GET /4/6118780/?var=4667767 HTTP/1.1
Host: ak.deephicy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: 0aa83a4d0c980979ae8fa7ce82a1eeeb
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-credentials: true
access-control-max-age: 86400
timing-allow-origin: *
access-control-allow-origin: *, *
access-control-allow-methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, Accept, Content-Type, Content-Length, Accept-Encoding
content-encoding: gzip
expires: Sun, 10 Sep 2023 06:52:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 10 Sep 2023 06:52:09 GMT
content-length: 11415
vary: Accept-Encoding
set-cookie: OAID=d6d625f6290c4bae913dca3ca4fe2715; expires=Mon, 09 Sep 2024 06:52:09 GMT; path=/; secure; SameSite=None
oaidts=1694328729; expires=Mon, 09 Sep 2024 06:52:09 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: ak.deephicy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ak.deephicy.net/4/6118780/?var=4667767
Cookie: OAID=d6d625f6290c4bae913dca3ca4fe2715; oaidts=1694328729
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
expires: Sun, 10 Sep 2023 06:52:10 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 10 Sep 2023 06:52:10 GMT
X-Firefox-Spdy: h2

GET /img.gif?f=merge&userId=d6d625f6290c4bae913dca3ca4fe2715 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ak.deephicy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 10 Sep 2023 06:52:10 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=d6d625f6290c4bae913dca3ca4fe2715; expires=Mon, 09 Sep 2024 06:52:10 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

POST /?z=6118780&syncedCookie=true&rhd=false HTTP/1.1
Host: ak.deephicy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 462
Origin: https://ak.deephicy.net
DNT: 1
Connection: keep-alive
Referer: https://ak.deephicy.net/afu.php?zoneid=6118780&var=6118780&rid=33-IJ2mCiw9DGbmF2LWarg%3D%3D&rhd=false
Cookie: OAID=d6d625f6290c4bae913dca3ca4fe2715; oaidts=1694328729
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-length: 0
x-trace-id: b103d11760a15296751561150d139e73
link: <https://resionsfrester.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
location: https://resionsfrester.com/724df41f-ffd8-4e04-9dc0-32bd4462ace1?zoneid=6118780&bannerid=18904725&zonetype={zone_type}&campaignid=7389782&device=desktop&region=03&isp=blix group as&useragent=Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0&language=en&connectiontype=broadband&cost=0.001117&visitor_id=724629815378064133
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://ak.deephicy.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
expires: Sun, 10 Sep 2023 06:52:10 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 10 Sep 2023 06:52:10 GMT
set-cookie: OAID=d6d625f6290c4bae913dca3ca4fe2715; expires=Mon, 09 Sep 2024 06:52:10 GMT; path=/; secure; SameSite=None
oaidts=1694328729; expires=Mon, 09 Sep 2024 06:52:10 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 17 Sep 2023 06:52:10 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2

GET /724df41f-ffd8-4e04-9dc0-32bd4462ace1?zoneid=6118780&bannerid=18904725&zonetype={zone_type}&campaignid=7389782&device=desktop&region=03&isp=blix%20group%20as&useragent=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:109.0)%20Gecko/20100101%20Firefox/111.0&language=en&connectiontype=broadband&cost=0.001117&visitor_id=724629815378064133 HTTP/1.1
Host: resionsfrester.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Sun, 10 Sep 2023 06:52:10 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://href.li/?https://www.google.com/url?q=https://sikrebettingsider.com/casino/krypto/&;source=gmail&;ust=1694364175073000&;usg=AOvVaw2F2f6n5ATlK7y79sB9wiHQ
pragma: no-cache
set-cookie: 724df41f-ffd8-4e04-9dc0-32bd4462ace1-v4=Dp__rfQfUL1O-CrFOYURep_WaG5TVzkejOuJ0szLQY4; Max-Age=86400; Expires=Mon, 11-Sep-2023 06:52:10 GMT; Domain=resionsfrester.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=LMtNbHx%2F0dNWv4ku%2BiAVYZsAGdhCltCbEtiTD%2FJ2VdOLl7kVaVxrut%2BUCNS8TOKc%2Fyl3JW4Gq3KxcZSIE6YY1CErtiVoKHuPWb1ylutDPPnMdt0dpL5OC7XlXHIp4dnBVSrPpuTK8Lq3wbwab00x%2Fg%3D%3D; Max-Age=31536000; Expires=Mon, 09-Sep-2024 06:52:10 GMT; Domain=resionsfrester.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

GET /url?q=https://sikrebettingsider.com/casino/krypto/&;source=gmail&;ust=1694364175073000&;usg=AOvVaw2F2f6n5ATlK7y79sB9wiHQ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 10 Sep 2023 06:52:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-itCsNcTQJDQStrcZW1e9PQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-encoding: br
server: gws
content-length: 662
x-xss-protection: 0
set-cookie: __Secure-ENID=14.SE=Nmv-77bkBVwXtGTmBzL3NQq_RFufwulzBZ3-qyYsDhOQlptCC12EXfWpucDFD-COPHpjzNqFURwvI6Vov_b7wOuiGvo8Y7krIHqLFdMvnja6cx2gujFs0g6rcRINV4I00TUbdgwrHoLVJpR9SF2q_Lxkf5ufaYcIYeHWpd8_O2A; expires=Wed, 09-Oct-2024 23:10:29 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+632; expires=Tue, 09-Sep-2025 06:52:11 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/url?q=https://sikrebettingsider.com/casino/krypto/&;source=gmail&;ust=1694364175073000&;usg=AOvVaw2F2f6n5ATlK7y79sB9wiHQ
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Secure-ENID=14.SE=Nmv-77bkBVwXtGTmBzL3NQq_RFufwulzBZ3-qyYsDhOQlptCC12EXfWpucDFD-COPHpjzNqFURwvI6Vov_b7wOuiGvo8Y7krIHqLFdMvnja6cx2gujFs0g6rcRINV4I00TUbdgwrHoLVJpR9SF2q_Lxkf5ufaYcIYeHWpd8_O2A; CONSENT=PENDING+632
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1494
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 08 Sep 2023 13:35:54 GMT
expires: Sat, 16 Sep 2023 13:35:54 GMT
cache-control: public, max-age=691200
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
content-type: image/x-icon
vary: Accept-Encoding
age: 148577
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000