GET / HTTP/1.1
Host: lludd-gzr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET / HTTP/1.1
Host: official-kmspico.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 01:01:57 GMT
content-type: text/html
cache-control: no-cache
pragma: no-cache
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

GET /page/bouncy.php?&bpae=GbhGtLvGtUx%2F9rvvPR18GLJcvnuHlawu0DcFIs%2FzH9Dhq4shKTXd%2Br8S6JiNx98piI29cnGKPEKuyqSg8ddzj5B3JUzZUId1%2Flpq6xgedYx32gkRFZ85VWLcqGjyeUFoDgUU8Srcr1hTlPyBY838kEVFIizoq1uO9wD%2FOum%2BfHJS7ZD35w61MmG7d%2Bo%2FtRz%2FxiCQkyaB%2Fk1qFNlAqHbaJxV4drGR3rRwZvHKEjnVOf6Q7YxmbEqKXqCZkT15mLim6%2FJOLMWkxGGURmrgyt0HvKReSe4Tt1Z8%2BkNC7lg2yHTGTIYCjvN15y8kRoP6FCMYJUHekMLqUYoNT3tdB8%2FTYWY5WVzX59deZmGCBW2fzvTd0vGggyJuYbB87%2BTMT0tLSXZ1JbydBE%2F3e4JMwNxBADI8lYZIQ6Bfiv3Mjnye5ijz9zXA7pXUfJ8P1ElfkjjcqkUdZ3uSXiuK7X%2BKScrJP8jUEhIaxB5Hr5iJe1qBkE%2FH75wuTpElnppwOtZrflezSZaMmCeVi%2FFS&redirectType=js&inIframe=false&inPopUp=false HTTP/1.1
Host: official-kmspico.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://official-kmspico.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 01:01:58 GMT
content-type: text/html
cache-control: no-cache
pragma: no-cache
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

GET /zclkvisitor/b3bfe878-2ecc-11f0-a1b4-0affe239efcf/c48f16c0-a519-11ec-9226-0a76dcc61f13?campaignid=8e8e7c70-d8a9-11ef-ba7f-12832fc4c381 HTTP/1.1
Host: netun-oum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://official-kmspico.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 01:01:58 GMT
content-type: text/html;charset=UTF-8
content-length: 3088
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: netun-oum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netun-oum.com/zclkvisitor/b3bfe878-2ecc-11f0-a1b4-0affe239efcf/c48f16c0-a519-11ec-9226-0a76dcc61f13?campaignid=8e8e7c70-d8a9-11ef-ba7f-12832fc4c381
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Mon, 12 May 2025 01:01:58 GMT
content-type: application/json
X-Firefox-Spdy: h2

GET /zclkredirect?visitid=b3bfe878-2ecc-11f0-a1b4-0affe239efcf&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=Mesa%3B%20llvmpipe&timezone=UTC%2B00%3A00&timezoneName=UTC HTTP/1.1
Host: netun-oum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netun-oum.com/zclkvisitor/b3bfe878-2ecc-11f0-a1b4-0affe239efcf/c48f16c0-a519-11ec-9226-0a76dcc61f13?campaignid=8e8e7c70-d8a9-11ef-ba7f-12832fc4c381
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 12 May 2025 01:01:59 GMT
content-length: 0
location: http://lludd-gzr.com
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type
X-Firefox-Spdy: h2