HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "0A7EE60F97E16FD0E3A45BD514B85E76755B56E870F2EE53E0A7FF23D8D82F57"
Last-Modified: Thu, 08 Jun 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11020
Expires: Thu, 08 Jun 2023 16:18:26 GMT
Date: Thu, 08 Jun 2023 13:14:46 GMT
Connection: keep-alive
Server-Timing: ak_p; desc="1686230086153_388255004_36612889_816_1018_0_0_-";dur=1

HTTP/2 200 OK
x-powered-by: Express
surrogate-control: no-store
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
content-type: text/html; charset=utf-8
content-length: 3841
etag: W/"f01-GKEDYdtptmlB6a5IX55GP02wHuk"
vary: Accept-Encoding
date: Thu, 08 Jun 2023 13:14:46 GMT
X-Firefox-Spdy: h2

HTTP/2 302 Found
server: nginx
date: Thu, 08 Jun 2023 13:14:47 GMT
content-length: 0
location: https://t3.blowingwnd.com/p.php?p=c:8pnojh5wwryg9ycmq&d=61b86bb2caff0c3520644fec&pid=CLICKID&s=SUBID&pid=6481d4475980a00001950819&s=930_b7ba89ce_59670
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=6481d4475980a00001950819; expires=Fri, 07 Jun 2024 13:14:47 GMT; secure; SameSite=None
afoffers={"16782":1686230087}; expires=Fri, 07 Jun 2024 13:14:47 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2

HTTP/1.1 302 Found
Server: nginx
Date: Thu, 08 Jun 2023 13:14:48 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 133kvcaevl
Raund: 2ro
Location: https://go.savethereef.xyz/redirect?feed=488122&url=https%3A%2F%2Fwww.gamblingnews.xyz%2F&subid=930_b7ba89ce_59670.no.linux.firefox&query=&pub_clickid=6481d448d7121c32dc6ae8d1&default_url=https%3A%2F%2Ft5.lowtid.com%2Fe.php%3Fp%3Dc%3A0hfgb_xonhgyz4t58%26d%3D62ff3f1db72852774702f44e%26s%3Ddu.%7Bpubfeed%7D%26d2%3D%7Breferrer_domain%7D

HTTP/1.1 302 Found
Server: nginx
Date: Thu, 08 Jun 2023 13:14:48 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://track.trackingtraffo.com/pop/imp?auth=mz3u78&c=D61K_b6U_NMO-Oa4xez67kH9Tdf4GEwtBE08I99h86nJP5EoZO8go3DPLPjK0kJyY-jMoBKgGYLxLWHNaSWk6NLxhyTQHWGZLCGp1RNozRYXyAnLxcF-jlT59C6UE1fRrvKb5pQtWf7qxh0OYolox5wAAueK2y-Sxw2cXcIFsvO0yXkbCKxoW-AJ3HjgKMvagvB4KYj677sw_jLjCTrd1NOvQrc4X6SgxoTBzZ9_FiJXmmG2dXyoHk6sFQHBDUhwgHh-F8W0VoGQVaPIgMdtaGBc5PXGZ8avWrMJyGowouUFSlni56Xyd44052eUqswFrbEQ-ywefAvCNU9TQwdSPuZdkxuehR6KV3wNS-W4iOJItyYH4T42-D2B4KiT0tcFyE5e_f4SDrYy5xGCpBU_-4e66_8ggALXjAjk3u_2EuvVq-4F0zZwF-gcEGUpScgWOOOtuLNs5VuZ1kWerrmUtp8Mz3SewTMpS_lhW36feWVDdVFE3KVwen4OVbACMvJkKEZezM45VqPvP6tb26aNnu85y08ZsGKPeAhj46zlVrHjRojai6sSXMegGKTn9cax42w1gqupO73DJIqX2o_BQ7TdsYqih0i6oNBhHIR1ACoUMARdg6Bp0qqVUWSJLFDtUvVIfK3HZWl-nGZpcFtvpavo_2aF4zEvDTJECXo1WKK0TvpZNpJM8eXO6GTEUPrJ7kBrYPcMXj3tG4Hg
Pragma: no-cache

HTTP/1.1 200 OK
Date: Thu, 08 Jun 2023 13:14:49 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 07 Jun 2023 06:28:18 GMT
Expires: Wed, 14 Jun 2023 06:28:17 GMT
Etag: "7c04500ad2246e0e61aa6b6cb5a3f8dd23fefbc3"
Cache-Control: max-age=494567,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d416668e994b4ee-OSL

HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 08 Jun 2023 13:14:49 GMT
Content-Length: 0
Connection: keep-alive
Location: https://plinksplanet.com/click.php?key=fch6xninnjvnyqmp7pbp&clickid=a646a21b-64da-41f6-8114-792476a4d225&cost=0.0031&PUB_ID=118&SUB_ID=488122&KEYWORD=&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-06-08&BID_PUB=0.0031&CR_ID=363074&PUB_NAME=Yeesshh-POP 2

HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 08 Jun 2023 13:14:49 GMT
content-type: text/html; charset=UTF-8
location: https://media.hellpartners.com/redirect.aspx?pid=19267&bid=1478&lpid=47&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-PromoCasino&utm_term=Ubidex-Ivibet-NO-NotReg-pop-PromoCasino&subid=9007cpmxiqdejxo1cd
set-cookie: uclick=pmxiqdejxo; expires=Fri, 09-Jun-2023 13:14:49 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmxiqdejxo-pmxiqdejxo-q5k2dz-2tus-ush9vr-irg6wj-irg6vr-92f044; expires=Fri, 09-Jun-2023 13:14:49 GMT; Max-Age=86400; path=/; secure; SameSite=none
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

HTTP/1.1 302 Found
Server: nginx/1.20.2
Date: Thu, 08 Jun 2023 13:14:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://ivibet.com/casino?btag=654481_BCC0B8A34E5243DC8E53CE0B42C6066F&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-PromoCasino&utm_term=Ubidex-Ivibet-NO-NotReg-pop-PromoCasino&subid=9007cpmxiqdejxo1cd
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
Access-Control-Expose-Headers: Content-Length,Content-Range

HTTP/2 200 OK
date: Thu, 08 Jun 2023 13:14:51 GMT
content-type: image/gif
content-length: 155794
cf-ray: 7d41667aaeae1c16-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 5568
cache-control: public, max-age=14400
last-modified: Thu, 08 Jun 2023 11:42:03 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ysncMQRJDcr59EegIfYHzJIHOSextVog51cGYqR%2FTYmUKn6BtYi20kMONWxhQP0gKHo%2FxnKetFJ5oujs7gk5O2TEp2ZNMIfbErGcCFXFM2MbeTxbPVNlS4hW7Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Jun 2023 13:14:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 200 OK
date: Thu, 08 Jun 2023 13:14:51 GMT
content-type: application/javascript
etag: W/"06f50014011c1fcd9e21b6b0481979de"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3313
expires: Sun, 11 Jun 2023 13:14:51 GMT
cache-control: public, max-age=259200
set-cookie: __cf_bm=QyAClr8W9Ekfr6vnBJcuGw34W43DUUW2q3kS3DGrjaM-1686230091-0-AdurHxHaO+wQbqpB8WtPRDh0rw0smh7hSly3DisX3XGG2tZWiedkJuUfW5XlZyhHLG2GiDFq2bl+pBxia2Ta+gg=; path=/; expires=Thu, 08-Jun-23 13:44:51 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 7d41667adbf5b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Jun 2023 13:14:51 GMT
content-type: text/html; charset=UTF-8
cf-ray: 7d4166788cb21c16-OSL
cf-cache-status: DYNAMIC
cache-control: max-age=0, must-revalidate, private
expires: Thu, 08 Jun 2023 13:14:51 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
set-cookie: btag=654481_BCC0B8A34E5243DC8E53CE0B42C6066F; expires=Sat, 08-Jul-2023 00:00:00 GMT; Max-Age=2544309; path=/; secure; samesite=none
subid=9007cpmxiqdejxo1cd; expires=Sat, 08-Jul-2023 00:00:00 GMT; Max-Age=2544309; path=/; secure; samesite=none
utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-PromoCasino; expires=Sat, 08-Jul-2023 00:00:00 GMT; Max-Age=2544309; path=/; secure; samesite=lax
utm_medium=Ubidex; expires=Sat, 08-Jul-2023 00:00:00 GMT; Max-Age=2544309; path=/; secure; samesite=lax
utm_source=retarget; expires=Sat, 08-Jul-2023 00:00:00 GMT; Max-Age=2544309; path=/; secure; samesite=lax
utm_term=Ubidex-Ivibet-NO-NotReg-pop-PromoCasino; expires=Sat, 08-Jul-2023 00:00:00 GMT; Max-Age=2544309; path=/; secure; samesite=lax
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JA%2FUXjZ2foZQ6Ip8BfsOO%2Fce2wbV53wIzzjaNrzzNfxdlOT8JTAh9tYQW2EfiEeKmTmgmXXCTOA09VsGWeLfAAjCO6cU6awz%2FGIW6FU3G%2FvHGFsO%2Fnr2SgM4xlw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Jun 2023 13:14:47 GMT
content-type: text/html; charset=utf-8
set-cookie: AWSALB=xUEIr/DHWZgTazkF9crAcLn3X6vakIFwEI44/rB0YzKtQ0RviPz2POWu+Dy5ngQs3RidHXvB+P4rAW1zaX2Vyf52nxAX9ySjDj+jH4T09qoU1Enp3AqXXobzuWGA; Expires=Thu, 15 Jun 2023 13:14:47 GMT; Path=/
AWSALBCORS=xUEIr/DHWZgTazkF9crAcLn3X6vakIFwEI44/rB0YzKtQ0RviPz2POWu+Dy5ngQs3RidHXvB+P4rAW1zaX2Vyf52nxAX9ySjDj+jH4T09qoU1Enp3AqXXobzuWGA; Expires=Thu, 15 Jun 2023 13:14:47 GMT; Path=/; SameSite=None
vary: Accept-Encoding, Accept-Language, Cookie
content-language: en
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BRlCuwWjU6lFEaawUkEk1bQfwNd%2FGP5z93sqbVRUsmOgjkyTGG0hanRFVTSJkSeIEXz5aEkhNsHBvr3kwpGVEZQkxtR2dahTBUXUBWC7KPFZb49IBGfMrI05WngfQYQxIh36ieLKXrdOr030WNoGxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d41665c48bffac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Jun 2023 13:14:52 GMT
content-type: text/css
cf-ray: 7d41667aaea81c16-OSL
cf-cache-status: BYPASS
etag: W/"64819394-237d9"
last-modified: Thu, 08 Jun 2023 08:38:44 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x0HNgoNdE9EvFzPy1t%2Bmkql3pM%2FcDdt7a8Mvp21z2oYUAd4akqPXb%2BZu5KcXwPvgi5DG4d4a%2FAZd5omL2csLEDo4Wt9A1b3Ibc2iSCATxRx%2FjwCm1nFnPtYQO%2BM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Jun 2023 13:14:52 GMT
expires: Thu, 08 Jun 2023 13:14:52 GMT
cache-control: private, max-age=900
last-modified: Thu, 08 Jun 2023 12:20:51 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68889
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2