104e32eff0afea647c1cff9d6
e25edf0e846028509b67dd5772569db83938d8137686bb0d6975ae283e3fd564
GET /gtag/js?id=G-HYFGD9RQ6Y&l=dataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 01 Jun 2023 05:44:08 GMT
expires: Thu, 01 Jun 2023 05:44:08 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81497
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3 472 B IP 142.250.74.3:0
Hash 5b53f2fcda25e30bbbf202b507fac96c
1d1cfb1765f42aba83c3b3e89417b228ed9f0b22
6971f9675ef64b91754cc952302f0a4e9d93b0435625536165dde4c7fe71b235
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 05:44:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mrgay.com/static/images/favicons/apple-touch-icon.png
109.206.176.50200 OK 6.4 kB URL GET HTTP/2 mrgay.com/static/images/favicons/apple-touch-icon.png
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 186bd11e6b8481871c42087c3a8567da
658a8df1bf20c4ccd9546870d106a116674fdfbd
1f3990b4dd7c7d3ab89723cff39267b2d42b41fe6cf89bf17a6516982e27f2db
GET /static/images/favicons/apple-touch-icon.png HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/png
content-length: 6367
last-modified: Wed, 10 May 2023 10:59:24 GMT
etag: "645b790c-18df"
expires: Thu, 01 Jun 2023 06:14:09 GMT
cache-control: max-age=1800, public
pragma: public
accept-ranges: bytes
X-Firefox-Spdy: h2
mrgay.com/static/images/favicons/favicon-16x16.png
109.206.176.50200 OK 898 B URL GET HTTP/2 mrgay.com/static/images/favicons/favicon-16x16.png
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 91528e124af26ec2be210daa2c811631
0736f1f88761cc33d6b2fd21a558336bc70bb9e7
b2ee3ce01d5ee9a4498c8d3de26ce85260ef715f4afbfb5979b25edf86765eac
GET /static/images/favicons/favicon-16x16.png HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/png
content-length: 898
last-modified: Wed, 10 May 2023 10:59:24 GMT
etag: "645b790c-382"
expires: Thu, 01 Jun 2023 06:14:09 GMT
cache-control: max-age=1800, public
pragma: public
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-213377078-5&l=dataLayer&cx=c
142.250.74.168200 OK 47 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-213377078-5&l=dataLayer&cx=c
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintEB:A2:AF:B3:20:F1:B1:77:23:0B:85:D2:B1:16:33:A7:97:49:EE:51
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (2271)
Hash 937f891f46f9cf76058743d3185908e1
73c3db55ed3c7b078db32d0951f877587e13a4cf
67b3950b6f9729ed49dc117b731e818838a57f53a16f89d318f5c083ad6b8b79
GET /gtag/js?id=UA-213377078-5&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 01 Jun 2023 05:44:08 GMT
expires: Thu, 01 Jun 2023 05:44:08 GMT
cache-control: private, max-age=900
last-modified: Thu, 01 Jun 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47409
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
mrgay.com/upd/20230510.110102.98906/static/css/index.css
109.206.176.50200 OK 16 kB URL GET HTTP/2 mrgay.com/upd/20230510.110102.98906/static/css/index.css
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Hash cba6b8b130d1774d6bd3dc38f7d2b8fa
874045e09761bf1d9f989aaf9179edb6824271fb
1ce55e1af24fd3829692c9e943d6e3c3c33f94c232f1a5d5355c9cd7327f4618
GET /upd/20230510.110102.98906/static/css/index.css HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:08 GMT
content-type: text/css
last-modified: Wed, 10 May 2023 11:01:02 GMT
vary: Accept-Encoding
etag: W/"645b796e-1825a"
expires: Thu, 01 Jun 2023 06:14:08 GMT
cache-control: max-age=1800, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/upd/20230510.105924.7032/assets/previewl1b.20210114.1.js
109.206.176.50200 OK 3.7 kB URL GET HTTP/2 mrgay.com/upd/20230510.105924.7032/assets/previewl1b.20210114.1.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Hash fd6de7d5b12a287ab655966e41a285e5
1e2785d5bdfd82c5d585bf57289dbf8166128af6
ef946bdda605114d1f1f811027c9ec91abda0457fc563865913f41acc13c4b0c
GET /upd/20230510.105924.7032/assets/previewl1b.20210114.1.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:08 GMT
content-type: application/javascript
last-modified: Wed, 10 May 2023 10:59:24 GMT
vary: Accept-Encoding
etag: W/"645b790c-1b78"
expires: Sat, 01 Jul 2023 05:44:08 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/api/json/suggester/43200/1000.json
109.206.176.50200 OK 26 kB URL GET HTTP/2 mrgay.com/api/json/suggester/43200/1000.json
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Hash 9d6ca4ebdc321275bd618495b0dc1746
7a987c9c30c707ad657d9892c8d9cb446511b3d0
4604c2994edb3d9c469a033b16a0ffcdcabb107e3ad9cfab82308dc5d5ff359f
GET /api/json/suggester/43200/1000.json HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: application/json
last-modified: Thu, 01 Jun 2023 00:54:05 GMT
vary: Accept-Encoding
etag: W/"6477ec2d-37f4"
expires: Thu, 01 Jun 2023 05:49:09 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10325217_1.jpg
45.133.44.25200 OK 19 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10325217_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash f59adf23e9c2176ec1a0033bfa5bd6cd
7f8a661a99dfc7fb66a5b32015805b501671cb91
be0630dfc23f518ea20c932147398e90ce73a25cb361dbfa001f7251d905a645
GET /media/tn/10325217_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 19203
server: nginx/1.21.0
last-modified: Mon, 09 Jan 2023 19:10:17 GMT
etag: "63bc6699-4b03"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10361241_1.jpg
45.133.44.25200 OK 28 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10361241_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 35436aee11826c99a2d0460825ee9c1c
533d6efd505dbe2975a05e79da960445d50b2378
137d947eeccaf8cea2a36b9411464994e2a1a34b79818b3a3ad1c250171c3ea9
GET /media/tn/10361241_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 27472
server: nginx/1.21.0
last-modified: Fri, 31 Mar 2023 19:27:25 GMT
etag: "6427341d-6b50"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mrgay.com/kwqddmhq/bzneevff.js
109.206.176.50200 OK 104 kB URL GET HTTP/2 mrgay.com/kwqddmhq/bzneevff.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Size 104 kB (103642 bytes)
Hash 330a0d29139ab317a80a32506ad4e15f
45d9a6ad4db4f7e29e07ae2cbf2f90d4be05798d
7e31f1ae43a184b4fe504661afce880d9789cde5d1b8d3ce0925bc37c0bed5ab
GET /kwqddmhq/bzneevff.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:08 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 05:02:40 GMT
vary: Accept-Encoding
etag: W/"64782670-456a2"
expires: Sat, 01 Jul 2023 05:44:08 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10371781_1.jpg
45.133.44.25200 OK 24 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10371781_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 975863b711c876f6ce3b1f5bffd874fb
dd9a8efc7ce1f10faf0c0c1656edeed9eba7adeb
6701edfeb917d231763da8966e7c6cddea475e0f90f5a1a05d7e4db0890a3a4f
GET /media/tn/10371781_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 24091
server: nginx/1.21.0
last-modified: Fri, 28 Apr 2023 17:47:18 GMT
etag: "644c06a6-5e1b"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10118373_1.jpg
45.133.44.25200 OK 19 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10118373_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 77425583569f55f5271858881c1c4c50
9bfdf9d9e7845b127a527283943b3fbfdaf2b2ea
90320bd02626be5f6619fd57850bd085ae8631e2c8aaa7abb05fe5e900e3174a
GET /media/tn/10118373_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 19223
server: nginx/1.21.0
last-modified: Sat, 26 Feb 2022 17:14:14 GMT
etag: "621a5fe6-4b17"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10277243_1.jpg
45.133.44.25200 OK 24 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10277243_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 54a1973e4d65dc8dcd7aa2867dff04bb
1e4a53cf41f0797d365dbc531bee685e69a71457
d37b991d5ef8c805d8ac17994ce123222d5734188a091ccefde81e349a9b78fa
GET /media/tn/10277243_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 23566
server: nginx/1.21.0
last-modified: Wed, 19 Oct 2022 14:57:14 GMT
etag: "6350104a-5c0e"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10037467_1.jpg
45.133.44.25200 OK 23 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10037467_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 073209e07aa61dc95ee70ea8036e49b2
a052ae966ecfb15c43df3b3a7a4ac2518a5ce348
fd3a929f3f50046e6fec3c36fb48d336495cb11e803d2626acf4b0e7ae11463f
GET /media/tn/10037467_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 23399
server: nginx/1.21.0
last-modified: Wed, 29 Dec 2021 13:30:32 GMT
etag: "61cc62f8-5b67"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10066985_1.jpg
45.133.44.25200 OK 22 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10066985_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash d54c5b86dd3370c66f792f836dc67dff
cd91c4204d290acca1a0c6a011e59dc7a22f4653
e9a97a439a29c5c3ebfde98fba9f3f6002576becd3e236f8611a8c034be796b1
GET /media/tn/10066985_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 22101
server: nginx/1.21.0
last-modified: Tue, 11 Jan 2022 05:26:54 GMT
etag: "61dd151e-5655"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10334951_1.jpg
45.133.44.25200 OK 24 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10334951_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash a1c8cced08aee7951f1fb84edb5bcfa6
a3da74a68055dc903b5110ed30a180e2bde649aa
f973ccf6040f036d109ded962e5156d73540c8653c700be950c565c007ff5ba6
GET /media/tn/10334951_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 24174
server: nginx/1.21.0
last-modified: Wed, 18 Jan 2023 05:25:23 GMT
etag: "63c782c3-5e6e"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10358115_1.jpg
45.133.44.25200 OK 29 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10358115_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 76619afaadadf6c107994aeeb40a4c44
d13d7d5bf1e797e519d295d10ab3f464d406d12d
a9e1196c6cb71940da1268d7f13b700ee86eeb6791a049e287f4c8cbd74b3dc4
GET /media/tn/10358115_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 28991
server: nginx/1.21.0
last-modified: Fri, 10 Mar 2023 13:39:14 GMT
etag: "640b3302-713f"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mrgay.com/livesmatter/holly7.10.8.d1792b2bad02c6bf9e80dcc22172b12a.js
109.206.176.50200 OK 120 kB URL GET HTTP/2 mrgay.com/livesmatter/holly7.10.8.d1792b2bad02c6bf9e80dcc22172b12a.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type gzip compressed data, from Unix\012- data
Size 120 kB (120228 bytes)
Hash 9103250e1177463b73097e5ec31b1b4b
32a48541e9bf1e83f8543601928ef8dbd16eeb39
835df6a5a126ba88fb082b7addbaf737f2c9e4932ff45296b952946b851af93a
GET /livesmatter/holly7.10.8.d1792b2bad02c6bf9e80dcc22172b12a.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:08 GMT
content-type: application/javascript
last-modified: Mon, 15 May 2023 12:02:44 GMT
vary: Accept-Encoding
etag: W/"64621f64-4c16f"
expires: Sat, 01 Jul 2023 05:44:08 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10369209_1.jpg
45.133.44.25200 OK 18 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10369209_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 605298ac6c102f6e95099a8a412d2c80
2e1abceed58ba3c11a5d70fd36ccce6f88919f38
c3b3a1235f1197b88e88a5b6a5ee4d139b8bc3ec521753f6e781243c4fa4c000
GET /media/tn/10369209_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 18122
server: nginx/1.21.0
last-modified: Tue, 25 Apr 2023 14:15:51 GMT
etag: "6447e097-46ca"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10371431_1.jpg
45.133.44.25200 OK 20 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10371431_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash e94c21dd3c36934849e513a7c4d68c7d
c22e5a992db1236009fa4f98795ec4b50f136f0e
604f66f783acef3a3bf6c9ac92c2252508043f6a4cb535d42d448fe77b61f8ce
GET /media/tn/10371431_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 19824
server: nginx/1.21.0
last-modified: Fri, 28 Apr 2023 15:30:35 GMT
etag: "644be69b-4d70"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10262467_1.jpg
45.133.44.25200 OK 19 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10262467_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 4288b9a1b390ab67877b91c56690eedf
2bfa2b8d4928ba3f286d271e1e58d4748f4b7dda
041147ba09df52d490531f9d84fb7fb01ba22e18551052d4b5d17233f464b4a7
GET /media/tn/10262467_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 19237
server: nginx/1.21.0
last-modified: Fri, 23 Sep 2022 18:21:13 GMT
etag: "632df919-4b25"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10374455_1.jpg
45.133.44.25200 OK 33 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10374455_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 9521da7dc4dfb42a6c179dc4be08841d
2f515ddfa2233a9ba692d22046907f784395bea3
7e2ad4820927847cb98cf7678e89cd9dba7785f41c690482ce1e9854747b5ddf
GET /media/tn/10374455_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 33188
server: nginx/1.21.0
last-modified: Sun, 21 May 2023 16:57:29 GMT
etag: "646a4d79-81a4"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=14760
157.90.84.242204 No Content 0 B URL OPTIONS HTTP/1.1 fp.metricswpsh.com/fp?tag_id=14760
IP 157.90.84.242:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=14760 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://mrgay.com/
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Thu, 01 Jun 2023 05:44:09 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://mrgay.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
vast.yomeno.xyz/prepare
109.206.175.85204 No Content 0 B IP 109.206.175.85:443
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint13:5C:08:D5:3E:F3:37:AC:41:C6:11:A5:10:49:63:DF:DB:41:C5:5E
ValiditySun, 28 May 2023 03:08:58 GMT - Sat, 26 Aug 2023 03:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://mrgay.com/
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 01 Jun 2023 05:44:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://mrgay.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
109.206.175.85204 No Content 0 B IP 109.206.175.85:443
Certificate IssuerLet's Encrypt
Subjectvast.yomeno.xyz
Fingerprint13:5C:08:D5:3E:F3:37:AC:41:C6:11:A5:10:49:63:DF:DB:41:C5:5E
ValiditySun, 28 May 2023 03:08:58 GMT - Sat, 26 Aug 2023 03:08:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 993
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 01 Jun 2023 05:44:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://mrgay.com
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=14760
157.90.84.242204 No Content 27 B URL OPTIONS HTTP/1.1 fp.metricswpsh.com/fp?tag_id=14760
IP 157.90.84.242:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
File type JSON data\012- , ASCII text
Hash c4bea7951aaa542768f63f72d171ff83
7f57b3ce5d3a9bb0a15c32b34745b0214710e185
d4fbb24457a99cbf28127e8a416979ca0f2ab97c64a59b8d38760c40d4934756
POST /fp?tag_id=14760 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 23166
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Thu, 01 Jun 2023 05:44:10 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 27
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://mrgay.com
Set-Cookie: id=15672567847696503498; Expires=Fri, 31 May 2024 05:44:10 GMT; Secure; SameSite=None
Vary: Origin
metricswpsh.com/in/track?data=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
88.198.200.20200 OK 0 B URL GET HTTP/2 metricswpsh.com/in/track?data=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
IP 88.198.200.20:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
FingerprintC3:3A:0A:7D:9C:4B:21:97:39:A7:AD:B8:87:47:F1:35:32:D9:84:53
ValidityFri, 28 Apr 2023 11:39:09 GMT - Thu, 27 Jul 2023 11:39:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mrgay.com
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=317489627434406822&pid=0&site=28112&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10873&price=0&is_cpm=1&cpm=0.007965244800000002&ecpm=0.0063379452873600015&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-5&site_id=0&spot_id=28112&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.005008293249752475&placement_type_id=8&skin_test=&verify_hash=&score=20.18952587799192&ml=&tag_ab=a&v2=0&ttl=&space_id=28112&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
116.202.60.158302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=317489627434406822&pid=0&site=28112&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10873&price=0&is_cpm=1&cpm=0.007965244800000002&ecpm=0.0063379452873600015&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-5&site_id=0&spot_id=28112&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.005008293249752475&placement_type_id=8&skin_test=&verify_hash=&score=20.18952587799192&ml=&tag_ab=a&v2=0&ttl=&space_id=28112&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
IP 116.202.60.158:443
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTIsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwODQsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTEyLCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExMiIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU1OTgyNDk0Njl9fQ==
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=317489627434406822&pid=0&site=28112&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10873&price=0&is_cpm=1&cpm=0.007965244800000002&ecpm=0.0063379452873600015&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-5&site_id=0&spot_id=28112&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.005008293249752475&placement_type_id=8&skin_test=&verify_hash=&score=20.18952587799192&ml=&tag_ab=a&v2=0&ttl=&space_id=28112&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=5682014341892253354&pid=0&site=28114&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10873&price=0&is_cpm=1&cpm=0.007965244800000002&ecpm=0.0063379452873600015&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-9&site_id=0&spot_id=28114&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0063253169700836645&placement_type_id=8&skin_test=&verify_hash=&score=20.28884907753876&ml=&tag_ab=a&v2=0&ttl=&space_id=28114&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
116.202.60.158302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=5682014341892253354&pid=0&site=28114&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10873&price=0&is_cpm=1&cpm=0.007965244800000002&ecpm=0.0063379452873600015&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-9&site_id=0&spot_id=28114&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0063253169700836645&placement_type_id=8&skin_test=&verify_hash=&score=20.28884907753876&ml=&tag_ab=a&v2=0&ttl=&space_id=28114&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
IP 116.202.60.158:443
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=5682014341892253354&pid=0&site=28114&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10873&price=0&is_cpm=1&cpm=0.007965244800000002&ecpm=0.0063379452873600015&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-9&site_id=0&spot_id=28114&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0063253169700836645&placement_type_id=8&skin_test=&verify_hash=&score=20.28884907753876&ml=&tag_ab=a&v2=0&ttl=&space_id=28114&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTQsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwOTIsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNCIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU1OTgyNDk0OTB9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
s.optnx.com/cimp.php?data=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
95.211.229.247302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=TVRZNE5UVTVPREkxTUh3eE5ESmlNRE16WWpGbFpESTNOemN6WldVME1tSmlNR014T0RrNFpUTTBNdy0tfC9saWJyYXJ5LzgzOTg5LzIwNzZjZGJmYzIwMzAzOTRhMjk2YTZhMzIwZWZjZDY4MGE5ZGQ5NGEuZ2lmfGh0dHBzfDkxLjkwLjQyLjE1NHxOT1J8NDF8dGhlZ2F5LnBvcm58ODM5ODl8NjY2MTczfDkxMTM5MHw0MjUzNTA0fDExOHw1Njc2NjUwfDgwMjY4NzM2fDE1fDN8MHwwfDI1MzQ0fDB8MXw4MHxFVVJ8VVNEfDAuOTMyfDF8MjF8MzAweDI1MHwxfE5PUnx8MjB8NHwxfHw0Y2I3MjU2NjBjNDMwMzFlM2IwNmM3NTg5MmQ5NmM1YXxjNzk5ZTdkOWU5OWQ3MDNmYThmNzU1Y2NkOTQwMDkyMnwxfDB8bXJnYXkuY29tfDB8MHwwfDB8MXwwfGV4Y2hhbmdlX2Jhbm5lcnwwfDB8MzE0MzI0MnwtMXwwfDMxNDMyNDR8fHwxfDE0NDB8fDB8MHwwfDB8MHwwfDF8MHx8OHwxfE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6MTA5LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTExLjB8fE9LfGE4YTYwMWUwMzY3M2YwMzgxNmM0YTBmZDdkYzZkZTZh
IP 95.211.229.247:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectoptnx.com
FingerprintE8:B5:4A:26:89:37:E9:85:D8:D0:28:5A:AB:D3:C5:95:5F:E3:BC:5D
ValidityTue, 09 May 2023 12:53:09 GMT - Mon, 07 Aug 2023 12:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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 HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Jun 2023 05:44:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%226478302a8a2862.04256845128264406%22%3B%7D; expires=Sat, 31 May 2025 05:44:10 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
X-Robots-Tag: noindex, follow
rtbrennab.com/banner/in/show/?mid=337210242657044106&pid=0&site=28115&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10873&price=0&is_cpm=1&cpm=0.007965244800000002&ecpm=0.0063379452873600015&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-3&site_id=0&spot_id=28115&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0050465100863151795&placement_type_id=8&skin_test=&verify_hash=&score=20.222802501854222&ml=&tag_ab=a&v2=0&ttl=&space_id=28115&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
116.202.60.158302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=337210242657044106&pid=0&site=28115&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10873&price=0&is_cpm=1&cpm=0.007965244800000002&ecpm=0.0063379452873600015&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-3&site_id=0&spot_id=28115&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0050465100863151795&placement_type_id=8&skin_test=&verify_hash=&score=20.222802501854222&ml=&tag_ab=a&v2=0&ttl=&space_id=28115&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756
IP 116.202.60.158:443
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTUsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUxMDAsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE1LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU1OTgyNDk0OTh9fQ==
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=337210242657044106&pid=0&site=28115&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10873&price=0&is_cpm=1&cpm=0.007965244800000002&ecpm=0.0063379452873600015&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-3&site_id=0&spot_id=28115&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=imageAd&iabcat=IAB25&min_cpm=0.0050465100863151795&placement_type_id=8&skin_test=&verify_hash=&score=20.222802501854222&ml=&tag_ab=a&v2=0&ttl=&space_id=28115&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTUsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUxMDAsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE1LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU1OTgyNDk0OTh9fQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=7297675910968110926&pid=0&site=28113&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10461&price=0&is_cpm=1&cpm=0.0068&ecpm=0.0053278&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-4&site_id=0&spot_id=28113&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25&min_cpm=0.003235966815571155&placement_type_id=8&skin_test=&verify_hash=&score=20.25163216208915&ml=&tag_ab=a&v2=0&ttl=&space_id=28113&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLcMGOGjAwbZlrQsBHGhsgyN3K0wJGjxowWM8LMEGPmhowaYnDUFOFwjpg0ZBTq2CIChoguDse4EVojBgyHYeqMwWhTo40bNXI4zWEDR4ytH3mK-EkGYxo6Zdp8iSHWoJ2FH73ScAinjpiFLmvIgAoHzsQYM2bU6AlHog4aMXDAuAFjrogyeOh8mVMYo0E9b9yU-SLDK2CxY9r41TEjRo3GDR-SMTPRoRg3bhbOgAHjq4zUbdxcPEwDBo69IuDk3h2DMQwbDuuw1TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0CNPiTPs1LejE4FKH9kc6b7L3GPKmTBP69tkwRhiihZHGGW70UEMQS3AFIAwfkZHGHGGIwcZmc-TnBhk9zFcfhDa08cZPF0pRhoRylBHRenXg9-BHaYlx4hd2AFXGG19kxkYeHYpFBngYtSHHGWHk4R2QSV230BYyyIBUcHJMpQMOZbRwnGus6QCDC7TNIMMMyIkwhnBfwBHlQlvS1pVDctgxmmkOqSgcmlz6llwdaWBEwxhi2FSDDTbAMAYNs5VWxkzHjYEVSzKQwdUYNYQhVhqjZRSDCzlsSYMMLphGg1h1SMpcE2_okQYbbITxQg1cgoACFl_tAAIT49WBBwh44GDDFzbQIGubOmzFZQogHKHiGm-8IENttDkVAwhGpJGiGW_g8cJXlxqVlJQiOPGEWG_I8cUY3HorFhvcFuGEj2XY8UWKbExUww034ACmYk-JMGRsOtyEQ2oHuSuGHAvhgINDAX8hYln96kqRCGTI8YZsDr0hFHBmVpvHQo6RkQe_59VRBptlZNncc9FNJySRRn4XnlhztImRxHRcF24LdbhxlpWckqGoj9we9IXPN4hFRxsTdVVDVr-dVlEbMiSNw9I5NA2hU1CR8W4ZlH2hZLBKM31Tvu16faEcdAi1hWBPVmgYxCVHxYZEdKGLZlK7wdCHAgEB%26s%3D5851589c5c5ec346d6bcab54efd0afb5907de4199d304ad5569bd285dfc739ed1685598250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00253538
116.202.60.158302 Found 0 B URL GET HTTP/2 rtbrennab.com/banner/in/show/?mid=7297675910968110926&pid=0&site=28113&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10461&price=0&is_cpm=1&cpm=0.0068&ecpm=0.0053278&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-4&site_id=0&spot_id=28113&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25&min_cpm=0.003235966815571155&placement_type_id=8&skin_test=&verify_hash=&score=20.25163216208915&ml=&tag_ab=a&v2=0&ttl=&space_id=28113&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLcMGOGjAwbZlrQsBHGhsgyN3K0wJGjxowWM8LMEGPmhowaYnDUFOFwjpg0ZBTq2CIChoguDse4EVojBgyHYeqMwWhTo40bNXI4zWEDR4ytH3mK-EkGYxo6Zdp8iSHWoJ2FH73ScAinjpiFLmvIgAoHzsQYM2bU6AlHog4aMXDAuAFjrogyeOh8mVMYo0E9b9yU-SLDK2CxY9r41TEjRo3GDR-SMTPRoRg3bhbOgAHjq4zUbdxcPEwDBo69IuDk3h2DMQwbDuuw1TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0CNPiTPs1LejE4FKH9kc6b7L3GPKmTBP69tkwRhiihZHGGW70UEMQS3AFIAwfkZHGHGGIwcZmc-TnBhk9zFcfhDa08cZPF0pRhoRylBHRenXg9-BHaYlx4hd2AFXGG19kxkYeHYpFBngYtSHHGWHk4R2QSV230BYyyIBUcHJMpQMOZbRwnGus6QCDC7TNIMMMyIkwhnBfwBHlQlvS1pVDctgxmmkOqSgcmlz6llwdaWBEwxhi2FSDDTbAMAYNs5VWxkzHjYEVSzKQwdUYNYQhVhqjZRSDCzlsSYMMLphGg1h1SMpcE2_okQYbbITxQg1cgoACFl_tAAIT49WBBwh44GDDFzbQIGubOmzFZQogHKHiGm-8IENttDkVAwhGpJGiGW_g8cJXlxqVlJQiOPGEWG_I8cUY3HorFhvcFuGEj2XY8UWKbExUww034ACmYk-JMGRsOtyEQ2oHuSuGHAvhgINDAX8hYln96kqRCGTI8YZsDr0hFHBmVpvHQo6RkQe_59VRBptlZNncc9FNJySRRn4XnlhztImRxHRcF24LdbhxlpWckqGoj9we9IXPN4hFRxsTdVVDVr-dVlEbMiSNw9I5NA2hU1CR8W4ZlH2hZLBKM31Tvu16faEcdAi1hWBPVmgYxCVHxYZEdKGLZlK7wdCHAgEB%26s%3D5851589c5c5ec346d6bcab54efd0afb5907de4199d304ad5569bd285dfc739ed1685598250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00253538
IP 116.202.60.158:443
ASN #24940 Hetzner Online GmbH
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=7297675910968110926&pid=0&site=28113&sc=NO&usage_type=DCH&subid=0&sid=0&cid=10461&price=0&is_cpm=1&cpm=0.0068&ecpm=0.0053278&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=mrgay.com&hostname=auc-banner-hz-4&site_id=0&spot_id=28113&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=iframeAd&iabcat=IAB25&min_cpm=0.003235966815571155&placement_type_id=8&skin_test=&verify_hash=&score=20.25163216208915&ml=&tag_ab=a&v2=0&ttl=&space_id=28113&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=%2F%2Fr-eu.tsyndicate.com%2Fapi%2Fv2%2Fdsp%2Fbanner%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLcMGOGjAwbZlrQsBHGhsgyN3K0wJGjxowWM8LMEGPmhowaYnDUFOFwjpg0ZBTq2CIChoguDse4EVojBgyHYeqMwWhTo40bNXI4zWEDR4ytH3mK-EkGYxo6Zdp8iSHWoJ2FH73ScAinjpiFLmvIgAoHzsQYM2bU6AlHog4aMXDAuAFjrogyeOh8mVMYo0E9b9yU-SLDK2CxY9r41TEjRo3GDR-SMTPRoRg3bhbOgAHjq4zUbdxcPEwDBo69IuDk3h2DMQwbDuuw1TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0CNPiTPs1LejE4FKH9kc6b7L3GPKmTBP69tkwRhiihZHGGW70UEMQS3AFIAwfkZHGHGGIwcZmc-TnBhk9zFcfhDa08cZPF0pRhoRylBHRenXg9-BHaYlx4hd2AFXGG19kxkYeHYpFBngYtSHHGWHk4R2QSV230BYyyIBUcHJMpQMOZbRwnGus6QCDC7TNIMMMyIkwhnBfwBHlQlvS1pVDctgxmmkOqSgcmlz6llwdaWBEwxhi2FSDDTbAMAYNs5VWxkzHjYEVSzKQwdUYNYQhVhqjZRSDCzlsSYMMLphGg1h1SMpcE2_okQYbbITxQg1cgoACFl_tAAIT49WBBwh44GDDFzbQIGubOmzFZQogHKHiGm-8IENttDkVAwhGpJGiGW_g8cJXlxqVlJQiOPGEWG_I8cUY3HorFhvcFuGEj2XY8UWKbExUww034ACmYk-JMGRsOtyEQ2oHuSuGHAvhgINDAX8hYln96kqRCGTI8YZsDr0hFHBmVpvHQo6RkQe_59VRBptlZNncc9FNJySRRn4XnlhztImRxHRcF24LdbhxlpWckqGoj9we9IXPN4hFRxsTdVVDVr-dVlEbMiSNw9I5NA2hU1CR8W4ZlH2hZLBKM31Tvu16faEcdAi1hWBPVmgYxCVHxYZEdKGLZlK7wdCHAgEB%26s%3D5851589c5c5ec346d6bcab54efd0afb5907de4199d304ad5569bd285dfc739ed1685598250&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Gay,&stratagem=&ssp=3756&refresh=1&priority=0&bb=0.00253538 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: //r-eu.tsyndicate.com/api/v2/dsp/banner?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInLcMGOGjAwbZlrQsBHGhsgyN3K0wJGjxowWM8LMEGPmhowaYnDUFOFwjpg0ZBTq2CIChoguDse4EVojBgyHYeqMwWhTo40bNXI4zWEDR4ytH3mK-EkGYxo6Zdp8iSHWoJ2FH73ScAinjpiFLmvIgAoHzsQYM2bU6AlHog4aMXDAuAFjrogyeOh8mVMYo0E9b9yU-SLDK2CxY9r41TEjRo3GDR-SMTPRoRg3bhbOgAHjq4zUbdxcPEwDBo69IuDk3h2DMQwbDuuw1TGQDh04c3S8eDEGTRg6deSIuV7GxZg3bV6kcfPiBx05ENf0CNPiTPs1LejE4FKH9kc6b7L3GPKmTBP69tkwRhiihZHGGW70UEMQS3AFIAwfkZHGHGGIwcZmc-TnBhk9zFcfhDa08cZPF0pRhoRylBHRenXg9-BHaYlx4hd2AFXGG19kxkYeHYpFBngYtSHHGWHk4R2QSV230BYyyIBUcHJMpQMOZbRwnGus6QCDC7TNIMMMyIkwhnBfwBHlQlvS1pVDctgxmmkOqSgcmlz6llwdaWBEwxhi2FSDDTbAMAYNs5VWxkzHjYEVSzKQwdUYNYQhVhqjZRSDCzlsSYMMLphGg1h1SMpcE2_okQYbbITxQg1cgoACFl_tAAIT49WBBwh44GDDFzbQIGubOmzFZQogHKHiGm-8IENttDkVAwhGpJGiGW_g8cJXlxqVlJQiOPGEWG_I8cUY3HorFhvcFuGEj2XY8UWKbExUww034ACmYk-JMGRsOtyEQ2oHuSuGHAvhgINDAX8hYln96kqRCGTI8YZsDr0hFHBmVpvHQo6RkQe_59VRBptlZNncc9FNJySRRn4XnlhztImRxHRcF24LdbhxlpWckqGoj9we9IXPN4hFRxsTdVVDVr-dVlEbMiSNw9I5NA2hU1CR8W4ZlH2hZLBKM31Tvu16faEcdAi1hWBPVmgYxCVHxYZEdKGLZlK7wdCHAgEB&s=5851589c5c5ec346d6bcab54efd0afb5907de4199d304ad5569bd285dfc739ed1685598250
X-Firefox-Spdy: h2
s.optnx.com/cimp.php?data=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
95.211.229.247302 Found 0 B URL GET HTTP/1.1 s.optnx.com/cimp.php?data=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
IP 95.211.229.247:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTIsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwODQsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTEyLCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExMiIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU1OTgyNDk0Njl9fQ==
Certificate IssuerLet's Encrypt
Subjectoptnx.com
FingerprintE8:B5:4A:26:89:37:E9:85:D8:D0:28:5A:AB:D3:C5:95:5F:E3:BC:5D
ValidityTue, 09 May 2023 12:53:09 GMT - Mon, 07 Aug 2023 12:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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 HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rtbrennab.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Jun 2023 05:44:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226478302a907730.703140254274186192%22%3B%7D; expires=Sat, 31 May 2025 05:44:10 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
X-Robots-Tag: noindex, follow
rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTQsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwOTIsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE0LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNCIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU1OTgyNDk0OTB9fQ==
116.202.60.158200 OK 2.0 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 116.202.60.158:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1630)
Hash 3cba6a0515e590bbe0c53ef6e592e339
e4d4e758bddecfe75658a20be18868d166d3a72f
a9414d4900bd075242c3065964cd73cb7bcb785e16995dbd03d50d10f19d77fd
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
185.76.9.24200 OK 26 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
IP 185.76.9.24:443
ASN #60068 Datacamp Limited
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint5F:D9:0E:52:17:61:88:ED:50:45:B4:DD:D4:F3:5F:30:D8:07:F5:F7
ValidityTue, 09 May 2023 12:30:19 GMT - Mon, 07 Aug 2023 12:30:18 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash b84bc3b7f8bab08bc5ea1ce70fde37db
2076cdbfc2030394a296a6a320efcd680a9dd94a
5c3aba940c05259789b56295566cb12d81d26913ba63a910318fb9f78a6f912b
GET /library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: image/gif
content-length: 25660
last-modified: Mon, 13 Feb 2023 08:47:25 GMT
etag: "63e9f91d-643c"
expires: Fri, 08 Mar 2024 11:29:08 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCRTzzrX/jWxuAA
x-77-nzt-ray: af585630fa7f11582a307864d4b6a828
x-accel-expires: @1709897501
x-accel-date: 1678361501
x-cache: HIT
x-age: 7236749
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
185.76.9.24200 OK 26 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
IP 185.76.9.24:443
ASN #60068 Datacamp Limited
Requested by https://rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTUsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUxMDAsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE1LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU1OTgyNDk0OTh9fQ==
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint5F:D9:0E:52:17:61:88:ED:50:45:B4:DD:D4:F3:5F:30:D8:07:F5:F7
ValidityTue, 09 May 2023 12:30:19 GMT - Mon, 07 Aug 2023 12:30:18 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash b84bc3b7f8bab08bc5ea1ce70fde37db
2076cdbfc2030394a296a6a320efcd680a9dd94a
5c3aba940c05259789b56295566cb12d81d26913ba63a910318fb9f78a6f912b
GET /library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: image/gif
content-length: 25660
last-modified: Mon, 13 Feb 2023 08:47:25 GMT
etag: "63e9f91d-643c"
expires: Fri, 08 Mar 2024 11:29:08 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCRQzhSH/jWxuAA
x-77-nzt-ray: af585630fa7f11582a307864beff3929
x-accel-expires: @1709897501
x-accel-date: 1678361501
x-cache: HIT
x-age: 7236749
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
185.76.9.24200 OK 26 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif
IP 185.76.9.24:443
ASN #60068 Datacamp Limited
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint5F:D9:0E:52:17:61:88:ED:50:45:B4:DD:D4:F3:5F:30:D8:07:F5:F7
ValidityTue, 09 May 2023 12:30:19 GMT - Mon, 07 Aug 2023 12:30:18 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash b84bc3b7f8bab08bc5ea1ce70fde37db
2076cdbfc2030394a296a6a320efcd680a9dd94a
5c3aba940c05259789b56295566cb12d81d26913ba63a910318fb9f78a6f912b
GET /library/83989/2076cdbfc2030394a296a6a320efcd680a9dd94a.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: image/gif
content-length: 25660
last-modified: Mon, 13 Feb 2023 08:47:25 GMT
etag: "63e9f91d-643c"
expires: Fri, 08 Mar 2024 11:29:08 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCRR56ab/jWxuAA
x-77-nzt-ray: af585630fa7f11582a307864aa844729
x-accel-expires: @1709897501
x-accel-date: 1678361501
x-cache: HIT
x-age: 7236749
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
104.21.235.3200 OK 42 B URL GET HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP 104.21.235.3:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecthostave3.net
FingerprintC6:67:A3:9A:39:99:56:AE:03:D5:CD:A0:20:C9:34:2B:6A:EC:45:1F
ValidityWed, 17 May 2023 01:20:03 GMT - Tue, 15 Aug 2023 01:20:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 562796
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rVn6h3cD%2FecZZbunMUbAFtX8DpWepams6%2Bi9FT8V5wBMLQ%2Bj%2BYtGz%2FJrXvXYX2qe%2BNL2V18oHPSaJTVpOmPZ0e17pLxW%2FueYnVm9YkqgUkjkJ%2FlnW1ncboHYP%2Br531DSmsrCxiGiDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7d0524aadf718883-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
104.21.235.3200 OK 42 B URL GET HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP 104.21.235.3:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecthostave3.net
FingerprintC6:67:A3:9A:39:99:56:AE:03:D5:CD:A0:20:C9:34:2B:6A:EC:45:1F
ValidityWed, 17 May 2023 01:20:03 GMT - Tue, 15 Aug 2023 01:20:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 562796
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=unKeAC5oi2wm7wuWw3V4w4SnzvpgCtsXnxIwXG1ZPuAEy9VpV32izsQrC5LHJvyY9zUohaBkZtr00dwNpCUS%2Be56%2Be5%2FVyl9N77G588dMDkoLCzoyK7Z3agNR0%2B8LqEimSmlN5RoQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7d0524aaef7f8883-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
preroll.hostave3.net/notifications/zeropixel.png
104.21.235.3200 OK 42 B URL GET HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP 104.21.235.3:443
Requested by https://rtbrennab.com/get/?go=1&data=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
Certificate IssuerGoogle Trust Services LLC
Subjecthostave3.net
FingerprintC6:67:A3:9A:39:99:56:AE:03:D5:CD:A0:20:C9:34:2B:6A:EC:45:1F
ValidityWed, 17 May 2023 01:20:03 GMT - Tue, 15 Aug 2023 01:20:02 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 562796
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dkXyHleMDRtOGsr6WOak2FCMbOkFZZ3AtZiZc0kiPENqm4pvMjsEeUQkDv9MNXtuB8oa7BPb2t0EvxYX1XVPxx5pKBQs%2BgXvXQDee%2F0xJ8f7K19umjYFSg%2BI935stY2hw9TIrAezlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7d0524aaef888883-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mrgay.com/api/json/videos2/14400/gay/most-popular/40/..1.all..day.json
109.206.176.50200 OK 59 kB URL GET HTTP/2 mrgay.com/api/json/videos2/14400/gay/most-popular/40/..1.all..day.json
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type JSON data\012- , ASCII text, with very long lines (58557), with no line terminators
Hash 737330cbf4ecf39657284ef6878c35f1
38cc2251a14d51d08694c5824f914bc7aea125a0
7555f71594eeebcbe00eaa24a610251582433f9c5fd1a81b9825419055a359a7
GET /api/json/videos2/14400/gay/most-popular/40/..1.all..day.json HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: application/json
last-modified: Thu, 01 Jun 2023 05:42:29 GMT
vary: Accept-Encoding
etag: W/"64782fc5-e4bd"
expires: Thu, 01 Jun 2023 05:49:09 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
116.202.60.158200 OK 2.7 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 116.202.60.158:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2812), with no line terminators
Hash f00e602fa5ff524b3e81163bdb4f470d
f515d738d576dc2d6ef800ca42a29785697e72bf
2e05984a9c461f4ceb8ab8660ce735b6d568371c16e79d89006d7aa001c55a44
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/kwqddmhq/ovaeaovg.js
109.206.176.50200 OK 21 kB URL GET HTTP/2 mrgay.com/kwqddmhq/ovaeaovg.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type ASCII text, with very long lines (21361)
Hash 06e33912403c3009e3df2cc587f4154a
8b442512b0c79c72a42461aa595787325ad79380
1451e91e2e00f6a2f3f682270ec309626ed4a4fac78ebd5792800ce37011638e
GET /kwqddmhq/ovaeaovg.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en; _ga_HYFGD9RQ6Y=GS1.1.1685598248.1.0.1685598248.0.0.0; _ga=GA1.1.683033480.1685598249
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 05:02:39 GMT
vary: Accept-Encoding
etag: W/"6478266f-53b3"
expires: Sat, 01 Jul 2023 05:44:10 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/api/json/main/14400/str.en.json
109.206.176.50200 OK 6.3 kB URL GET HTTP/2 mrgay.com/api/json/main/14400/str.en.json
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type troff or preprocessor input, ASCII text, with very long lines (7345), with no line terminators
Hash deeaab881ebf9c471bdf261a583fb499
5756f472967d764580117357bded8d0203e51b3f
92fedc51012570f6f2570bdd3473345113afcf98d85cd21ed7990c3c3ddffffe
GET /api/json/main/14400/str.en.json HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: application/json
last-modified: Thu, 01 Jun 2023 03:50:04 GMT
vary: Accept-Encoding
etag: W/"6478156c-187f"
expires: Thu, 01 Jun 2023 05:49:09 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
mrgay.com/upd/20230510.110102.674687/static/js/index.js
109.206.176.50200 OK 675 kB URL GET HTTP/2 mrgay.com/upd/20230510.110102.674687/static/js/index.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
Size 675 kB (674687 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upd/20230510.110102.674687/static/js/index.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:08 GMT
content-type: application/javascript
last-modified: Wed, 10 May 2023 11:01:02 GMT
vary: Accept-Encoding
etag: W/"645b796e-a4b7f"
expires: Thu, 01 Jun 2023 06:14:08 GMT
cache-control: max-age=1800, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
116.202.60.158200 OK 3.8 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTUsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUxMDAsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTE1LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExNSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU1OTgyNDk0OTh9fQ==
IP 116.202.60.158:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (3865), with no line terminators
Hash aa7e31b3e8750e03cce94f596d13d589
020e54f95a39ad330ba9164485c9b960c65397dd
23ed7eb760b18a904c18a5f8a8c066461690b24338fea43cc9fe49792fe5f9b9
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
109.206.176.50200 OK 174 kB URL User Request GET HTTP/2 IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (50025)
Size 174 kB (173652 bytes)
Hash 006bdd3216831a6cf3d87e3d25255aa4
489ba977028a9216e17e6922a2f07e530986197d
c2f9cd3f19e677cffb0189b94c91985be9d7d928232a9a939b768bf14d6370bb
GET / HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
set-cookie: kt_lang=en; expires=Sun, 26-May-2024 05:44:08 GMT; Max-Age=31104000; path=/; domain=.mrgay.com
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10175567_1.jpg
45.133.44.25200 OK 18 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10175567_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash cbe416b8ddcd1af54996cddbce65e9b0
77b51d18f082ab7dc44708967677db7aa8c520c0
c5db0c1eb0c81462b1e889b848230428b5df8bc591d7ee4831c03fca072c7a8e
GET /media/tn/10175567_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 18369
server: nginx/1.21.0
last-modified: Sun, 01 May 2022 17:52:12 GMT
etag: "626ec8cc-47c1"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10371325_1.jpg
45.133.44.25200 OK 25 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10371325_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash 4d53ecc6a380d26d830406423ffaae64
db165bb377bf93ec50f63275191b78073f8fa25a
0f644fd0ddd3a8390a52d9b83f006c5a97aa5f8a2885c45284bcd60c6a9eca72
GET /media/tn/10371325_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 25263
server: nginx/1.21.0
last-modified: Fri, 28 Apr 2023 15:04:12 GMT
etag: "644be06c-62af"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mrgay.com/kwqddmhq/tzacoaswrl.js
109.206.176.50200 OK 54 kB URL GET HTTP/2 mrgay.com/kwqddmhq/tzacoaswrl.js
IP 109.206.176.50:443
Certificate IssuerLet's Encrypt
Subjectmrgay.com
Fingerprint74:97:D1:72:03:36:79:D6:AD:56:C1:DC:45:38:BC:47:37:3A:9C:DF
ValidityMon, 15 May 2023 03:03:23 GMT - Sun, 13 Aug 2023 03:03:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /kwqddmhq/tzacoaswrl.js HTTP/1.1
Host: mrgay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Cookie: kt_lang=en; _ga_HYFGD9RQ6Y=GS1.1.1685598248.1.0.1685598248.0.0.0; _ga=GA1.1.683033480.1685598249
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 05:02:40 GMT
vary: Accept-Encoding
etag: W/"64782670-d1cb"
expires: Sat, 01 Jul 2023 05:44:10 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
mgim1.m3pd.com/media/tn/10370629_1.jpg
45.133.44.25200 OK 20 kB URL GET HTTP/2 mgim1.m3pd.com/media/tn/10370629_1.jpg
IP 45.133.44.25:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectmgim1.m3pd.com
FingerprintA0:23:EA:2E:B5:5C:0C:C9:E1:6E:2C:62:DE:22:27:69:42:39:49:F2
ValidityThu, 25 May 2023 12:02:44 GMT - Wed, 23 Aug 2023 12:02:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3\012- data
Hash e1032da4ca53ddbecb5a9748d825bfed
fab889e8ab3a9062f1f823fa16a6c264ffa0a134
72e0ff95c34530cd9c464b0fabdc3145cc8dad8df8287a892e3b067bf145a64f
GET /media/tn/10370629_1.jpg HTTP/1.1
Host: mgim1.m3pd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 05:44:09 GMT
content-type: image/jpeg
content-length: 19626
server: nginx/1.21.0
last-modified: Wed, 26 Apr 2023 02:29:18 GMT
etag: "64488c7e-4caa"
cache-control: max-age=15552000
expires: Tue, 28 Nov 2023 05:44:09 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
116.202.60.158200 OK 3.8 kB URL GET HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 116.202.60.158:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectrtbbnr.com
Fingerprint9B:8F:E9:E4:0D:14:0C:51:0B:F8:0A:FC:22:6C:4B:F8:E0:BE:A6:D4
ValidityFri, 05 May 2023 01:54:59 GMT - Thu, 03 Aug 2023 01:54:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (3861), with no line terminators
Hash ff5497adad041c66e28b184de21bd0e1
53b854dba697cdb6891dd690cc0d78bb69b982e1
845225c13942df40d69cf3ce7208e042a65ece72fef0b6bbaff4054da361fdda
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MjgxMTIsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjQ1MTUwODQsImFkX3RhZ3MiOiJHYXksIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMCIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjI4MTEyLCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjo4LCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTYsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6MzAwLCJoIjoyNTB9fV0sInNpdGUiOnsiaWQiOiIyODExMiIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tcmdheS5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjRjYjcyNTY2MGM0MzAzMWUzYjA2Yzc1ODkyZDk2YzVhIiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2ODU1OTgyNDk0Njl9fQ== HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mrgay.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 01 Jun 2023 05:44:10 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2