GET /?a=103249&c=133977&s1=5891&s2=674aff725aecba0001607df0 HTTP/1.1
Host: coldskyblue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 258
Content-Type: text/html; charset=utf-8
Date: Sat, 30 Nov 2024 15:48:20 GMT
Location: https://2fasttrackers.com/?a=103249&c=133977&s1=5891&s2=674aff725aecba0001607df0&ckmguid=8c46250f-a0eb-44dd-833e-bc3dc643b57d
Connection: close

GET /?a=103249&c=133977&s1=5891&s2=674aff725aecba0001607df0&ckmguid=8c46250f-a0eb-44dd-833e-bc3dc643b57d HTTP/1.1
Host: 2fasttrackers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 245
Content-Type: text/html; charset=utf-8
Date: Sat, 30 Nov 2024 15:48:21 GMT
Location: https://cyberfriendsclub.com/?utm_campaign=FNg32Z4Ubn&s2=674aff725aecba0001607df0&aid=103249&s1=5891&s3=&s4=
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=Og7uEASLNfF1SJx8W7UZMIU2w8obFvi1q4jro6HBPDP7Vkm1rTfnGA==; domain=.2fasttrackers.com; path=/; HttpOnly
trk=Qesww177hYgomEzgXRXtnYU2w8obFvi1q4jro6HBPDP7Vkm1rTfnGA==; domain=.2fasttrackers.com; expires=Mon, 30-Nov-2026 15:48:21 GMT; path=/; HttpOnly
c108171=Og7uEASLNfGafP+5Qk1ic2YOasyOU3nJzyx+Mjn2JJBu6+V/bMJBZg==; domain=.2fasttrackers.com; expires=Mon, 30-Dec-2024 15:48:21 GMT; path=/; HttpOnly
Connection: close

GET /?utm_campaign=FNg32Z4Ubn&s2=674aff725aecba0001607df0&aid=103249&s1=5891&s3=&s4= HTTP/1.1
Host: cyberfriendsclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://youcantrackthis.com/?c=106795&s1=5891&s5=ZEU-f4780505-546c-4b41-8c44-96c0002087d6&s2=674aff725aecba0001607df0&s3=&s4=&a=103249&zci=FNg32Z4Ubn
referrer-policy: no-referrer
server: nginx/1.17.2
set-cookie: sess-0919faeb87a36ff3915df8f172939a08=MTczMjk4MTcwMXxNMEpDb0t4cEV0d0NxUS05VXBYM1VvMk9lQld2WVpKcEhwVERyYXRXb09ISWI4UTVUb0tuRl9RPXwKs7GG-wrbhaJX5PZu1D2i58i3UIlP-fPjCEZVH1uH8Q==; Max-Age=31536000; HttpOnly
content-length: 0
date: Sat, 30 Nov 2024 15:48:21 GMT
X-Firefox-Spdy: h2

GET /?c=106795&s1=5891&s5=ZEU-f4780505-546c-4b41-8c44-96c0002087d6&s2=674aff725aecba0001607df0&s3=&s4=&a=103249&zci=FNg32Z4Ubn HTTP/1.1
Host: youcantrackthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 141
Content-Type: text/html; charset=utf-8
Date: Sat, 30 Nov 2024 15:48:22 GMT
Location: https://cantfindpage.com
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=DJxbGFVbP6DicOSDkvubloU2w8obFvi1YI0+jogCzC/hGyPiLWW6Cw==; domain=.youcantrackthis.com; path=/; HttpOnly
trk=Qesww177hYi+Fo/8snLLaIU2w8obFvi1YI0+jogCzC/hGyPiLWW6Cw==; domain=.youcantrackthis.com; expires=Mon, 30-Nov-2026 15:48:22 GMT; path=/; HttpOnly
Connection: close

GET / HTTP/1.1
Host: cantfindpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
content-length: 548
last-modified: Tue, 03 Sep 2019 07:08:10 GMT
server: AmazonS3
date: Sat, 30 Nov 2024 04:36:34 GMT
etag: "8ee9215597e0a8e39d448904d8390b79"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6K06s_zYhS-doKKKeBGuQISvsx1kTOhapJ6qo5Z0i1cxFkEcn4au2Q==
age: 40309
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: cantfindpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cantfindpage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 290
last-modified: Tue, 03 Sep 2019 14:18:23 GMT
server: AmazonS3
date: Sat, 30 Nov 2024 07:27:56 GMT
etag: "c7624d822840aaccdc440fd4db978b52"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: l-_NOgpEBMn2cvBz8Z0m4c5So8Vmv2Gn9nMPK0A7hKCMUEHlItOhtg==
age: 30027
X-Firefox-Spdy: h2