GET /js/dnsads.js?dfp=1&ad_code=2&adsrc=3 HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 38
last-modified: Mon, 13 Sep 2021 15:50:14 GMT
etag: "613f7336-26"
expires: Tue, 29 Oct 2024 12:33:26 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 493033
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fKX9gORwmhd%2BqwJ0eqqQTZcwiqQfbbRHyq1Hl2y1Snuc1nbheivWr0Pl4o81h8SJTfQjfDHry97RSvJTzBbW0dHpqVmh569nN5lAUNfSEO67X0ebdAig5PpIlXTvrxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888fd9ce256c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19797&sent=27&recv=15&lost=0&retrans=0&sent_bytes=16149&recv_bytes=3181&delivery_rate=2450&cwnd=12000&unsent_bytes=0&cid=dc40a57a2fb08041&ts=181&x=1", cfExtPri, cfHdrFlush;dur=44

GET /72p1shtbayoc.jpg HTTP/1.1
Host: videothumbs.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 28 Oct 2024 05:30:40 GMT
content-type: image/jpeg
content-length: 20052
last-modified: Thu, 13 Apr 2023 04:04:04 GMT
etag: "64377f34-4e54"
expires: Mon, 04 Nov 2024 00:51:13 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 71371
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TG3G0MVujRJCYIMYDPAhgkuZ1nUhhrFJ04t47UoZV0Em%2F87FLIylB478Y7P896T578eulyq1XpzvIFwE4vAs9pu5Q8ZqKK4CpmmCKRxDmi0d1yUsWSvJI4oUZ1AjBsRHBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9889021868b521-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=16538&sent=6&recv=9&lost=0&retrans=0&sent_bytes=3208&recv_bytes=1045&delivery_rate=260932&cwnd=252&unsent_bytes=0&cid=495d28f492c5e71a&ts=45&x=0"
X-Firefox-Spdy: h2

GET /hls2/01/03483/qqsl86ogy3f6_x/master.m3u8?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y&s=1730093439&e=10800&f=25082241&srv=25&asn=50304&sp=5500&p= HTTP/1.1
Host: be2719.rcr22.ams01.cdn112.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://6oszwqmr.xyz
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Oct 2024 05:30:40 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Mon, 28 Oct 2024 05:30:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 29 Oct 2024 02:18:46 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: HIT
Content-Encoding: gzip

GET /hls2/01/03483/qqsl86ogy3f6_x/index-v1-a1.m3u8?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y&s=1730093439&e=10800&f=25082241&srv=25&asn=50304&sp=5500&p= HTTP/1.1
Host: be2719.rcr22.ams01.cdn112.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://6oszwqmr.xyz
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Oct 2024 05:30:40 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Mon, 28 Oct 2024 05:30:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 29 Oct 2024 02:18:46 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: HIT
Content-Encoding: gzip

GET /hls2/01/03483/qqsl86ogy3f6_x/encryption.key?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y&s=1730093439&e=10800&f=25082241&srv=25&asn=50304&sp=5500&p= HTTP/1.1
Host: be2719.rcr22.ams01.cdn112.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://6oszwqmr.xyz
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Oct 2024 05:30:40 GMT
Content-Type: application/octet-stream
Content-Length: 16
Connection: keep-alive
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Expires: Tue, 29 Oct 2024 01:03:49 GMT
ETag: "5f693e80-10"
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: HIT
Accept-Ranges: bytes

GET /favicon.ico HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:40 GMT
content-type: image/x-icon
last-modified: Mon, 02 Feb 2015 19:26:28 GMT
etag: W/"54cfcf64-47e"
expires: Mon, 04 Nov 2024 00:15:40 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 18900
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tz3D6M0w9PzvSUZ7%2Bm2IMy4TskRWZqjS3o9JPTnr2HB%2F3jfl%2FCiT8XeK7RtBMtDS0i%2BBLJ44MWPnnbNrgpOm%2Bs%2FbXBqe6cj2OzqKRHhr5EoiKSMfQNvkXoUCMGtjIl4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9889005fcd56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=20100&sent=333&recv=32&lost=0&retrans=0&sent_bytes=369493&recv_bytes=5189&delivery_rate=3416630&cwnd=187200&unsent_bytes=0&cid=dc40a57a2fb08041&ts=619&x=1", cfExtPri, cfHdrFlush;dur=0

GET /js/bafsd.js HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 04 Oct 2024 05:52:43 GMT
etag: W/"66ff82ab-358a"
expires: Tue, 29 Oct 2024 12:33:26 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 493033
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DAn76AnHb%2Bc2MHL3iRSIvlv5EQicSDHBfV3H39sEEV80tPIccNxwxoL5YerBs7kEeId80bbty6Bpn6WDFBJYGeqL6fIijZeB8LRJ%2FTL3g94VXAB5GULZRagqHiiMm5g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888fd9cdd56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19797&sent=27&recv=15&lost=0&retrans=0&sent_bytes=16149&recv_bytes=3181&delivery_rate=2450&cwnd=12000&unsent_bytes=0&cid=dc40a57a2fb08041&ts=177&x=1", cfExtPri, cfHdrFlush;dur=13

GET /hls2/01/03483/qqsl86ogy3f6_x/seg-1-v1-a1.ts?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y&s=1730093439&e=10800&f=25082241&srv=25&asn=50304&sp=5500&p= HTTP/1.1
Host: be2719.rcr22.ams01.cdn112.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://6oszwqmr.xyz
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Oct 2024 05:30:40 GMT
Content-Type: video/MP2T
Content-Length: 1582592
Connection: keep-alive
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Expires: Tue, 29 Oct 2024 01:03:49 GMT
ETag: "5f693e80-182600"
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: HIT
Accept-Ranges: bytes

GET /adcgi?id=80557588 HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 504 Gateway Timeout
date: Mon, 28 Oct 2024 05:30:41 GMT
content-type: text/html; charset=UTF-8
content-length: 6323
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=imZGmhsL3jXiJaxrl6dJ3q2hEHVfySEVpZu2v4cGMYDuHjTeunbWWGdcigwG1GuaQV5C3FWt8iiF4hU%2F7UE330ReYYklepWdV1wjigU7491JPWfYVVpZrKAmEZ2N0YQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 8d9889054d6356c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22204&sent=335&recv=34&lost=0&retrans=0&sent_bytes=370595&recv_bytes=5507&delivery_rate=22509&cwnd=187200&unsent_bytes=0&cid=dc40a57a2fb08041&ts=1570&x=1", cfExtPri, cfHdrFlush;dur=0

GET / HTTP/1.1
Host: uqqmj868.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 28 Oct 2024 05:30:49 GMT
content-type: text/html; charset=UTF-8
location: https://epededonemile.com/?fmon=1100125
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0J5CkOnn4NowPBZ1Ea5VBBZekb2TUVfH5SV28dEpnTiyE6blNuZs4b8OObtwxN5pRFqCsMfhJsL4se7iSvyVpnlt9nR1Z2SoqciBIJT2Z6QS55WXzQtVmWZWOIKqchQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8d98893a1958b4f9-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=16515&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3204&recv_bytes=1133&delivery_rate=261230&cwnd=253&unsent_bytes=0&cid=3bb65696cc57e1b9&ts=68&x=0"
X-Firefox-Spdy: h2

GET /click?i=1CiyxNEEzHs_0 HTTP/1.1
Host: xml-v4.tri.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://6oszwqmr.xyz/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx
Date: Mon, 28 Oct 2024 05:30:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://mybiddd.com/in/p/?spot_id=2004558&cat=25&sub_id=507232629

GET /assets/css/jw8-theme.css?v=3.0.6 HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: text/css
last-modified: Wed, 03 Apr 2024 15:50:39 GMT
etag: W/"660d7acf-62a2"
expires: Thu, 31 Oct 2024 00:03:57 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 365202
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kc2e%2BOLdZq8Nyz3io4iYD2PYx8%2FzmNl2dEuwxtNHFEJHRdsL%2BJWSNHtibd1XEr9n1h4qChLdCH%2B9T7E796GABtNOW%2BIFoIBUUjiMxccaVeUhOz0tMIzjqQe88%2FLs9k0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888ffef6656c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21298&sent=140&recv=27&lost=0&retrans=0&sent_bytes=141662&recv_bytes=4705&delivery_rate=850336&cwnd=93600&unsent_bytes=0&cid=dc40a57a2fb08041&ts=546&x=1", cfExtPri, cfHdrFlush;dur=0

GET /popunder/in/click/?mid=3988119599313852734&pid=0&site=&sc=NO&usage_type=DCH&subid=507232629&sid=0&cid=0&price=0&is_cpm=1&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=6oszwqmr.xyz&hostname=auc-popunder-hz-2&site_id=0&spot_id=2004558&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=&iabcat=IAB25&min_cpm=0.035&placement_type_id=7&skin_test=&verify_hash=b8c407a673f708e814f365357ec07d85&score=515.0593812327122&durl=&ml=&tag_ab=&original_bid=0&user_fp=0&v2=0&pop_type=0&space_id=0&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB25&ip_mismatch=false&ua_mismatch=false&ssp=3758&rc=0&v2_track=0&otype=0&mn=0&priority=0&bb=0.035&url=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D507232629%26site_id%3D%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D%26spot_id%3D2004558%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252F6oszwqmr.xyz%252F%26sid%3D0%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D515.0593812327122%26bf%3D0.035%26iabcat%3DIAB25%26allowed_labels%3D&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0&is_direct=2&label_ids=&site_id64=&sp_cl=0&act_sess=0&sp_scr=0&intes=&izb=&ang=0&act_su=0&interest_vertical_ids=&v_scroll_freq=&time_sess=&ext_campaign_id=&scroll_percent=0&empty_clicks=0&aid=0&high_freq_clicks=0&dev_console_activity=0&topics=&client_price=0&direct_client_price=0&o_d=&is_webview=0&timezone_olson=&timezone_ip=Europe/Oslo&offer_label_ids=&client_payment_model=&auction_time=1730093450&is_in_app=0&delivery_method=js_redirect&user_keywords=&keywords= HTTP/1.1
Host: mybiddd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mybiddd.com/in/p/?spot_id=2004558&cat=25&sub_id=507232629
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 28 Oct 2024 05:30:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://popdemission.com/in/849/?source=507232629&site_id=&utm1=&utm2=&utm3=&utm4=&idzone=&spot_id=2004558&mo=&ve=&ad_tags=&p=https%3A%2F%2F6oszwqmr.xyz%2F&sid=0&katds_labels=&is_iframe=1&btype=0&score=515.0593812327122&bf=0.035&iabcat=IAB25&allowed_labels=
X-Firefox-Spdy: h2

GET /in/849/?source=507232629&site_id=&utm1=&utm2=&utm3=&utm4=&idzone=&spot_id=2004558&mo=&ve=&ad_tags=&p=https%3A%2F%2F6oszwqmr.xyz%2F&sid=0&katds_labels=&is_iframe=1&btype=0&score=515.0593812327122&bf=0.035&iabcat=IAB25&allowed_labels= HTTP/1.1
Host: popdemission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mybiddd.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx/1.20.1
date: Mon, 28 Oct 2024 05:30:51 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://kaminari.systems/v1/click?kmnrKey=891498445&sub1=2004558&u=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D507232629%26spot_id%3D299762%26p%3Dhttps%253A%252F%252Fgloporn.com%252F
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 849.0=1; expires=Tue, 29 Oct 2024 05:30:50 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2

GET /v1/click?kmnrKey=891498445&sub1=2004558&u=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D507232629%26spot_id%3D299762%26p%3Dhttps%253A%252F%252Fgloporn.com%252F HTTP/1.1
Host: kaminari.systems
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mybiddd.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 28 Oct 2024 05:30:51 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
accept-ch: Width, Viewport-Width, DPR, Device-Memory, Downlink, RTT, ECT, Save-Data, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

GET /?fmon=1100125 HTTP/1.1
Host: epededonemile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://6oszwqmr.xyz/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: text/plain
content-length: 0
location: https://xml-v4.tri.media/click?i=1CiyxNEEzHs_0
date: Mon, 28 Oct 2024 05:30:49 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=62c4e097-a5dd-42f0-82a3-6199e5999a66
x-cache: Miss from cloudfront
via: 1.1 17c1b187a3afe016510e55151109cc30.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: UGG25Ft-xVhjMBXXlKXWkEyVYwpXYAhNRs8YbU3SBJV2g25rwgB-bg==
X-Firefox-Spdy: h2

GET /css/main.css?v=4 HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: text/css
last-modified: Thu, 26 Sep 2024 18:06:54 GMT
etag: W/"66f5a2be-c03c"
expires: Tue, 29 Oct 2024 12:33:26 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 493033
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f0uDA%2FFekphBV7QQjWzr7f4FIv9ARpZonfXIgQKn9aDOvgtIpdcukEI0KzbYn5Bx7F%2FfUp4jWxQLh%2Fn73T%2FyZFvfF7vIbGmq7c22ROMeH8jAj6UePiWnUruiBESxXT0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888fd8cca56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19797&sent=22&recv=15&lost=0&retrans=0&sent_bytes=10666&recv_bytes=3181&delivery_rate=2450&cwnd=12000&unsent_bytes=0&cid=dc40a57a2fb08041&ts=171&x=1", cfExtPri, cfHdrFlush;dur=0

GET /js/dwarf.js HTTP/1.1
Host: ieyri61b.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2024 07:44:38 GMT
etag: W/"6704e2e6-1154e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2381
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LwNTprdPpeVeBLSTnUwq0oqh6qSLYkyBeY%2BiJDObxE1PC6Gud3tacU58ujkRauUa7Qm1HjkR7L3DcvydSAdYTMswK02l68fGmSFlPrVKv4J2IyRcyPZLHHz0KVddzxk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888fe4f7556a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=16483&sent=6&recv=9&lost=0&retrans=0&sent_bytes=3279&recv_bytes=1149&delivery_rate=262461&cwnd=252&unsent_bytes=0&cid=b24955fc46842ebb&ts=47&x=0"
X-Firefox-Spdy: h2

GET /player/jw8_26/jwplayer.core.controls.js?v=2 HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 03 Apr 2024 09:09:34 GMT
etag: W/"660d1cce-4fcf7"
expires: Tue, 29 Oct 2024 12:34:09 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 492990
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UrELQwhUxsNDuL5k4iaJ155%2BUUXqs0LSE8Uw5OeeYCocBXPAvGf3pu%2FbVC6KMwd4%2FdBOdm55gV7r1LbPznz2MuMMqygaprlSPf%2BLRtEEz7cPweQtsHjuGVXLnOs4QYM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888ffdf6356c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21298&sent=146&recv=27&lost=0&retrans=0&sent_bytes=147828&recv_bytes=4705&delivery_rate=850336&cwnd=93600&unsent_bytes=0&cid=dc40a57a2fb08041&ts=554&x=1", cfExtPri, cfHdrFlush;dur=0

GET /player/jw8_26/jwplayer.js?v=5.0.2 HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 05 Apr 2024 14:58:43 GMT
etag: W/"661011a3-1b351"
expires: Tue, 29 Oct 2024 12:33:26 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 493033
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=il%2FE05x7Hy%2Bqbko1gqgSSO3Pbf5gmoDlf7kW6U47tW1FJCIewATbp2fYUK7ix7qxOB6EKwvhVQxGY2N%2BIIxA8T9UvchgfIb6VQHEWcO3h%2F%2BCO8t9vRWFZPtNIiiaLeA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888fd9ce056c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19797&sent=27&recv=15&lost=0&retrans=0&sent_bytes=16149&recv_bytes=3181&delivery_rate=2450&cwnd=12000&unsent_bytes=0&cid=dc40a57a2fb08041&ts=181&x=1", cfExtPri, cfHdrFlush;dur=9

GET /player/jw8/vast.js HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Sep 2022 10:34:42 GMT
etag: W/"6319c542-1a26a"
expires: Thu, 31 Oct 2024 23:54:11 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 279388
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FBGWuht2kZ%2BatXng6FxamWRAOIg0QQSE8nB%2BoQPrir77NIuVj5Khlk%2BfFmVwliV0f7LxE0XoBZH0Pen6Yai7rvNEUGhmbvpKE1YOIj0Q1yQeUg%2Buh%2FbDRoTxGp0pv9M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888ff7f0156c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=20821&sent=108&recv=23&lost=0&retrans=0&sent_bytes=107935&recv_bytes=3767&delivery_rate=1172532&cwnd=93600&unsent_bytes=0&cid=dc40a57a2fb08041&ts=482&x=1", cfExtPri, cfHdrFlush;dur=0

GET /player/jw8_26/provider.hlsjs.js?v=2 HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 05 Apr 2024 14:57:50 GMT
etag: W/"6610116e-6742f"
expires: Tue, 29 Oct 2024 12:34:09 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 492990
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HEF3lBzoysJHHtZGU%2F5Ry2TmQ1b43S5bXDLJBN%2BF6EDmHU%2FSiBiekyJqR6icL7uzmH1xv%2F1pqiw2MnwCCoOB78YEqYn7uvPGYdkJL0FcKpOyjCGmiKr8E2zw7DwrH50%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888ffef6c56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21298&sent=219&recv=27&lost=0&retrans=0&sent_bytes=235262&recv_bytes=4705&delivery_rate=850336&cwnd=93600&unsent_bytes=0&cid=dc40a57a2fb08041&ts=558&x=1", cfExtPri, cfHdrFlush;dur=6

GET /js/jquery.js HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
etag: W/"603e8adc-15d9d"
expires: Tue, 29 Oct 2024 12:33:26 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 493033
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2BvcSnEvGrEeiU2GL5CMwN4E%2BzbtLJEelabmKvr64Tj72ie0hr1bvoxrsMa0CGkkwC2CgAOAzoW%2F76QRJiwenJgfprwlcWoD8R2GMvTZHoo%2BlXDFNTMFPKwUbIMY6Ns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888fd8ccd56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19797&sent=27&recv=15&lost=0&retrans=0&sent_bytes=16149&recv_bytes=3181&delivery_rate=2450&cwnd=12000&unsent_bytes=0&cid=dc40a57a2fb08041&ts=177&x=1", cfExtPri, cfHdrFlush;dur=11

GET /js/jquery.cookie.js HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 31 May 2011 12:53:56 GMT
etag: W/"4de4e4e4-10eb"
expires: Sun, 03 Nov 2024 07:11:42 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 80337
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DV2yzFF5a4DkMHaaz2M2xj%2F5FMqeXWu9zfaTgPIVKjjp4HGqkwHPeSrvzeJB17sfhCy1brgfGtqJAv6omjbaGJcITpRGwVXk1x%2FrYk0EcS56JHo%2FfvjhWeBLEGbDRg4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888fd8cd156c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19797&sent=27&recv=15&lost=0&retrans=0&sent_bytes=16149&recv_bytes=3181&delivery_rate=2450&cwnd=12000&unsent_bytes=0&cid=dc40a57a2fb08041&ts=176&x=1", cfExtPri, cfHdrFlush;dur=14

GET /js/ls.js HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Feb 2023 11:28:54 GMT
etag: W/"63eb7076-80f"
expires: Tue, 29 Oct 2024 12:33:26 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 493033
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W8irpBUmwzMXtWzhupaBTa7U56agydm%2B1MWR1DtJxcF2kPFwaKpkvWJx8d2ULBJyRUbRfGo7Ilogm0g0w07CoCXzcfy0ITgpwIK7w466vllvumx1IbP5ozwyo8VxIds%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888fd8cd256c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19797&sent=20&recv=15&lost=0&retrans=0&sent_bytes=9030&recv_bytes=3181&delivery_rate=2450&cwnd=12000&unsent_bytes=0&cid=dc40a57a2fb08041&ts=171&x=1", cfExtPri, cfHdrFlush;dur=0

GET /in/p/?spot_id=2004558&cat=25&sub_id=507232629 HTTP/1.1
Host: mybiddd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://6oszwqmr.xyz/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.16.0
date: Mon, 28 Oct 2024 05:30:50 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2

GET /in/885/?subid=2044015014&domain=nodomain&target_id=0 HTTP/1.1
Host: kts.cvastico.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kaminari.systems/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 28 Oct 2024 05:30:51 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
access-control-allow-origin: *
set-cookie: 885.0=1; expires=Tue, 29 Oct 2024 05:30:51 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2

GET /cwns/72p1shtbayoc?referer=bflix.sh HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: text/html; charset=UTF-8
expires: Sun, 27 Oct 2024 05:30:39 GMT
set-cookie: lang=1; domain=.6oszwqmr.xyz; path=/; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NC0b3wOkI3lkhxu8giXYbroJ2ObJMxorrl%2Fq%2F3KMuat84zmeRLVKYSRCO%2FBUtyD9CiVGi8NqefjcIlVEc4TMAoEAFnIIXZPK4rILed93syXdpyyEsXN%2FftT336MRG0c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8d9888fb2bea7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=21855&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3199&recv_bytes=1141&delivery_rate=262382&cwnd=254&unsent_bytes=0&cid=cb6a4edd3f65af56&ts=234&x=0"
X-Firefox-Spdy: h2

GET /js/xupload.js HTTP/1.1
Host: 6oszwqmr.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Oct 2024 05:30:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 04 Aug 2021 13:41:52 GMT
etag: W/"610a9920-2a73"
expires: Mon, 04 Nov 2024 01:10:13 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 15626
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2BzzZPTAn0GUUdE31mfmTzn%2Fh9C4wgVJYv1LATsVTHwKaGnOP5QynfZh7mxB6Y93G04rg9bYHhQnYXZo4SbdSC4PMCgiSvWTjGGh5JIMlmgVK3KfnHQILewB%2FTqgXJU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d9888fd8cce56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19797&sent=15&recv=15&lost=0&retrans=0&sent_bytes=4149&recv_bytes=3181&delivery_rate=2450&cwnd=12000&unsent_bytes=0&cid=dc40a57a2fb08041&ts=170&x=1", cfExtPri, cfHdrFlush;dur=0

GET /CheckCookie?continue=https%3A%2F%2Fwww.google.com%2Fintl%2Fen%2Fimages%2Flogos%2Faccounts_logo.png&followup=https%3A%2F%2Fwww.google.com%2Fintl%2Fen%2Fimages%2Flogos%2Faccounts_logo.png&chtml=LoginDoneHtml&checkedDomains=youtube&checkConnection=youtube%3A291%3A1 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kts.cvastico.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 400 Bad Request
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains
set-cookie: __Host-GAPS=1:S87_ioMZTiZC6kfkZywvyIxtmpX49w:UeEf79C8ZN6226Q_;Path=/;Expires=Wed, 28-Oct-2026 05:30:51 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
content-security-policy: script-src 'nonce-U-nm1lsLnneCETk-65LpRg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 01-Jan-1990 00:00:00 GMT
content-encoding: gzip
date: Mon, 28 Oct 2024 05:30:51 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /in/2669/?subid=2044015014&target_id=0&domain=nodomain&tt={{tt}}&sid={{sid}}&cid={{cid}}&soi={{soi}}&ts={{ts}}&ad_tags=&click_id=cca11d88-90b2-4473-af27-725479f8a4c9&sub_utm_1={{sub_utm_1}}&sub_utm_2={{sub_utm_2}}&&goo=0 HTTP/1.1
Host: kts.cvastico.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kts.cvastico.com/in/885/?subid=2044015014&domain=nodomain&target_id=0
Cookie: 885.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache