HTTP/2 302 Found
date: Tue, 30 May 2023 03:33:36 GMT
content-length: 0
location: https://ormobi.xyz/en4/?model=Desktop&brand=Desktop&os=Linux&osv=Linux&cep=h7QJz6_NYuhSDAPc6XO4EXXhyL9zWqXKKbpGbbIDQWG0NjlKVldekaRsBnWbXAQAN2MS3HN5UgBNDAzVJtlP5vq-qflKij5vmPdl4wTR4usp7h1nnAtWx-ZXc160XLZMdoERCDYNgy1WjpVJhyW7FUXkwN0BUd6ps8gtKQBUd56X284MAHOk4X3Niedf1j8W0_Iu_VsjYPLZboqacUDxeokt8zAMZCBQ0pgWj_ofKuh-6RBetG-TIGJgv7Ua4jHTZfBsIKGte7QZUc1MdJ-ulKiNWdK7H4VRXGZwI-sr0WM6gkMBpg1swnArvxCRnKa9i9B-19lNxXnQkQT90RuGVyTNjmS4kHBByzJANSGLcyAOd9UKKAgg1mwsXZiy0X9_&lptoken=161285d04111942216aa
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
set-cookie: 27726a64-af12-4802-92b9-c9c0ea622b43-v4=pbMHhBuW4mx39p-InzorCGpC14hZHwHABJGKhLQuv0k; Max-Age=86400; Expires=Wed, 31-May-2023 03:33:36 GMT; Domain=xyclick.space; Path=/; HttpOnly
cep-v4=C_MdBtzryWuij2Bz2re7okrVKikhgu3K5v8t9nKF1NPyYl_cuHRWjNS-ayCByYayT1hSBFZAVgHeKpbs_6P-twItyQSz8iQryWw8sDQt8YSGyIfzo6V7nSjMmQhseTHApJp42Hw0WN9w6aAup83UqW166JWw3hWfzjYwIGhfdPqvk0-S15WkUEmiXcyTk-6zI45dVfLc83zkjGvzFt2vzTdJD-QO8mysnyY4PCvWxdWN1dTa4lA4jMQklC33mWU5BJgW9wRvUywYVDt_q5hbZo5jOGq70kWIvaqe13tgakPxdLhSG1j17Hfda_KequN0kYUo6xl546_fNFjkgnG2kRsK8ukCUKOpFxFSVKgFpc07o0bdaFhg-2Achu6bR92u; Max-Age=86400; Expires=Wed, 31-May-2023 03:33:36 GMT; Domain=xyclick.space; Path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e5jNVl%2F1L89WUOkJQxyDlyWIOvTOLr8DDnEUIKt3p95U6pL2%2FbSkEhyBzjXtYJbTL5slMhhagJvwsSaR9YnQTtMia%2FqjY%2F115WnSVNT1hFmFUIzUUqqMcHGmdsXUCd0U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cf3eaa45d8db51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/3 200 OK
date: Tue, 30 May 2023 03:33:36 GMT
content-type: image/gif
content-length: 910
last-modified: Sat, 24 Dec 2022 06:38:19 GMT
etag: "63a69e5b-38e"
expires: Tue, 30 May 2023 18:25:13 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 32903
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F8Ht%2FItxwXHDGalIHTICIicubVjrEKeLzWEbIFVGb4AeJ6N7Pg9JhTH07MHSYLl3E61jUfGSTE%2BDCeoOc1NdDyZKWwGAuna5stsjhrkgqdPNPqBxPG4pfs%2F1lktI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf3eaa73d6eb4f9-OSL
alt-svc: h3=":443"; ma=86400

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 03:33:36 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 28 May 2023 08:20:03 GMT
Expires: Sun, 04 Jun 2023 08:20:02 GMT
Etag: "8f79fb6c128d0da6c1c98b42245094f53be38011"
Cache-Control: max-age=449567,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7cf3eaa7d9b50afa-OSL

HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 03:33:36 GMT
content-length: 0
x-trace-id: e692fdd8035dd89fedb93f67f5cbe32d
access-control-allow-origin: https://ormobi.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

HTTP/2 204 No Content
server: nginx
date: Tue, 30 May 2023 03:33:36 GMT
access-control-allow-origin: https://ormobi.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 76e488eed8c8db0e1514908775dd0683
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

HTTP/2 204 No Content
server: nginx
date: Tue, 30 May 2023 03:33:36 GMT
access-control-allow-origin: https://ormobi.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: a019d0b9f86a6d379ea3dde848e89acb
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

HTTP/3 200 OK
date: Tue, 30 May 2023 03:33:36 GMT
content-type: application/javascript
last-modified: Wed, 22 Mar 2023 00:59:03 GMT
etag: W/"641a52d7-236"
expires: Tue, 30 May 2023 22:54:28 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 16748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hJ4AfRVBzIv0uQ7LBymHNzjJllVlEI1Q4S2YDFR8GLYLm5mVS6%2BVRJAwp%2FL%2BsO%2Br9efooM4nfwwrbg1wW2pct5PNGc0BuE4rOP2uHOzLcmy9RLfgJHo%2FjrRul7jg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf3eaa97e79b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 03:33:48 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Jun 2023 02:50:24 GMT
ETag: "00dd05dd79b8274586d11937c3cbd92f23ee7aba"
Last-Modified: Tue, 30 May 2023 02:50:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cf3eaf05ec3b505-OSL

HTTP/2 302 Found
date: Tue, 30 May 2023 03:33:47 GMT
content-type: text/html; charset=UTF-8
location: https://p.hungama.com/norway_mm_play/index.php/promotion/preview/3?aff_id=1641&click_id=4634827526
x-powered-by: PHP/8.1.18
cache-control: no-cache
x-frame-options: DENY
set-cookie: sbc2cf9977e05089d81=eyJpdiI6InRhYVZtVm43bkJGTG4yd0hFdlJJc0E9PSIsInZhbHVlIjoiKzNlOXNZNnBsU2J3UVd0c1ZPZVkxQT09IiwibWFjIjoiNGRhMGE0MWZlMDQ0NjU0ZmZmZGU0NWJkYTJlMGFjZjNmZTE1YWRhYjcxMzljMzJjZjczM2RiZjQyOTcxZWFhNiIsInRhZyI6IiJ9; expires=Tue, 30 May 2023 04:33:47 GMT; Max-Age=3600; path=/; httponly; samesite=lax
vis=eyJpdiI6Ik95dU8zSHpOWkQrd0UvaXlnMXo1WkE9PSIsInZhbHVlIjoiNlpzOENQczc1RHlsd1d6VG1oQnRyQT09IiwibWFjIjoiNjllZmE3ZjIxMWVkMDI2YTJiMjY3NmVkMzQwYjYzMzgzMjNkMzBjYzliZjgzOTc0ZTEzYTNkYTAwM2IzMGZlOSIsInRhZyI6IiJ9; expires=Mon, 28 Aug 2023 03:33:47 GMT; Max-Age=7776000; path=/; httponly; samesite=lax
expires: Thu, 01 Jan 1970 00:00:01 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kfisKS0ZGW03rvsv9Z4qR3bcTj4gBsGLdE5rrWMoPAN5aDNS86UgZ0JAZxYmaemN9DLVxgShuSMh0NjiXlc8s8Pslbh9%2Fb%2FAmChoy3v1XlvZIPF%2BCGI0u3Bmf%2F3Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cf3eaec5d451c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Date: Tue, 30 May 2023 03:33:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Jun 2023 02:50:24 GMT
ETag: "00dd05dd79b8274586d11937c3cbd92f23ee7aba"
Last-Modified: Tue, 30 May 2023 02:50:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cf3eafa1bdcb505-OSL

HTTP/1.1 302 Found
Server: nginx/1.19.10
Date: Tue, 30 May 2023 03:33:50 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 286
Connection: keep-alive
X-Powered-By: PHP/8.1.17
Location: https://p.hungama.com/norway_mm_play/index.php/promotion/preview/3?aff_id=1641&click_id=4634827526/&mdnreturn=WDNadlpHRnRiM289

HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 03:33:36 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin: 
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 2f31f4bdbdf49b400e849edfb8a8bb57
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2

HTTP/3 404 Not Found
date: Tue, 30 May 2023 03:33:37 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=freikKyLqJYtzrVGFH77l6mlDJfVN88MELbUEGlIIwff00%2BHWZv%2FVqLadawBZBKJ7ZBE9Qfsv9mIZbSQT0UkwAmikfJff6FbABeR3BUmNj1R1JnaeDV0s%2BLWxKOC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf3eaa9feb2b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

HTTP/2 200 OK
date: Tue, 30 May 2023 03:33:36 GMT
content-type: text/html
x-powered-by: PHP/5.3.29
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=onGdZLEVymCjI2rezJgrrWrYwmcZiRFaxTgwIXVi9a5pn6PUz7dbMic0xR8QWYwI3sEgkAp85HUlVxD%2BaunZfC2bMnfX369OG6Lrx%2BTRSXU167VI%2FWpMCBCSrJp8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cf3eaa52966fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/3 200 OK
date: Tue, 30 May 2023 03:33:36 GMT
content-type: application/javascript
last-modified: Sat, 24 Dec 2022 06:38:19 GMT
etag: W/"63a69e5b-1538f"
expires: Tue, 30 May 2023 18:25:13 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 32903
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O3YGJ76CooZDC5205zsOxqDrhJofCnMCMEkwZh%2FtoNlbRAfZ%2FOWdn7tp4Ql2Uy8mERoEdEUEK3DH6rMoDg1gRmNeH2nZ0TM9aCmRNHn2xkza4%2Bb7ezzfQEq0cQ2K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf3eaa73d70b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

HTTP/2 200 OK
server: nginx
date: Tue, 30 May 2023 03:33:36 GMT
content-type: application/javascript
last-modified: Mon, 29 May 2023 10:02:24 GMT
etag: W/"64747830-a442"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

HTTP/3 302 Found
date: Tue, 30 May 2023 03:33:47 GMT
content-length: 0
location: https://bokfuj.com/cl/2cf9977e05089d81?p1=d2is008ulc2g1r2p2rufmo1c&p2=&source=PropellerAds%20NEW2&site=
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
set-cookie: cc-v4=54gb9JbUlNurlCBY%2Ft%2BhPsk4dFqKnq3USOMYxxLkZHqTOl7EyZS0z3tWMg53lqJ0CxVEfAZdsqMWWqt6EcbCU34xbvD3uAmTqIB7661r4i0zWP%2BoI5ihNfsi0mLUKtuOnD8zLyAIchCUZ0qnSzkUTg%3D%3D; Max-Age=31536000; Expires=Wed, 29-May-2024 03:33:47 GMT; Domain=xyclick.space; Path=/; HttpOnly
27726a64-af12-4802-92b9-c9c0ea622b43-clk-v4=27726a64-af12-4802-92b9-c9c0ea622b43; Max-Age=86400; Expires=Wed, 31-May-2023 03:33:47 GMT; Domain=xyclick.space; Path=/; HttpOnly
27726a64-af12-4802-92b9-c9c0ea622b43-v4=WkT1Fouok5ab8aP9h6YuPodthTGK6vlaAtHW2WYwwxA; Max-Age=86400; Expires=Wed, 31-May-2023 03:33:47 GMT; Domain=xyclick.space; Path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9M9uBQfRKfQiMOVpEWJx7px2nVuV2VqS%2BbsMhWp5sDKhDAv4NBHE4jMIXH6b7bJdauHSUxqRQLiFlvKC3jNdK%2B2BTlpGV7MngAE4dUuUoeL9K8FN8t4GoFW8%2FqVvhLwI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cf3eaebc922b527-OSL
alt-svc: h3=":443"; ma=86400

HTTP/1.1 302 Found
Server: nginx/1.19.10
Date: Tue, 30 May 2023 03:33:49 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 6
Connection: keep-alive
X-Powered-By: PHP/8.1.17
Set-Cookie: PHPSESSID=b2d8257c5b2bbc3c59ef65f2fe705f64_545; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: http://103.56.211.129/he_test/getHeaderForDhiragu.php?url=https%3A%2F%2Fp.hungama.com%2Fnorway_mm_play%2Findex.php%2Fpromotion%2Fpreview%2F3%3Faff_id%3D1641%26click_id%3D4634827526%2F
Access-Control-Allow-Origin: *

HTTP/3 200 OK
date: Tue, 30 May 2023 03:33:36 GMT
content-type: application/javascript
last-modified: Sat, 24 Dec 2022 06:38:19 GMT
etag: W/"63a69e5b-261"
expires: Tue, 30 May 2023 18:25:13 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 32903
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NBiH9L0hE4z7qsU%2Fd9iExwwdR4JfsF2%2BgrDRoCrRqO1rZ1KxmR19RLaStRQdD%2FC7WH0IzZiTnDwctCa1BE07Nr%2BD8L510rxOmsxCiBWlC0aNLHrVZYEzhi%2Fo%2FStQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf3eaa73d71b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400