GET /r.go?r=http://kwanic.com/pkplayhoodau_rea/?srv=playhood&p=jazz&ad=rea&pubid=3277&aff_sub=c4142971-47e2-40bb-ab80-99b578d54f3b HTTP/1.1
Host: go1.fere.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 08 Apr 2024 20:11:17 GMT
content-type: text/html; charset=utf-8
content-length: 352
content-encoding: gzip
expires: Mon, 03 Jul 2001 06:00:00 GMT
last-modified: Janon, 08 04 2024 20:11:17 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
pragma: no-cache
x-backend-server: nl2-go-web-244
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: go1.fere.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go1.fere.work/r.go?r=http://kwanic.com/pkplayhoodau_rea/?srv=playhood&p=jazz&ad=rea&pubid=3277&aff_sub=c4142971-47e2-40bb-ab80-99b578d54f3b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Mon, 08 Apr 2024 20:11:17 GMT
content-type: text/html
content-length: 146
x-backend-server: nl2-go-web-244
X-Firefox-Spdy: h2

GET /dl/all/offer/sub/video/style.css HTTP/1.1
Host: www.funkyoffer.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.funkyoffer.online/dl/all/offer/sub/video/?tid=62jlwczk96ltbh6uf3688kkwo,17414106,5,23964&flow=app&ctrack=1712607078.216405252&p=23964&media_type=mainstream
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 08 Apr 2024 20:11:18 GMT
content-type: text/css
last-modified: Fri, 05 Apr 2024 10:38:01 GMT
vary: Accept-Encoding
etag: W/"660fd489-3fe83"
expires: Tue, 08 Apr 2025 20:11:18 GMT
pragma: public
cache-control: max-age=31536000, public
content-encoding: gzip
X-Firefox-Spdy: h2

GET /dl/all/offer/sub/video/?tid=62jlwczk96ltbh6uf3688kkwo,17414106,5,23964&flow=app&ctrack=1712607078.216405252&p=23964&media_type=mainstream HTTP/1.1
Host: www.funkyoffer.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
date: Mon, 08 Apr 2024 20:11:18 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

GET /pkplayhoodau_rea/?srv=playhood HTTP/1.1
Host: kwanic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 08 Apr 2024 20:11:17 GMT
content-type: text/html
location: https://12618907bcf5.nobhere.com/?p=23964&media_type=mainstream
x-powered-by: PHP/5.5.38
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lYzNRzyePgRebGXsoHmQFmCDg4gQNccnUkh5gI9nqqlgEomLMQrczdFg9h%2FSrVcJrSeN0663YT4V7w5HUeCmqrqCSX9Njf3tHQszzZ5QwHKonw8LwaoA3thpDEd9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8714e7d95ab8568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /?p=23964&media_type=mainstream HTTP/1.1
Host: 12618907bcf5.nobhere.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 08 Apr 2024 20:11:18 GMT
content-type: text/html; charset=UTF-8
set-cookie: rts-trck=1; expires=Mon, 08 Apr 2024 20:21:18 GMT; Max-Age=600; path=/; domain=12618907bcf5.nobhere.com
t-uuid=62jlwczkec03wyxet1mgwcck0; expires=Sat, 08 Apr 2034 20:11:18 GMT; Max-Age=315532800; path=/; domain=.nobhere.com
rts-trck=1; expires=Mon, 08 Apr 2024 20:21:18 GMT; Max-Age=600; path=/; domain=12618907bcf5.nobhere.com
traffic-visited-domain=funkyoffer.online; expires=Wed, 08 May 2024 20:11:18 GMT; Max-Age=2592000; path=/; domain=.nobhere.com
traffic-back=ok; expires=Mon, 08 Apr 2024 20:11:48 GMT; Max-Age=30; path=/; domain=.nobhere.com
location: https://www.funkyoffer.online/dl/all/offer/sub/video/?tid=62jlwczk96ltbh6uf3688kkwo,17414106,5,23964&flow=app&ctrack=1712607078.216405252&p=23964&media_type=mainstream
X-Firefox-Spdy: h2

GET /dl/all/offer/sub/video/font.css HTTP/1.1
Host: www.funkyoffer.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.funkyoffer.online/dl/all/offer/sub/video/?tid=62jlwczk96ltbh6uf3688kkwo,17414106,5,23964&flow=app&ctrack=1712607078.216405252&p=23964&media_type=mainstream
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 08 Apr 2024 20:11:18 GMT
content-type: text/css
last-modified: Fri, 05 Apr 2024 10:38:01 GMT
vary: Accept-Encoding
etag: W/"660fd489-407"
expires: Tue, 08 Apr 2025 20:11:18 GMT
pragma: public
cache-control: max-age=31536000, public
content-encoding: gzip
X-Firefox-Spdy: h2

GET /releases/v4.7.0/css/font-awesome-css.min.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.funkyoffer.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 08 Apr 2024 20:11:18 GMT
content-type: text/css
cache-control: max-age=31556926
etag: W/"36082410df2ef7f83932219089dc1443"
last-modified: Fri, 22 Sep 2023 01:44:05 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1464505
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bKlhibgVybye0mp5zdhsC2nCXI61z6sdCY8oO7XutHqv20nShwDYM%2FceQMfkc2arwJ9fAjAgLd8CTOn%2FyAdmzp7CrNrRq5BGEIQES0gEIs%2BpM7OKYkDx%2BltlpWns0UP9Ub2qyJfv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8714e7e169574189-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /css?family=Muli:300,400,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.funkyoffer.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 08 Apr 2024 20:11:18 GMT
date: Mon, 08 Apr 2024 20:11:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2