HTTP/1.1 200 OK
Date: Mon, 05 Jun 2023 23:13:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 170591
Connection: keep-alive
Set-Cookie: AWSALB=f+p/iozwkX4V5FmWDZDgKzANRZVwrz82K0LC5U+G8JCIn7j5/F5u/aqtDgd1A7yz5jenK2UgZquY+XDHt/10+MB1O4nWhaC/8Zu/fp3C8nZI0/WQNOYjye9Svng+; Expires=Mon, 12 Jun 2023 23:13:06 GMT; Path=/
AWSALBCORS=f+p/iozwkX4V5FmWDZDgKzANRZVwrz82K0LC5U+G8JCIn7j5/F5u/aqtDgd1A7yz5jenK2UgZquY+XDHt/10+MB1O4nWhaC/8Zu/fp3C8nZI0/WQNOYjye9Svng+; Expires=Mon, 12 Jun 2023 23:13:06 GMT; Path=/; SameSite=None
Server: nginx
Expires: Mon, 05 Jun 2023 23:18:07 GMT
Cache-Control: max-age=300
X-Frame-Options: SAMEORIGIN
Vary: Accept-Language, Cookie
Content-Language: en

HTTP/1.1 200 OK
Date: Mon, 05 Jun 2023 23:13:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 592
Connection: keep-alive
Set-Cookie: AWSALB=w9A8Hjg436wbeVE7v/6H1UeVDzpT3XIN5+xFbN9Odnqgc+wry/HsezNjp9hRUnWshqrl4ryqkjEppht1DoL3Ynl8JjmcVgXCZ1Vi7fPtQ4PY+eGDFvMOpRIa8OF1; Expires=Mon, 12 Jun 2023 23:13:07 GMT; Path=/
AWSALBCORS=w9A8Hjg436wbeVE7v/6H1UeVDzpT3XIN5+xFbN9Odnqgc+wry/HsezNjp9hRUnWshqrl4ryqkjEppht1DoL3Ynl8JjmcVgXCZ1Vi7fPtQ4PY+eGDFvMOpRIa8OF1; Expires=Mon, 12 Jun 2023 23:13:07 GMT; Path=/; SameSite=None
Server: nginx
Vary: Accept-Encoding, Accept-Language, Cookie
Content-Encoding: gzip
Content-Language: en

HTTP/1.1 200 OK
Date: Mon, 05 Jun 2023 23:13:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=1680
ETag: W/"3ae56d32551602b41f9046c14d1cfde2"
Last-Modified: Wed, 13 Mar 2019 00:03:12 GMT
x-amz-id-2: hoKGF2DENF0Fxpfk9aX2Txj0orTMbszygnDmGFSC4SoL/4C3WQsM9k4Y5ZmrshXNgXN64qzAUMY=
x-amz-request-id: 9NDC432NBG524RW1
CF-Cache-Status: HIT
Age: 6221
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rq49mIGV52onkgq0MmOMkxKmVfRU9tJuHqVKNMufpvKkpWWaXefcO4s%2FUWFmhWcLTZtk%2Bxjl4sDmJA1hyQfH4jq1oPxXvJPqAWlj3JVOj7Wzr1LzFAYjy8s%2B7XB63YhGUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d2c1ab60bd30b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

HTTP/1.1 302 Found
Server: nginx
Date: Mon, 05 Jun 2023 23:13:07 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 134nwziqgh
Raund: 2ww
Location: https://go.savethereef.xyz/redirect?feed=557030&url=t3.hightid.com&subid=d5b9e574&query=&pub_clickid=647e6c03afe715275238185a&default_url=https%3A%2F%2Ft4.lowtid.com%2Fn.php%3Fp%3Dc%3A1ighcaypoihz05u69%26d%3D61e943f4a56e02198e0b0501%26s%3Ddu.%7Bpubfeed%7D%26d2%3D%7Breferrer_domain%7D

HTTP/1.1 302 Found
Server: nginx
Date: Mon, 05 Jun 2023 23:13:08 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://t4.lowtid.com/n.php?p=c:1ighcaypoihz05u69&d=61e943f4a56e02198e0b0501&s=du.557030&d2=t3.hightid.com
Pragma: no-cache

HTTP/1.1 302 Found
Server: nginx
Date: Mon, 05 Jun 2023 23:13:09 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 12mw6ufnb4
Raund: 2s7
Location: https://go.savethereef.xyz/redirect?feed=465513&url=t4.lowtid.com&subid=custom_10utabg6hk.no.linux.firefox&query=du.557030&pub_clickid=647e6c05cd73d655b92ecf36&default_url=https%3A%2F%2Ft10.lowtid.com%2Fd.php%3Fp%3Dc%3A9qopki6xwqp78c2dg%26d%3D603611c5b7eaf46891533240%26s%3Ddu.%7Bpubfeed%7D%26d2%3D%7Breferrer_domain%7D

HTTP/1.1 302 Found
Server: nginx
Date: Mon, 05 Jun 2023 23:13:09 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://track.trackingtraffo.com/pop/imp?auth=mz3u78&c=9WZDL8I58kh1F6BLVQUL_jtmCIXL0Vc2x1Y23e9tMMcNzZEAR_lBmEitchW9gOKORRUTfV7bwit2zRzni9DkAvq_fOP2vcmWGXbdlDQFccXkoWM-C810ZDvEmUXByRVnaDeQx8F95j1q_XsZ0c3NYZoHbLpiT8s59M0MOoMVIp8vAPbKCIOE_vmAoPFLzTBt0hL_bLKtEiYy9aD0ZR4LuCmmF9SL7AD7GA7jntGpWd-PDi6cMwIPclyMoUU1AIbnu--iC6x3SO7F5g8krdTLU5PpQ6m-qMw7ncCvXDB-h4Pg9_audDD2LPWlu5b_4xuAS9kTiqnJeGjLiQysihTUhPQK_klZtj9BnUEXV_kNpHTomBvfTsyeMQtNlpdKfbsDpSqtWNI94e7kJeLTDsinM3ElrUJyrpByt8vcfyBQ2uFsV1ofsIU3ZsGoAzRBIzwlFDrl58euYWX_zcglD0_gwz1QuuP5OGFYtTenZSyO6huPWxum-6u8LEubmyfNrsEx3YpBD6p3r0bvv0IrShDhG1ckZExPhQqfCNJzRjPMeXRd-wVOFSN7UN8FKh9QNFqdhdgpQMoc9uy23otFXilC-mNpw4sq-HpY8lP04BuAbJgZkXt_rsCRoUcBiyXnBzHHjv9HydEsE_jbByzp5KhNSOy1BDc6ngGupHuJ5teyotxeHRaFvUI7nw
Pragma: no-cache

HTTP/1.1 200 OK
Date: Mon, 05 Jun 2023 23:13:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Jun 2023 18:28:21 GMT
Expires: Sat, 10 Jun 2023 18:28:20 GMT
Etag: "ac824575391d8f46f80ac6dbe5c6f4e90aae72c9"
Cache-Control: max-age=415765,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d2c1ac5bd04b50b-OSL

HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 05 Jun 2023 23:13:10 GMT
Content-Length: 0
Connection: keep-alive
Location: https://plinksplanet.com/click.php?key=7ouwtln6gqqt7boy1ed6&clickid=61667bf4-c954-45a1-9842-5b8c432fc29b&cost=0.0031&PUB_ID=118&SUB_ID=558689&KEYWORD=du.557030&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-06-05&BID_PUB=0.0031&CR_ID=363075&PUB_NAME=Yeesshh-POP 2

HTTP/2 307 Temporary Redirect
cache-control: private,no-cache, no-store
pragma: no-cache
content-type: text/html
location: https://ivimedia.world/prematch?btag=654481_C9458E613C9A4DB88A83F68F0DBEEC4E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-PromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-PromoSport&subid=7e7e8pmholpa99l616
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a19267%2c%22BID%22%3a1478%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1686006790935)%5c%2f%22%2c%22CookieTag%22%3a%22147819267451240919C2023652313%22%7d%5d; SameSite=None;; domain=.hellpartners.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22193346988%7c1%22%7d%5d; domain=.hellpartners.com; expires=Wed, 05-Jun-3022 23:13:10 GMT; path=/; secure; SameSite=Strict
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
x-powered-by: ASP.NET
x-azure-ref: 0Bmx+ZAAAAACB9pgubzD5SpiVCzg0LmAkU1ZHMjBFREdFMDYwOAA4M2FkYmU2OS1mMzY0LTQ4MzgtYjNmZC0zNDU0OTA3MzQ4OWE=
x-cache: CONFIG_NOCACHE
date: Mon, 05 Jun 2023 23:13:10 GMT
content-length: 0
X-Firefox-Spdy: h2

HTTP/1.1 302 Found
Server: nginx/1.20.2
Date: Mon, 05 Jun 2023 23:13:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://ivibet.com/prematch?btag=654481_C9458E613C9A4DB88A83F68F0DBEEC4E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-PromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-PromoSport&subid=7e7e8pmholpa99l616
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
Access-Control-Expose-Headers: Content-Length,Content-Range

HTTP/2 200 OK
date: Mon, 05 Jun 2023 23:13:11 GMT
content-type: image/gif
content-length: 155794
cf-ray: 7d2c1ad0ec9db505-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 5654
cache-control: public, max-age=14400
last-modified: Mon, 05 Jun 2023 21:38:57 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FmyMoWtYACw6BbJ%2BHnoozgbWlkEXMP5l0BmXgekMGROZ6f9tf40sa4ser9UkM6ZL8hd%2BMO5QSXWeDMA6DUUoEoojQY4PwfUC274Z5ROKByDd4wi2vV4QgDaFIVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 23:13:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 05 Jun 2023 23:13:11 GMT
Last-Modified: Mon, 05 Jun 2023 22:42:18 GMT
Server: ECAcc (dcb/7EDB)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4uKRDv20JXYOKHh-MG3_QNAnK8Q4T0GPJl84fD6EkmtaiddL0Bmqjw==
Age: 1854

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 23:13:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 302 Found
server: nginx/1.18.0
date: Mon, 05 Jun 2023 23:13:10 GMT
content-type: text/html; charset=UTF-8
location: https://media.hellpartners.com/redirect.aspx?pid=19267&bid=1478&lpid=50&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-PromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-PromoSport&subid=7e7e8pmholpa99l616
set-cookie: uclick=pmholpa99l; expires=Tue, 06-Jun-2023 23:13:10 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmholpa99l-pmholpa99l-q5k26o-2tfn-ush9bl-ire80-irg63y-06617c; expires=Tue, 06-Jun-2023 23:13:10 GMT; Max-Age=86400; path=/; secure; SameSite=none
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Mon, 05 Jun 2023 23:13:11 GMT
content-type: text/css
cf-ray: 7d2c1ad0dc87b505-OSL
cf-cache-status: BYPASS
etag: W/"6479a74e-23699"
last-modified: Fri, 02 Jun 2023 08:24:46 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gY6FygvYWMmsulYT9yroWcAOXrhziLLgTtrX00Z%2FHWAmBSP3aSwY8Vu0paVcQKDEm8qLyFUC2kuyOM%2FbAwTrM9mCSTz2%2B9374N7ofm3zEiSsv2NoD8xs0u19Llo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Mon, 05 Jun 2023 23:13:12 GMT
content-type: font/woff
content-length: 35308
cf-ray: 7d2c1ad3fed0b505-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "6479a772-89ec"
last-modified: Fri, 02 Jun 2023 08:25:22 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G4YnzgRYXBvcSJ9DKZ7kSGYW0q0anG73C90Fd30uSWtmD5JmSPcFukhTe2PPCMtLDCvK86K4S24qJORxRB6gi2VK7K036eNg3E8s1UsUtBBlB2egahFn8ob%2BEO8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Jun 2023 23:13:12 GMT
expires: Mon, 05 Jun 2023 23:13:12 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Jun 2023 21:14:25 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 54531
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 200 OK
last-modified: Thu, 01 Jun 2023 14:09:31 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: qy5XBeta8OzFS72MS4R_ga_mKAAFkxbp
server: AmazonS3
content-encoding: br
etag: W/"2d86416a18357b93458e242c4ffe33e8"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 9AeTQj6yRvw5EQLYaerjbokC5CGZRWxG2De-hFqTpzmj9HGk4vsDtw==
content-length: 26549
cache-control: max-age=28800
expires: Tue, 06 Jun 2023 07:13:12 GMT
date: Mon, 05 Jun 2023 23:13:12 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-security-policy: frame-ancestors 'self' https://st-cdn001.akamaized.net https://ls-cdn001.akamaized.net
cache-control: public, max-age=120, stale-while-revalidate=60, immutable
etag: "03121bd3c5fc656037667f2d03719bf5-3bdce37d2a1ad067acca1d58cc015db0"
content-encoding: gzip
x-ing-v: 2
date: Mon, 05 Jun 2023 23:13:12 GMT
content-length: 60830
vary: Accept-Encoding
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 23:13:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 200 OK
x-guploader-uploadid: ADPycdvwRwzh8bFYSEvN0PE227MrpLDgduQCNLlXTvqgT5Fp23QfKp5QIdS33BhT_ScOW-rw9R_3iZouOMrzlxo1tz59ius7hSYM
x-goog-generation: 1684945245409774
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 42717
content-encoding: gzip
x-goog-hash: crc32c=sJG03w==, md5=jhDe8dGyfwwGyOYI0nAlkA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 42717
server: UploadServer
date: Mon, 05 Jun 2023 23:10:44 GMT
expires: Mon, 05 Jun 2023 23:15:44 GMT
cache-control: public,max-age=300,no-transform
age: 148
last-modified: Wed, 24 May 2023 16:20:45 GMT
etag: "8e10def1d1b27f0c06c8e608d2702590"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2