- First seen
- Apr 24
- Last seen
- May 4
- Days running
- 10
Most people don't realize how easy it is to steal their data
Proton VPN@proton
Seen in
Landing page intelligence
go.getproton.me
Redirect chain
Redirect chain not yet captured for this creative.
Final host: go.getproton.me. Hop-by-hop capture runs as a separate pipeline; ads observed in recent ingests get crawled first.
Tracking parameters
- campaign_id
- 3136
- aff_id
- 2847
- aff_type
- ob
- aff_sub
- {{cid}}
- aff_sub2
- 007b1ad7dec34922b3708e856e8abc7c88
- aff_sub3
- {{publisher_name}}_{{section_name}}
- ad_id
- {{ob_click_id}}
- utm_campaign
- us-en-2c-vpn-gro_dis-g_awa-always_on_26_traffic_security_desktop
- utm_source
- outbrain.com
- utm_medium
- dis_ad
- utm_content
- 007b1ad7dec34922b3708e856e8abc7c88
- utm_term
- {{publisher_name}}_{{section_name}}
- utm_campaign
- us-en-2c-vpn-gro_dis-g_awa-always_on_26_traffic_security_desktop
- utm_source
- outbrain.com
- utm_medium
- dis_ad
- utm_content
- 007b1ad7dec34922b3708e856e8abc7c88
- utm_term
- {{publisher_name}}_{{section_name}}
Tracking setup · Outbrain
Outbrain emits ob_click_id (your unique click), ob_source (publisher), ob_section (placement), and ob_position. Forward ob_click_id to your tracker as the postback key. ob_source and ob_section are the two highest-signal sub-IDs for blacklisting.
?ob_click_id={ob_click_id}&ob_source={ob_source}&ob_section={ob_section}&ob_position={ob_position}LP screenshot
LP screenshot not yet captured.
Headless capture runs as a separate worker; high-traffic ads get queued first.
Default Outbrain setup template: ?ob_click_id={ob_click_id}&ob_source={ob_source}&ob_section={ob_section}&ob_position={ob_position}
Similar creatives
Same network, similar headline pattern (token overlap heuristic).