GET /xo.exe HTTP/1.1
Host: newmarhab.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 29 Mar 2025 15:20:00 GMT
content-type: application/x-msdownload
content-length: 9307038
last-modified: Thu, 27 Mar 2025 17:34:29 GMT
etag: "8e039e-631565db76f98"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XqK%2FF14VrBwZujvBoYgPtG2ugxg8wSK2dmZxKi6c7DgALkPPXvYzUhX%2F%2F8u04C1I2jWtNGAiwFz%2BwwX8aX6SR0jUeBh28AEyCs%2FrmRJmDmGRm0t1WrTpAOE%2BYqIQ6gpM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9280594c1b5bb509-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6060&min_rtt=513&rtt_var=11114&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3204&recv_bytes=1129&delivery_rate=6787500&cwnd=254&unsent_bytes=0&cid=6f043091250dcdf6&ts=155&x=0"
X-Firefox-Spdy: h2