GET /redirect.aspx?pid=25778&bid=1478&lpid=161&subid=wegumgjib56ehc4tia2rej78%20wegumgjib56ehc4tia2rej78 HTTP/1.1
Host: media.hellpartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 307 Temporary Redirect
cache-control: private,no-cache, no-store
pragma: no-cache
content-type: text/html
location: https://ivimedia.world/hu?btag=659170_E4BB3589643D41F3AF621BC1602CCFC9&subid=wegumgjib56ehc4tia2rej78 wegumgjib56ehc4tia2rej78
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a25778%2c%22BID%22%3a1478%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1700339008586)%5c%2f%22%2c%22CookieTag%22%3a%22147825778451240919C202311182023%22%7d%5d; SameSite=None;; domain=.hellpartners.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22531698934%7c1%22%7d%5d; domain=.hellpartners.com; expires=Mon, 18-Nov-3022 20:23:28 GMT; path=/; secure; SameSite=Strict
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
x-azure-ref: 0QB1ZZQAAAACOk4vqW4HyT5B+DatT6sclU1ZHMjBFREdFMDYwNgA4M2FkYmU2OS1mMzY0LTQ4MzgtYjNmZC0zNDU0OTA3MzQ4OWE=
x-cache: CONFIG_NOCACHE
date: Sat, 18 Nov 2023 20:23:28 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /hu?btag=659170_E4BB3589643D41F3AF621BC1602CCFC9&subid=wegumgjib56ehc4tia2rej78%20wegumgjib56ehc4tia2rej78 HTTP/1.1
Host: ivimedia.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sat, 18 Nov 2023 20:23:28 GMT
content-type: text/html; charset=utf-8
content-length: 151
location: https://ivibet.com/hu?btag=659170_E4BB3589643D41F3AF621BC1602CCFC9&subid=wegumgjib56ehc4tia2rej78%20wegumgjib56ehc4tia2rej78
server: nginx/1.20.2
X-Firefox-Spdy: h2

GET /custom-assets/fastloader.gif HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/hu?btag=659170_E4BB3589643D41F3AF621BC1602CCFC9&subid=wegumgjib56ehc4tia2rej78%20wegumgjib56ehc4tia2rej78
Cookie: btag=659170_E4BB3589643D41F3AF621BC1602CCFC9; subid=wegumgjib56ehc4tia2rej78%20wegumgjib56ehc4tia2rej78; preferred-language=hu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 18 Nov 2023 20:23:29 GMT
content-type: image/gif
content-length: 155794
cf-ray: 8282ee7989430b51-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 6718
cache-control: public, max-age=14400
last-modified: Sat, 18 Nov 2023 18:31:31 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GU0rlipwlcHwwQ1ElKwxxZflLLOzE7ny5gG%2BArFKSKIyLBdrnJ%2Fkb%2BbBYfm4DRXi6JUV6iG2cQEkrxii5W1D5ZNpzE85dfJqPcXoyT9fgi%2ByEXbLljNY7XYw4KA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

GET /tracking.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Fri, 17 Nov 2023 13:32:27 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: J80qowzUmlbYEgobWdZHSO8f2ryKjfU9
server: AmazonS3
content-encoding: br
etag: W/"34d8a605fafca1330ef2680ddf8933de"
vary: Accept-Encoding
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: yudQhB0639PAWN8HbGrNZRzNfBxoRvYD9xpqOCBVr6khm4MWxbazmA==
content-length: 27063
cache-control: max-age=28800
expires: Sun, 19 Nov 2023 04:23:29 GMT
date: Sat, 18 Nov 2023 20:23:29 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2

GET /7693683943e78a298c36d469e68b47d8/widgetloader HTTP/1.1
Host: ws-cdn001.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-security-policy: frame-ancestors 'self' https://st-cdn001.akamaized.net https://ls-cdn001.akamaized.net
cache-control: public, max-age=120, stale-while-revalidate=60, immutable
etag: "61e5c751b852486e17b8de1caf956050-a3e2476d7bdaaded7dfafaba7df2d59c"
content-encoding: gzip
content-length: 66112
date: Sat, 18 Nov 2023 20:23:30 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2

GET /notify/v1/ua-sdk.min.js HTTP/1.1
Host: aswpsdkus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-guploader-uploadid: ABPtcPoXlT7g6eOlX4chrbnbYWDCC1E9BF8k2FD5_Nzd3uSHVrmwb-QqkkexuTImFQzwYDeZejbxHviNvcz8rewI51pR
x-goog-generation: 1692696629504327
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 39227
content-encoding: gzip
x-goog-hash: crc32c=RyUZUg==, md5=YXj8vV0/90H8iKu5c4ACIw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 39227
server: UploadServer
date: Sat, 18 Nov 2023 20:20:40 GMT
expires: Sat, 18 Nov 2023 20:25:40 GMT
cache-control: public,max-age=300,no-transform
age: 170
last-modified: Tue, 22 Aug 2023 09:30:29 GMT
etag: "6178fcbd5d3ff741fc88abb973800223"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /assets/fonts/gilroy/Gilroy-Regular.woff HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/app/styles.421a5374cedae3b7.css
Cookie: btag=659170_E4BB3589643D41F3AF621BC1602CCFC9; subid=wegumgjib56ehc4tia2rej78%20wegumgjib56ehc4tia2rej78; preferred-language=hu
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 18 Nov 2023 20:23:30 GMT
content-type: font/woff
content-length: 35308
cf-ray: 8282ee7c6bc10b51-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "65573ab9-89ec"
last-modified: Fri, 17 Nov 2023 10:04:41 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6nXjJjk%2BMU%2FmMDGx5%2FgTMrt%2FB6q308aPYZyolU3WRbfjOhxqlR759YNhK%2FOjdnHsmY3ITRK2O%2BjpmHGs%2BMUsoFjo%2Fi2bIRShVUy7O5d51UuxakVW989IecxFcE8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2