POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F4FCC79261ACDA8E1CB81B9FC6524EE560B60740B0CF8107308DC82750DC079A"
Last-Modified: Sat, 29 Jun 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9562
Expires: Sun, 30 Jun 2024 17:53:16 GMT
Date: Sun, 30 Jun 2024 15:13:54 GMT
Connection: keep-alive

GET /NyMRxBiw?landing=1113&sub_id1=00cnv01&sub_id2=831297882513485824&sub_id3=propeller_00cnv01_mi_in_sit-cra_pop_cpm_mix&sub_id4=cpm&sub_id5=propeller&sub_id6=21325707&sub_id7=pop&sub_id8=mi&sub_id9=sit-cra&sub_id10=mix HTTP/1.1
Host: click.traffgopro20.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sun, 30 Jun 2024 15:13:55 GMT
content-type: text/html; charset=utf-8
content-length: 147
location: http://foratraff.com/new-promo/aviator-bonus?click_id=019069b5-b74b-718d-b652-8df79d36f230&value_1=86&value_2=234851
cache-control: no-cache, private
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
request-id: 6a852645ca37c58802382dfb230eac5b
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2

GET /new-promo/aviator-bonus?click_id=019069b5-b74b-718d-b652-8df79d36f230&value_1=86&value_2=234851 HTTP/1.1
Host: foratraff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 30 Jun 2024 15:13:55 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 30 Jun 2024 16:13:55 GMT
Location: https://foratraff.com/new-promo/aviator-bonus?click_id=019069b5-b74b-718d-b652-8df79d36f230&value_1=86&value_2=234851
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oFQ3bU1D6I%2BUF4yNlT7WFQ2AoDbZiuhN1M6IrsbyefEsGuN%2FUxUb7gfTtannOuS3ggID9J8BGoudXcTSIjHSklXCXLTDVmIq4ptlYcuuhPEarQe5oAqjGmQVXdduHuY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 89bf1a5f5e148d67-HEL
alt-svc: h2=":443"; ma=60

GET /new-promo/aviator-bonus?click_id=019069b5-b74b-718d-b652-8df79d36f230&value_1=86&value_2=234851 HTTP/1.1
Host: 4rabet4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Sun, 30 Jun 2024 15:13:55 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Sun, 30 Jun 2024 15:14:10 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R9O9j7qh9lgCrx6Ud%2BJOfSXoXbU8NtoOxhCrWrhJlsNK195LH0v89G51ws4B%2BGgegmTUZPTwUQX7KMlp9Wm61HQC997g6eKEF3bXpJRBaopgqWSBlbv6LplWusiM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89bf1a61c9ec8d81-HEL
content-encoding: br
X-Firefox-Spdy: h2

GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: 4rabet4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://4rabet4.com/new-promo/aviator-bonus?click_id=019069b5-b74b-718d-b652-8df79d36f230&value_1=86&value_2=234851
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 30 Jun 2024 15:13:55 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 26 Jun 2024 17:42:45 GMT
ETag: W/"667c5315-5df3"
Server: cloudflare
CF-RAY: 89bf1a63e8ed4c7e-HEL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sun, 30 Jun 2024 17:13:55 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip

GET /favicon.ico HTTP/1.1
Host: 4rabet4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://4rabet4.com/new-promo/aviator-bonus?click_id=019069b5-b74b-718d-b652-8df79d36f230&value_1=86&value_2=234851
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Sun, 30 Jun 2024 15:13:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Sun, 30 Jun 2024 15:14:10 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uDkHkeZY2kUmwaXyNKl2UNVhGK%2FxrLYEpTekdchMRwl%2FGlNLB0umnJbbwyRrftVTn9XXehKOdLVfo6X47dHG6av83nW231T5Ss1uADKsDh%2BxHNuts0R0%2FH8c91Gp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 89bf1a64392e4c7e-HEL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: 4rabet4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://4rabet4.com/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 30 Jun 2024 15:13:55 GMT
Content-Type: image/png
Content-Length: 3213
Connection: keep-alive
Last-Modified: Wed, 26 Jun 2024 17:42:45 GMT
ETag: "667c5315-c8d"
Server: cloudflare
CF-RAY: 89bf1a648d4a8d84-HEL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sun, 30 Jun 2024 17:13:55 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes

GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: 4rabet4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://4rabet4.com/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 30 Jun 2024 15:13:55 GMT
Content-Type: image/png
Content-Length: 715
Connection: keep-alive
Last-Modified: Wed, 26 Jun 2024 17:42:45 GMT
ETag: "667c5315-2cb"
Server: cloudflare
CF-RAY: 89bf1a648d298dc2-HEL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sun, 30 Jun 2024 17:13:55 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1208B1961307DFB3C91A337DFA900F9BE57F91CAB6A7DD3D7C5E38D2399D5D10"
Last-Modified: Fri, 28 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17136
Expires: Sun, 30 Jun 2024 19:59:32 GMT
Date: Sun, 30 Jun 2024 15:13:56 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1208B1961307DFB3C91A337DFA900F9BE57F91CAB6A7DD3D7C5E38D2399D5D10"
Last-Modified: Fri, 28 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17136
Expires: Sun, 30 Jun 2024 19:59:32 GMT
Date: Sun, 30 Jun 2024 15:13:56 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1208B1961307DFB3C91A337DFA900F9BE57F91CAB6A7DD3D7C5E38D2399D5D10"
Last-Modified: Fri, 28 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17136
Expires: Sun, 30 Jun 2024 19:59:32 GMT
Date: Sun, 30 Jun 2024 15:13:56 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1208B1961307DFB3C91A337DFA900F9BE57F91CAB6A7DD3D7C5E38D2399D5D10"
Last-Modified: Fri, 28 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17136
Expires: Sun, 30 Jun 2024 19:59:32 GMT
Date: Sun, 30 Jun 2024 15:13:56 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1208B1961307DFB3C91A337DFA900F9BE57F91CAB6A7DD3D7C5E38D2399D5D10"
Last-Modified: Fri, 28 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17136
Expires: Sun, 30 Jun 2024 19:59:32 GMT
Date: Sun, 30 Jun 2024 15:13:56 GMT
Connection: keep-alive

GET /index.php?do=new-promo/aviator-bonus&click_id=019069b5-b74b-718d-b652-8df79d36f230&value_1=86&value_2=234851 HTTP/1.1
Host: foratraff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sun, 30 Jun 2024 15:13:55 GMT
content-type: text/html; charset=UTF-8
location: https://4rabet4.com/new-promo/aviator-bonus?click_id=019069b5-b74b-718d-b652-8df79d36f230&value_1=86&value_2=234851
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE, PATCH
access-control-allow-origin: *
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-powered-by: PHP/7.4.6
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BXBaW2kF0Un5e7s9Tp27Wq82N7GzPvLHxhUxTXlINg6e9wrAvVOhHFxUTNw44ij7iyRosehVmRZMoXLYi9x81oBxsZl738OZp9JOAKc0FFPvbM%2BKcTrvvx7eetaIfKo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89bf1a612f708d6f-HEL
X-Firefox-Spdy: h2