Overview

URL www.extensionrandomsystemupgrade4contestproposalverification.review
IP54.89.93.105
ASNAS14618 Amazon.com, Inc.
Location United States
Report completed2018-08-18 20:22:14 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-08-18 2 www.extensionrandomsystemupgrade4contestproposalverification.review/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 54.89.93.105

Date UQ / IDS / BL URL IP
2018-07-05 20:19:06 +0200
0 - 0 - 1 www.previewyounewlisteditems4free4listening.trade/ 54.89.93.105
2018-07-03 06:32:25 +0200
0 - 0 - 1 www.addbrandnewsystemfornewrequest.review/bl. (...) 54.89.93.105
2018-07-03 04:58:44 +0200
0 - 0 - 1 www.addbrandnewsystemfornewrequest.review/bl. (...) 54.89.93.105
2018-07-02 10:47:22 +0200
0 - 0 - 0 www.thegoodonesystemforcontentgreat.win 54.89.93.105
2018-07-02 00:55:49 +0200
0 - 0 - 1 www.readyoursystemforcontentsgreat.win/?pcl=q (...) 54.89.93.105
2018-07-02 00:54:36 +0200
0 - 0 - 1 www.readyoursystemforcontentsgreat.win/?pcl=q (...) 54.89.93.105
2018-07-02 00:06:17 +0200
0 - 0 - 1 www.autoclickonnewcontentblogoffersplaypause. (...) 54.89.93.105
2018-06-30 22:03:03 +0200
0 - 0 - 1 www.addmorevolume2yourpromotioncontest.win/ 54.89.93.105
2018-06-29 20:36:02 +0200
0 - 0 - 0 hxxp://www.forgetthepathtradebidoptimized4fre (...) 54.89.93.105
2018-06-29 04:44:42 +0200
0 - 1 - 2 www.promotiontradebidoptimized4freecolorup.re (...) 54.89.93.105

Last 10 reports on ASN: AS14618 Amazon.com, Inc.

Date UQ / IDS / BL URL IP
2019-01-20 12:56:57 +0100
0 - 0 - 2 customaquariumscr.com/FlowerScreensaver/Flowe (...) 52.0.217.44
2019-01-20 12:28:56 +0100
0 - 0 - 1 digitalpreacher.com/ 54.156.72.128
2019-01-20 12:26:58 +0100
0 - 0 - 2 customaquariumscr.com/FlowerScreensaver/Flowe (...) 52.0.217.44
2019-01-20 12:20:54 +0100
0 - 1 - 0 boxlp.top/c1 52.86.15.1
2019-01-20 12:14:15 +0100
0 - 0 - 1 https://qaek.peakonsrv.com/? 52.86.223.196
2019-01-20 12:09:25 +0100
0 - 0 - 1 https://grw.pfexch.com/dep.php?pid=6944 52.71.203.161
2019-01-20 11:54:26 +0100
0 - 0 - 2 customaquariumscr.com/FlowerScreensaver/Flowe (...) 52.0.217.44
2019-01-20 11:50:45 +0100
0 - 0 - 1 imp.hmyquickconverter.com/impression.do?event (...) 54.174.93.188
2019-01-20 11:34:50 +0100
0 - 1 - 0 buildlp.top/c1 52.86.15.1
2019-01-20 11:32:26 +0100
0 - 0 - 2 customaquariumscr.com/FlowerScreensaver/Flowe (...) 52.0.217.44

No other reports on domain: extensionrandomsystemupgrade4contestproposalverification.review



JavaScript

Executed Scripts (17)


Executed Evals (2)

#1 JavaScript::Eval (size: 3306, repeated: 1) - SHA256: 0a08e8bc7c9811d1fbd1b4a5db53d34507a0a1ce884b8ee17dc0c2572405a74c

                                        (function() {
    var a = "secureurl.fwdcdn.com poczta.wp.pl poczta.onet.pl 10minutemail.com poczta.interia.pl deref-gmx.net poczta.o2.pl deref-web-02.de 10minutemail.info wot.gcdn.co 10minutemail.net nowapoczta.wp.pl 10minutemail.org 24mail.chacuo.net account.mail.ru mail-pda.rambler.ru m.poczta.onet.pl amail.centrum.cz api-mail.walla.co.il appmail.mail.10086.cn bmail.uol.com.br btmail.bt.com citromail.hu correio.portugalmail.pt deref-mail.com dropmail.me e.mail.ru email.1and1.fr email.bws-school.org.uk nm20.abv.bg nm50.abv.bg email.excite.co.jp orange.fr email.mweb.co.za mail3.nate.com email.mynet.com email.seznam.cz nm80.abv.bg email. nm40.abv.bg email.ukrgas.com.ua eowebmail.eonet.jp euwebmail.mail.126.com nm60.abv.bg nm.abv.bg exchangemail.aquinas.wa.edu.au freemail.net.hr poczta.gazeta.pl freemail.services.in.gr crazymailing.com gmail.hu go.mail.ru guerrillamail.com html5.mail.10086.cn nm70.abv.bg hushmail.com imonmail.com indamail.hu accounts.youtube.com nm30.abv.bg fakemailgenerator.com ipad.mail.tiscali.it m.gmail.hu m.mail. mail2.daum.net m.mail.sohu.com m.my.mail.cz m.abv.bg m.yopmail.com m0.mail.sina.cn m0.mail.sina.com.cn m1.mail.sina.cn m1.mail.sina.com.cn login.live.com oauth.vk.com outlook.live.com emailfake.com nowapoczta.interklasa.pl poczta.pl poczta.int.pl poczta.nazwa.pl webmaila.juno.com pc.tim.it tempr.email 10minut.xyz mailnesia.com account.microsoft.com en.generator.email mail2.oiinternet.com.br mailto.space webmaila.netzero.net webmailb.juno.com emailtemporal.org webmailb.netzero.net webmailrc.nordnet.com account.live.com accounts.login.idm.telekom.com b0x7.want.host:2096 connect.emailsrvr.com email01.godaddy.com email14.godaddy.com email17.godaddy.com emailondeck.com emailsrvr.com generator.email hometel.mymailsrvr.com webmail.virgilio.it mail34b.webmail.libero.it manilamail.iopex.com mbox.webmail.teletu.it m-email.t-online.de migmail.pl mps.kpnmail.nl mtsmail.ca my.mail. my10minutemail.com myemail.cox.net myemail.delta.com nymail.spray.se otvet.mail.ru pdamail.meta.ua pmail.centrum.sk post.mail.kz posti.mail.ee primamail.net rediffmail.com regamail.ru sg2003.webmail.hinet.net sibmail.com spoofmail.de sso.kabelmail.de temp-mail.org t-freemail.net.hr t-mail. tnrc.mail.edu.tw mail01.tcsbank.ru mail1.ammsusa.com mail10.online.ua mail14.cp247.net mail2.online.ua mail2.spectrum.net mail2web.com mail3.online.ua mail4.online.ua mail5.online.ua mail5009.smarterasp.net mail9.online.ua mailbj.xdf.cn mailbox.gr maildrop.cc mailserver.polifarbe.hu mailserver.yoncu.com touch.mail.ru t-pmail.centrum.sk trashcanmail.com trash-mail.com poczta.cal.pl poczta.farutex.pl poczta.su.krakow.pl poczta.zenbox.pl ud-mail.de url.qmail.com uswebmail.mail.126.com vipmail.cnnb.com.cn web.mail.comcast.net webtop.webmail.optimum.net wegwerfemail.de webmail-seguro.com.br webmail-srv2.servage.net wm.cloud-mail.jp webmail04.register.com webmail1. webmail2. webmail30.189.cn webmail4-hki2.hosting.fi webmailcpr04n.ono.com email.it wegwerfemailadresse.com wmail.mediacat.ne.jp wmail.wedos.net yopmail.com zmail.zoznam.sk accounts.google. webmail. mail.".split(" "),
        b = /https?:\/\/([^/:]+)/.exec(google_tag_manager["GTM-58Z37MT"].macro(1));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + ".*")).test(b[1])) return null;
    return google_tag_manager["GTM-58Z37MT"].macro(2)
})();
                                    

#2 JavaScript::Eval (size: 83, repeated: 1) - SHA256: db67f3a811c17993a0388ea2c4679e41f29d21c3a74de4b873ff862df1dfdb07

                                        (function() {
    var b = 2;
    return function(a) {
        a.set("dimension" + b, a.get("clientId"))
    }
})();
                                    

Executed Writes (0)



HTTP Transactions (75)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: www.extensionrandomsystemupgrade4contestproposalverification.review
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.89.93.105
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.8.0
Date: Sat, 18 Aug 2018 18:21:38 GMT
Content-Length: 160
Connection: close
Location: http://www.theadgateway.com/jump/next.php?r=2045607&sub1={source_id}


--- Additional Info ---
Magic:  HTML document text
Size:   160
Md5:    e0d8c58a3c91234c31813b1691baa6c6
Sha1:   d1b7f991404e93e5a282433347955db33f153fd9
Sha256: c0296d7ef857ca2505fb0a1b76ecc741154327ff5f2302a7e9aea551c7c6e7c1

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /jump/next.php?r=2045607&sub1={source_id} HTTP/1.1 
Host: www.theadgateway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         35.190.65.235
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Sat, 18 Aug 2018 18:21:38 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Referrer-Policy: no-referrer
Link: <//www.theadgateway.com>; rel=dns-prefetch,<//www.theadgateway.com>; rel=preconnect
x-ua: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Content-Encoding: gzip
Via: 1.1 google


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1852
Md5:    b43d16d1d40043ac15c80c381ef40f94
Sha1:   d5efb415970cb10e7715c5c86bfcadcfb5b008e1
Sha256: 6b1625c86648fc117f165b4cf016b76bb5264ab8085cf5862623ce9a1b556780
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.theadgateway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         35.190.65.235
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: openresty
Date: Sat, 18 Aug 2018 18:21:38 GMT
Content-Length: 0
Last-Modified: Wed, 27 Dec 2017 10:12:41 GMT
Etag: "5a437219-0"
x-ua: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept-Ranges: bytes
Via: 1.1 google


--- Additional Info ---
                                        
                                            GET /jump/next.php?stamat=m%7C%2Cot2NWY3erB1dAN0dEdHP3xP.27c%2CxWE6l-QVFgJRkkWRdNrDzCqobItICpoM7COIysgAGGIrhPuUWNa8dhIbu9bDHvlhJMI-H7gvgpZOwIOaoDhHL3xzhI-0FBH_pmswXaK_LwY%2C&cbrandom=0.6942927446099738&cbtitle=&cbiframe=0&cbWidth=1176&cbHeight=754&cbdescription=&cbkeywords=&cbref= HTTP/1.1 
Host: www.theadgateway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.theadgateway.com/jump/next.php?r=2045607&sub1={source_id}

                                         
                                         35.190.65.235
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Sat, 18 Aug 2018 18:21:38 GMT
Transfer-Encoding: chunked
Location: https://cpm.wargaming.net/qclsyr4r/?pub_id=2045607-2476246003-0&xid=15346164981294500219001096531941281 &acsc=102390166
Referrer-Policy: no-referrer
Vary: Accept-Encoding
x-ua: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Via: 1.1 google


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=171268
Date: Sat, 18 Aug 2018 18:21:38 GMT
Etag: "5b77c721-1d7"
Expires: Mon, 20 Aug 2018 17:37:51 GMT
Last-Modified: Sat, 18 Aug 2018 07:13:37 GMT
Server: ECS (arn/467B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    cbc956f2f3601fb83161744f20762094
Sha1:   72ddeaa656df83020e348dd6f99b44dc62255baa
Sha256: 3dcd6537278250a15a42f756e94632b9060c61e2b26731913df9aec5200677bd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=171713
Date: Sat, 18 Aug 2018 18:21:38 GMT
Etag: "5b784c14-1d7"
Expires: Mon, 20 Aug 2018 17:45:06 GMT
Last-Modified: Sat, 18 Aug 2018 16:40:52 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0c36ee9d798bcca6b90dd811f18cff65
Sha1:   0a626e8d3c668f7d971f7434b54d0577ddb4a2cc
Sha256: 17c8095bd654dbab913b49edf9d0692d2d167e69a977aaf4b4bfdf0fe6c1c9f6
                                        
                                            GET /qclsyr4r/?pub_id=2045607-2476246003-0&xid=15346164981294500219001096531941281%20&acsc=102390166 HTTP/1.1 
Host: cpm.wargaming.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.theadgateway.com/jump/next.php?r=2045607&sub1={source_id}

                                         
                                         92.223.30.139
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://totalwararena.net/join/3337_NO1 ?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu
Set-Cookie: STIDREFERRAL=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A; Domain=wargaming.net; Path=/; Max-Age=2592000 enctid=bnqg5b28dfl4; Domain=wargaming.net; Path=/; Max-Age=2592000 SLPSETS=6kK3hVznavnUdHhbOyrQYDtcFcr-fY-gDFE8QFuF541FQA; Domain=wargaming.net; Path=/; Max-Age=2592000 teclient=1534616498928573038; Domain=wargaming.net; Path=/; Max-Age=315360000


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=161627
Date: Sat, 18 Aug 2018 18:21:39 GMT
Etag: "5b77230d-1d7"
Expires: Mon, 20 Aug 2018 15:15:26 GMT
Last-Modified: Fri, 17 Aug 2018 19:33:33 GMT
Server: ECS (arn/46BA)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6cd0ae3a93c88ec0abdbe3ffe7a6d127
Sha1:   fef187a1ff5499dac4624d6eb9a0e53f4f47f708
Sha256: be46ce7752c974bf7b5bf6d8c69ddf15e57cd17a3fc01e92aecf3cf5f76ed170
                                        
                                            GET /join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu HTTP/1.1 
Host: totalwararena.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.theadgateway.com/jump/next.php?r=2045607&sub1={source_id}

                                         
                                         92.223.40.128
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Set-Cookie: ssid=8a1br9d9sj7li2ikdo54qb1v93; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4939
Md5:    9f9b350f3b9d46c09ce1bf8d8b2841dd
Sha1:   1d2aa03bad2b2d40b4a2e8c05ab3963e27d2870a
Sha256: a3871dc310bcd002eec28d554f3842a510be016e8ba572e76015cd163900f3ad
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 18 Aug 2018 18:21:40 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    e993e3f0368e5c59c0d5dc36cbef1c8c
Sha1:   77d50712cfddaf361ecc002379dfa159b83c5e68
Sha256: f33801ddb483d88486f0c6c603ceb123ddccf1a381f433c9dbb5ef9eff672f7b
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 18 Aug 2018 18:21:40 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=163125
Date: Sat, 18 Aug 2018 18:21:40 GMT
Etag: "5b7813e0-1d7"
Expires: Mon, 20 Aug 2018 15:40:25 GMT
Last-Modified: Sat, 18 Aug 2018 12:41:04 GMT
Server: ECS (arn/46D1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    1ae982aed460401964c5f375e1877869
Sha1:   2b294309067dd291251cb4601988d4f7700512d9
Sha256: 59e57ed367449562d7a8f612e8b7b550997fc0f8cfceea4b6fecfea417ba017f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=156824
Date: Sat, 18 Aug 2018 18:21:40 GMT
Etag: "5b7811ad-1d7"
Expires: Mon, 20 Aug 2018 13:36:21 GMT
Last-Modified: Sat, 18 Aug 2018 12:31:41 GMT
Server: ECS (arn/467B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8a0abd5a98b1c598d9995ca9d6ff4a40
Sha1:   e4c0cd168e244abff0b542930a64a4831a1fdea4
Sha256: 785b31a8e6034f5f29f5e33ff5b95536c33b4708ef57f5f2fd741160fde693e3
                                        
                                            GET /css?family=Cormorant+Garamond:400,700|Roboto HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         216.58.211.10
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Sat, 18 Aug 2018 18:21:40 GMT
Date: Sat, 18 Aug 2018 18:21:40 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   298
Md5:    05544b6e5f6f6ebb62a54cd3e3368558
Sha1:   f94766a79761d6403d8e0cd50aff0b6d61723f1e
Sha256: 713a422e024532bb8004219a950f6d5f194d9d8a821be8b0f95290f174ebf1e1
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/libs/swiper.min.css HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Vary: Accept-Encoding
Etag: W/"5a8c317e-4561"
Expires: Sat, 11 Aug 2018 15:46:19 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Cache: HIT
X-Cached-Since: 2018-08-17T16:34:44+00:00
X-ID: ts-up-gc4


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2839
Md5:    7f2185de06be4a92e85bb8f22333212e
Sha1:   098281bcf78db04cd7e32996f68486e90c22d378
Sha256: c0fb408ced7b409bb17a7916cd28198161f771eb195c492968054c8a7e61b9af
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/libs/jquery.min.js HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 97163
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Etag: "5a8c317e-17b8b"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T18:24:55+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   97163
Md5:    4f252523d4af0b478c810c2547a63e19
Sha1:   5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
Sha256: 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/libs/jquery.fullpage.min.css HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Vary: Accept-Encoding
Etag: W/"5a8c317e-ec0"
Expires: Sat, 11 Aug 2018 15:49:39 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Cache: HIT
X-Cached-Since: 2018-08-17T16:24:45+00:00
X-ID: ts-up-gc5


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1203
Md5:    e11b60deb769ece275f8d97050c03399
Sha1:   67161cf1d1e664d806edf455b5100a6afea8e72b
Sha256: 44b5f82a43e928f38fa5caea66325a138a8a23bc3961fbe9379384398ee7ff19
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/styles/style.css HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Vary: Accept-Encoding
Etag: W/"5a8c317e-44bb"
Expires: Sun, 12 Aug 2018 12:56:57 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Cache: HIT
X-Cached-Since: 2018-08-18T13:36:04+00:00
X-ID: ts-up-gc4


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3555
Md5:    7966aa2353d0e3535ba430ffbdf7420a
Sha1:   2156b4c8d42878ac4fbe743ab61f6be69a5a1754
Sha256: 1d9e1956ab694a1d28550fe5847e9c86013f00c3ff949614d716c98c4ea04493
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/libs/jpreloader.min.js HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 3291
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Etag: "5a8c317e-cdb"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-18T18:11:03+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   3291
Md5:    ae0eaadc58467e92a0166427760a5f3c
Sha1:   d49c72a3178700eeb4dfa64a82c13f42d5549957
Sha256: 86eabc53c41c2a6dfc9163972c15f0b528b41bc72922c634c5706d620b704879
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/libs/swiper.jquery.min.js HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 87363
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Etag: "5a8c317e-15543"
Expires: Thu, 26 Apr 2018 14:47:06 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T20:07:59+00:00
X-ID: ts-up-gc5
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   87363
Md5:    e18f657b1fced68f4e7a218c2a6699fb
Sha1:   d0f71f07c5f2525d00ca52939b066933da6b4bb6
Sha256: 09d9e0e7f51dd20bdad8c327914ef92096a594637ce6f246e69aa313f60a4383
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/store_list/elements/windows/elements/src/1263299/windows_1494844669.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 5815
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-16b7"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T18:24:55+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 173 x 60, 8-bit/color RGB, non-interlaced
Size:   5815
Md5:    511b601a8b301037366969aaf8a1b3f7
Sha1:   4fc38d2a52438ac63401b232e9b04c97c0ec348b
Sha256: 1bc3aad9aa7a63fc60388f704d3c6d7ea6d4af6bc04f423aee8863d3cd12ceb3
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/store_list/elements/google/elements/src/1263299/android_1494844669.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 4198
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-1066"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T18:24:56+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 173 x 60, 8-bit/color RGB, non-interlaced
Size:   4198
Md5:    7dacd93f5d7aa8927067a2ecdae6d546
Sha1:   01545bb652d27192bd666ab358be340e4c07e95b
Sha256: 1061ebc578b4c41f9f976cba159212d336a4ae9406bf2e472272d2462c11cb16
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/libs/device.min.js HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 3296
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Etag: "5a8c317e-ce0"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T18:24:55+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   3296
Md5:    719c963c2ea823af63d9d27cad324477
Sha1:   98d5079895cadb6b42e4379df565d8ad7dd44e36
Sha256: eff979b9e48677d58bca83cbe1c830ed046b4bd567a2a03d8030981c6654bf2f
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/libs/jquery.fullpage.js HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 119064
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Etag: "5a8c317e-1d118"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T18:24:55+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C++ program text, with CRLF line terminators
Size:   119064
Md5:    0e94935d59890f1903886b29c906e37d
Sha1:   5a2d4e1d7661c358714f86ee830318f385b9d5d8
Sha256: b9c5e9261ff380038076bd54787035d27b30288acdcaa15acd55a127c5e08dce
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/store_list/elements/appstore/elements/src/1263299/ios_1494844669.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 5323
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-14cb"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T18:29:45+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 173 x 60, 8-bit/color RGB, non-interlaced
Size:   5323
Md5:    2956f44379d05b4c1401545cc80b5d1e
Sha1:   fef53a964ca38bcea198b7d774dd4e0dfe4fe6d2
Sha256: 113b1e1297fcb19482ca0db2d6efc63a2d3e158cf557d937bf13bcf283b57010
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/common/elements/logo_footer/elements/img_url_desk/1263072/logo_wg_desk_1492514881.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 3191
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-c77"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T18:33:19+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 108 x 58, 8-bit colormap, non-interlaced
Size:   3191
Md5:    cf4e3ee1869fcac45de72b89fdf6ef10
Sha1:   fab3632ca44ea485b47add9c343b08db008306d7
Sha256: 02ec3f414039b92306935b3093c204104a209e2cc7bce812ba282bdc92d476c3
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/scripts/script.js HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 11221
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Etag: "5a8c317e-2bd5"
Expires: Thu, 26 Apr 2018 14:47:06 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T21:55:59+00:00
X-ID: ts-up-gc5
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   11221
Md5:    f58eeab60d19c0a815d037203c320e2a
Sha1:   17a2c255ff2ece015b12c1f237e409856d47c0d9
Sha256: f6d549f973b253178c44771dd2147a0efb6f8588f7d405fff7d7e924ba9e2d8a
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/NO/age_rating/elements/list1/elements/img_url/2348615/seven_1494953611_1525336555.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 3619
Connection: keep-alive
Last-Modified: Thu, 03 May 2018 08:35:55 GMT
Etag: "5aeac9eb-e23"
Expires: Sun, 06 May 2018 05:45:17 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-17T07:46:37+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 56 x 68, 8-bit/color RGB, interlaced
Size:   3619
Md5:    8b5c10ce5c65cb6c0241c071e263ce9d
Sha1:   91d5039eb4dfbda277d7b7490d4b82c21a665c9f
Sha256: b2aa383581d65acd509e846c693acd7bbcf5c8655554f56b3c2e890879e9ecc2
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/NO/age_rating/elements/list2/elements/img_url/2348615/Violence_1494953613%20(1)_1525336555.jpg HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 5757
Connection: keep-alive
Last-Modified: Thu, 03 May 2018 08:35:55 GMT
Etag: "5aeac9eb-167d"
Expires: Sun, 06 May 2018 05:46:21 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-17T12:15:58+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   5757
Md5:    9df8212d0795785b9034b24f1724e074
Sha1:   ea900545eeb805259fcd872cd724a39d59bdcbad
Sha256: 8941389e639d0389d68fcf5c1ecb9834f7146507d119507cfcb4cf7ee627191e
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/preloader/elements/loader/1263284/loader_1486456863.gif HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 12204
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-2fac"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T18:24:55+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 310 x 120, 8-bit/color RGBA, interlaced
Size:   12204
Md5:    63a46131b0b2a61d7c052dba2fa89b1e
Sha1:   6adced4bae8e304801b7b429f207358f996eab4b
Sha256: 02bffc340169756c891f56e93782e96dd1fe86f739d1d49e10c018c8c434cceb
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/home/elements/image_bg/1263151/home-bg_1489674309.jpg HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 207564
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-32acc"
Expires: Thu, 26 Apr 2018 14:38:56 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T19:02:45+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   207564
Md5:    7e120ad8b0710f35651d4e888369a1f0
Sha1:   f9ea12155fc50341a7b92cc5c4c792cb9a96b850
Sha256: 21167d8591fe85733ea3f8a76b86d7224f53af96d531d018cc8cfa67aa3103a2
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/images/sprite_button.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn-wglc.gcdn.co/uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/styles/style.css

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 1204
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:30 GMT
Etag: "5a8c317e-4b4"
Expires: Thu, 26 Apr 2018 14:38:56 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T19:02:47+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 29 x 116, 8-bit/color RGBA, non-interlaced
Size:   1204
Md5:    6c30c39f70d0ada642e612439e7f90c8
Sha1:   28f42a1a1403a1006d8e96ba15c111b6e590a184
Sha256: 6a2d5c2c88694b3dd2508ba8b68fb7eeec1532cd6acbd481e6069161cc80b624
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/preloader/elements/bg_image/1263284/preloader-bg_1486456863.jpg HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 207564
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-32acc"
Expires: Thu, 26 Apr 2018 14:39:10 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T21:54:05+00:00
X-ID: ts-up-gc5
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   207564
Md5:    7e120ad8b0710f35651d4e888369a1f0
Sha1:   f9ea12155fc50341a7b92cc5c4c792cb9a96b850
Sha256: 21167d8591fe85733ea3f8a76b86d7224f53af96d531d018cc8cfa67aa3103a2
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/images/arrow-down.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn-wglc.gcdn.co/uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/styles/style.css

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 770
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-302"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T19:02:45+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 48 x 13, 8-bit/color RGBA, non-interlaced
Size:   770
Md5:    ea214ea5a3016f1d34c1a9bd1377000c
Sha1:   ca5317c401221899a815dabf5d760e3cdf904b45
Sha256: c5ebbf5fd723777fbf8ce88107d36c991e93b81bbabda40674bcb670081a8573
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/images/footer-bg.jpg HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn-wglc.gcdn.co/uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/styles/style.css

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 2799
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-aef"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T19:02:45+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   2799
Md5:    35e9a8a1c84213d9f045417598528e9d
Sha1:   a4d7aa461eb33849c7ac8e686f0e9b6ecf717757
Sha256: ff25a70cbba9c898fc90a36ee6ce97ed4aef5193db10cb85e11498c679098e52
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/common/elements/favicon/1263072/favicon_1492514880.ico HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:42 GMT
Content-Length: 19295
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-4b5f"
Expires: Thu, 26 Apr 2018 14:41:03 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T21:33:26+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 64 x 64, 8-bit/color RGBA, non-interlaced
Size:   19295
Md5:    e31b40546d479ddf7f46f6f82a1e4f23
Sha1:   fc026bc9d72d3bed86beea8317aa247381e531a1
Sha256: b1c4ecea2e2517dbcb68c308bcc32aad85166272b0b6309a7e9329a31ff0a11a
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/common/elements/logo_footer/elements/img_url_tablet/1263072/logo_wg_tablet_1492514881.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 4045
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-fcd"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T19:02:47+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 178 x 40, 8-bit colormap, non-interlaced
Size:   4045
Md5:    c2d475406043e43878e6c57d322f6b1b
Sha1:   42f81ec65e8d1b4a5287c68570711941e512761c
Sha256: 787d3730656b2b37ebaf49a580d3744de633a644c4d0cbf887e9094328952d4b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 18 Aug 2018 18:21:42 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    5524a178270bf712d90b23b7b6c14921
Sha1:   50608d7d4e1244b86ee9790ef7c3d14b1db5fba3
Sha256: de81dd01b1b4719fc15d6b6d7ffbedab8cee016f36578e0c8e76827997a0740a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 18 Aug 2018 18:21:42 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    794f76071287824f99994394d5312c62
Sha1:   a44198a470553d6cedb2ebbcd672c61c061b91fd
Sha256: 3387d1befefa638beb2220aa1c1a0803bda0d29ff57d2a5863581afb14be1823
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/fonts/icons/icons.woff HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn-wglc.gcdn.co/uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/styles/style.css
Origin: https://totalwararena.net

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:42 GMT
Content-Length: 2420
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-974"
Expires: Thu, 26 Apr 2018 14:39:37 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T19:19:40+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  data
Size:   2420
Md5:    7b4acc1f2279226ac200f3b46fc0ef7f
Sha1:   7fb1a45e39e2ec7402b38618a1d72f96f65ecb11
Sha256: 2b0bba67a2ded82cda40d58f4ab6039644ac6ba1f37d8dc0b10fd843acda498d
                                        
                                            GET /gtm.js?id=GTM-58Z37MT HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         216.58.207.232
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sat, 18 Aug 2018 18:21:42 GMT
Expires: Sat, 18 Aug 2018 18:21:42 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   44136
Md5:    feb0f7513e982c66cf98e63b60d60e89
Sha1:   e229631886945c431c4fa1c52e0418a4adc5058e
Sha256: 074184c8def6b17b6871a0408a37343902fe38e697472a3e74c07a3659e9e9a1
                                        
                                            GET /s/cormorantgaramond/v5/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fvg-O.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Cormorant+Garamond:400,700|Roboto
Origin: https://totalwararena.net

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 38568
Date: Thu, 16 Aug 2018 22:33:13 GMT
Expires: Fri, 16 Aug 2019 22:33:13 GMT
Last-Modified: Mon, 09 Oct 2017 22:10:53 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 157709
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   38568
Md5:    1b4c73a92a946e28d6a90a1355ff3e27
Sha1:   345363f1c66511ed6003046051f3f5de7d033c84
Sha256: 07393eda7214a58f0d424d163f7d0e1d79b1bb9080124f043ed57b9dadf68f5a
                                        
                                            GET /promo_web/a_kunitskiy/TWA/2.ogv HTTP/1.1 
Host: cdn2wotcom.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Range: bytes=8294400-

                                         
                                         92.38.156.254
HTTP/1.1 206 Partial Content
Content-Type: video/ogg
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:42 GMT
Content-Length: 4252
Connection: keep-alive
Last-Modified: Thu, 22 Mar 2018 15:26:30 GMT
Etag: "7ea09c-56801ee8c9580"
Cache-Control: max-age=290304000, public
Expires: Tue, 22 May 2018 15:01:24 GMT
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-04-24T15:01:24+00:00
X-ID: ts-up-gc5
Content-Range: bytes 8294400-8298651/8298652


--- Additional Info ---
Magic:  data
Size:   4252
Md5:    1d3b81857a2f2f284bdd2dc7d3b2efb8
Sha1:   2a5e6c2237c9fb05b7d3ad265f0bde51c9db3eed
Sha256: 3bd89b8b6ea86a4a952563a312bd66fe1f2edd6d85bd5107c24afa9aac23c3b1
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/ HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 403 Forbidden
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:42 GMT
Content-Length: 162
Connection: keep-alive
X-ID: ts-up-gc5


--- Additional Info ---
Magic:  HTML document text
Size:   162
Md5:    bc56979a0b381a791dd59713198a87fb
Sha1:   6c665dcfb0303a67024de3d694f810669ae188e2
Sha256: 1d08335e65da7cf40d1c4a7ba0088e0f39b9c5a4b2e42de95fc9ffa69fb96c7a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=171250
Date: Sat, 18 Aug 2018 18:21:42 GMT
Etag: "5b78394d-1d7"
Expires: Mon, 20 Aug 2018 17:34:40 GMT
Last-Modified: Sat, 18 Aug 2018 15:20:45 GMT
Server: ECS (arn/46BA)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    846a7f27570ea2e6f17850da7328b70f
Sha1:   4af2215ce3e6d28c61b8b27dfca5aa6fe398ed04
Sha256: 0d41ed86f02fd4cb61cb60ce6b7f3c656f51e01a4a7bdca340c35ac2b31a3603
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=161263
Date: Sat, 18 Aug 2018 18:21:42 GMT
Etag: "5b780ccb-1d7"
Expires: Mon, 20 Aug 2018 15:01:58 GMT
Last-Modified: Sat, 18 Aug 2018 12:10:51 GMT
Server: ECS (arn/46D1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    82555b252bb946cc7b7b4ba43599f129
Sha1:   b0707ed2f0f13c141859b344c60e35b628ce48a5
Sha256: 5004aa38abb2fac3a27c9552ee497e9e73e5196bf2fb5384675082f795ad73b4
                                        
                                            POST / HTTP/1.1 
Host: s.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=370624, public, no-transform, must-revalidate
Last-Modified: Thu, 16 Aug 2018 01:16:23 GMT
Expires: Thu, 23 Aug 2018 01:16:23 GMT
Date: Sat, 18 Aug 2018 18:21:42 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    969934447d68d68c401a9b666df6c380
Sha1:   c2c5ade9a98353c02c2ebad729b98dae5387abe1
Sha256: 17e10ee1785975e1e98eebecbade1908ac1c4ed37aed28243bd529804b1c76e3
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/variative_content/EN/common/elements/logo_header/elements/img_url/1263072/logo_wows_1492514880.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:42 GMT
Content-Length: 11810
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-2e22"
Expires: Thu, 26 Apr 2018 14:47:06 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T21:54:04+00:00
X-ID: ts-up-gc5
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 350 x 135, 8-bit/color RGBA, interlaced
Size:   11810
Md5:    ee56f5ddbb7a2bdd011fa01e37d173c1
Sha1:   1db65c35f1436195cf8d56fb8f11fa6e881afeb2
Sha256: 797e00ee23f07105599225fadb401896b7c80f2fa83922b59cff7baa415763be
                                        
                                            GET /metrika/watch_ua.js HTTP/1.1 
Host: d31j93rd8oukbv.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         54.192.98.123
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 131788
Connection: keep-alive
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 08:02:31 GMT
Last-Modified: Thu, 16 Aug 2018 14:25:47 GMT
Etag: "5b75896b-202cc"
Expires: Sat, 18 Aug 2018 09:02:31 GMT
Cache-Control: max-age=3600
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
Age: 1151
X-Cache: Hit from cloudfront
Via: 1.1 d2344bac503cfadf51884e9930680ffe.cloudfront.net (CloudFront)
X-Amz-Cf-Id: f-TBPlCmn7fUuiEnTwXLGeeyF-l7tIEXb07iaWD4OMGVomn6krxMGw==


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) C program text, with very long lines
Size:   131788
Md5:    335ab51cb264d098cb6218f62c5706dc
Sha1:   a8469a9f6935bc58ba17fbc56baeb8eb16174e41
Sha256: 297105c002eec4d18b530a2faf495fed8ae3af776e710d174c7d9e28c98dee18
                                        
                                            GET /uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/images/button_bg.png HTTP/1.1 
Host: cdn-wglc.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://cdn-wglc.gcdn.co/uploads/public/layouts/2018_02_20__14_32_27_TWA_open_weekend_EU/styles/style.css

                                         
                                         92.38.156.254
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:42 GMT
Content-Length: 996
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2018 14:32:29 GMT
Etag: "5a8c317d-3e4"
Expires: Thu, 26 Apr 2018 14:38:55 GMT
Cache-Control: max-age=172800, public
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-08-16T19:02:45+00:00
X-ID: ts-up-gc4
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 1 x 116, 8-bit/color RGBA, non-interlaced
Size:   996
Md5:    fd82264207918763580384e7b458ccb6
Sha1:   63c15bc8558e2732bfad6f5c697a2286a0e214d9
Sha256: 46e8544b9b5027e0b236162009a724fe30e1d404251695939511a5a59304e5ce
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sat, 18 Aug 2018 16:34:39 GMT
Expires: Sat, 18 Aug 2018 18:34:39 GMT
Last-Modified: Fri, 18 May 2018 01:10:24 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14386
Cache-Control: public, max-age=7200
Age: 6423
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14386
Md5:    b3de885583a477d4e31568948d6bebd7
Sha1:   2ce8d853244dde551c41d5207d6f71c567bde8c6
Sha256: e1bb5aa555a0d875e2a67884ceaa0629e08994a8aabadc2fac5b6915793dbf75
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Cormorant+Garamond:400,700|Roboto
Origin: https://totalwararena.net

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 19824
Date: Fri, 13 Jul 2018 15:35:50 GMT
Expires: Sat, 13 Jul 2019 15:35:50 GMT
Last-Modified: Mon, 16 Oct 2017 17:32:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 3120353
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   19824
Md5:    bafb105baeb22d965c70fe52ba6b49d9
Sha1:   934014cc9bbe5883542be756b3146c05844b254f
Sha256: 1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 18 Aug 2018 18:21:43 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=de16bb638519758888c62b22feee27ee21534616503; expires=Sun, 18-Aug-19 18:21:43 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Sat, 18 Aug 2018 15:37:57 GMT
Expires: Wed, 22 Aug 2018 15:37:57 GMT
Etag: "a041a06d4961f40d63bc3756fddcfa89d73c1862"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 44c666dd4607427f-OSL


--- Additional Info ---
Magic:  data
Size:   1570
Md5:    6d8b0451f7777d78d4fe5f8f99927a59
Sha1:   a041a06d4961f40d63bc3756fddcfa89d73c1862
Sha256: 17b0bf3b30d9016fa538a3a4f887aa9f41a8931c9ebd5f437eaff99c260a750a
                                        
                                            POST / HTTP/1.1 
Host: yandex.ocsp-responder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         5.45.205.234
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:44 GMT
Content-Length: 1552
Connection: keep-alive
Keep-Alive: timeout=5
Content-Transfer-Encoding: binary
X-Cached: EXPIRED
X-Cache: HIT


--- Additional Info ---
Magic:  data
Size:   1552
Md5:    6be9f9c7c46ac01effc30b8502c6a463
Sha1:   9f8b7ff267bf89091e689b8acddac2b02ac3ed9e
Sha256: 806492527597e021b7cfe0f13ae580ea5af867eb9292d8367b4c67ae0d745e41
                                        
                                            OPTIONS /watch/3?wmode=7&page-ref=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A10%3Agdpr%3A14%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616503%3Au%3A1534616503510260951%3Ahi%3A HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://totalwararena.net
Access-Control-Request-Method: POST

                                         
                                         87.250.251.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:44 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Origin: https://totalwararena.net
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 18 Aug 2018 18:21:44 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    312bafe8720d312380c1a3f5da132ff3
Sha1:   44f0831796a4c4aa649ece0a198fbd06125ef128
Sha256: 20cd224fc8ee5c29676b706b6cecd2a72a84dd435f436ea3934e263ab921ae9a
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: ymetrica1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         154.47.36.47
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:45 GMT
Content-Length: 61
Last-Modified: Mon, 12 Oct 2015 13:09:09 GMT
Connection: keep-alive
Etag: "561bb0f5-3d"
Content-Encoding: gzip
Expires: Sat, 18 Aug 2018 19:21:45 GMT
Cache-Control: max-age=3600
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  gzip compressed data, was "advert.gif", from Unix, last modified: Mon Oct 12 15:06:12 2015
Size:   61
Md5:    aad2d5e940637a676e25e6cc7a684a83
Sha1:   c77946775d4c1719c48eb691edfbcf873b0738f5
Sha256: d9d219b8ba39a549d43400945b848dde73269f25dab5b75b85439c451ca0a525
                                        
                                            GET /collect?v=1&_v=j68&aip=1&a=973997712&t=pageview&_s=1&dl=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&dr=http%3A%2F%2Fwww.theadgateway.com%2Fjump%2Fnext.php%3Fr%3D2045607%26sub1%3D%7Bsource_id%7D&ul=en-us&de=UTF-8&dt=Total%20War%3A%20ARENA&sd=24-bit&sr=1176x885&vp=1159x737&je=1&fl=10.0%20r45&_u=YGBAgEQ~&jid=512102366&gjid=1061787063&cid=1086268647.1534616504&tid=UA-40205758-4&_gid=820581773.1534616504&gtm=G8658Z37MT&cd7=TWA&cd1=TWA%20OBT%20Light%20LP&cd2=1086268647.1534616504&z=1095064271 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 07 Aug 2018 14:54:55 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 962809
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j68&tid=UA-40205758-4&cid=1086268647.1534616504&jid=512102366&gjid=1061787063&_gid=820581773.1534616504&_u=YGBAgEQ~&z=433346913 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         173.194.73.156
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-40205758-4&cid=1086268647.1534616504&jid=512102366&_v=j68&z=433346913
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Sat, 18 Aug 2018 18:21:45 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 365
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  HTML document text
Size:   365
Md5:    c20f6165918fb9d8b89e55c0ef9cdac1
Sha1:   fc86a66b273fff62b9904ba9f364ec061e39e9d4
Sha256: af0edfd4dff4f8b4b2be1d369c093a855327fbf363eb888b7730f320674abee4
                                        
                                            POST /watch/3?wmode=7&page-ref=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A10%3Agdpr%3A14%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616503%3Au%3A1534616503510260951%3Ahi%3A HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu
Content-Length: 0
Origin: https://totalwararena.net
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         87.250.251.119
HTTP/1.1 302 Found
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:46 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 18 Aug 2018 18:21:46 GMT
Expires: Sat, 18 Aug 2018 18:21:46 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: yandexuid=4833665711534616506; domain=.yandex.ru; path=/; expires=Sun, 18-Aug-2019 18:21:46 GMT yabs-sid=2337898871534616506; path=/ i=bzdmQRb/errNtYJ5SFwyDZF2RqEoVFcD5sK5SRr0MXaOLj5lonlIf2NVUyrM0i5tfojnUAKKySCQ8SJ6vXj6WWmlNYg=; Expires=Sun, 18-Aug-2019 18:21:46 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly yp=1566152506.yrts.1534616506#1566152506.yrtsi.1534616506; domain=.yandex.ru; path=/; expires=Tue, 15-Aug-2028 18:21:46 GMT
Location: https://mc.yandex.ru/watch/3/1?wmode=7&page-ref=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A10%3Agdpr%3A14%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616503%3Au%3A1534616503510260951%3Ahi%3A
Access-Control-Allow-Origin: https://totalwararena.net
Access-Control-Allow-Credentials: true
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 18 Aug 2018 18:21:47 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    820b3ecb3b28b8cfc618466ce4310a7e
Sha1:   ccc196d7567bf10e82613368a3ef79e72045b691
Sha256: 0ece61a10968fd93f0ef02efb082ac09d104253bc56f23e9266bdc854820ddef
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-40205758-4&cid=1086268647.1534616504&jid=512102366&_v=j68&z=433346913 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         216.58.207.228
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 18 Aug 2018 18:21:50 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-40205758-4&cid=1086268647.1534616504&jid=512102366&_v=j68&z=433346913&slf_rd=1&random=1715068117
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
                                        
                                            OPTIONS /watch/3?wmode=7&page-ref=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A10%3Agdpr%3A14%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616503%3Au%3A1534616503510260951%3Ahi%3A HTTP/1.1 
Host: ymetrica1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://totalwararena.net
Access-Control-Request-Method: POST

                                         
                                         154.47.36.47
HTTP/1.1 200 OK
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:50 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Origin: https://totalwararena.net
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 18 Aug 2018 18:21:50 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f6deb7acc99b6552f71925c90e9c329f
Sha1:   907ec20936c74816dd1232bc90a794515ee5771d
Sha256: b5afac2cca7a057116afd4d4930bc1eaabc9763310bc3c605ee099790fa67622
                                        
                                            GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-40205758-4&cid=1086268647.1534616504&jid=512102366&_v=j68&z=433346913&slf_rd=1&random=1715068117 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sat, 18 Aug 2018 18:21:50 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  data
Size:   1162842
Md5:    ccb4b6de7ba39eb6583803710dd69e67
Sha1:   40f23d71a782ff85f7cd4c42f97ba9fba4ae7e2a
Sha256: 062850cf0448736fc99b6ba3f36b3ae5b8c215d14a28d9f97b119423f5064bc9
                                        
                                            POST /watch/3?wmode=7&page-ref=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A10%3Agdpr%3A14%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616503%3Au%3A1534616503510260951%3Ahi%3A HTTP/1.1 
Host: ymetrica1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu
Content-Length: 0
Origin: https://totalwararena.net
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         154.47.36.47
HTTP/1.1 302 Found
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:50 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 18 Aug 2018 18:21:50 GMT
Expires: Sat, 18 Aug 2018 18:21:50 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: yandexuid=1908626381534616510; domain=.com; path=/; expires=Sun, 18-Aug-2019 18:21:50 GMT yabs-sid=1148419301534616510; path=/ yp=1566152510.yrts.1534616510; domain=.com; path=/; expires=Tue, 15-Aug-2028 18:21:50 GMT
Location: https://ymetrica1.com/watch/3/1?wmode=7&page-ref=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A10%3Agdpr%3A14%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616503%3Au%3A1534616503510260951%3Ahi%3A
Access-Control-Allow-Origin: https://totalwararena.net
Access-Control-Allow-Credentials: true
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /watch/3?wmode=5&callback=_ymjsp1012600713&page-ref=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A6%3Ati%3A10%3Agdpr%3A14%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616503%3Au%3A1534616503510260951%3Ahi%3A HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu
Cookie: yandexuid=4833665711534616506; yabs-sid=2337898871534616506; i=bzdmQRb/errNtYJ5SFwyDZF2RqEoVFcD5sK5SRr0MXaOLj5lonlIf2NVUyrM0i5tfojnUAKKySCQ8SJ6vXj6WWmlNYg=; yp=1566152506.yrts.1534616506#1566152506.yrtsi.1534616506

                                         
                                         87.250.251.119
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:52 GMT
Content-Length: 75
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 18 Aug 2018 18:21:52 GMT
Expires: Sat, 18 Aug 2018 18:21:52 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   75
Md5:    94a02b63d7f00f5a747480135d096f89
Sha1:   c368619b1f6f3db29d548e24515ee88b8335f20c
Sha256: 143fbd014e16a2710b94d86a42af3594e7f733ed04d36959d4bc60811f1dc68f
                                        
                                            GET /sync_cookie_image_check HTTP/1.1 
Host: ymetrica1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu
Cookie: yabs-sid=1148419301534616510

                                         
                                         154.47.36.47
HTTP/1.1 302 Found
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:53 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 18 Aug 2018 18:21:53 GMT
Expires: Sat, 18 Aug 2018 18:21:53 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: sync_cookie_csrf=3653491192fake; domain=ymetrica1.com; path=/; expires=Sat, 18-Aug-2018 18:31:53 GMT
Location: https://mc.yandex.ru/sync_cookie_image_start?redirect_domain=ymetrica1.com&token=1883.hIyzUk5DQjtfguvcuFSTeyA31LNHCaiwszb45LDWcQ6AhDyj0Q2z_gaIi3jEGHYA.bWHURYgsdvwAT9gRDWyIn3P8gMY%2C
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /sync_cookie_image_start?redirect_domain=ymetrica1.com&token=1883.hIyzUk5DQjtfguvcuFSTeyA31LNHCaiwszb45LDWcQ6AhDyj0Q2z_gaIi3jEGHYA.bWHURYgsdvwAT9gRDWyIn3P8gMY%2C HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu
Cookie: yandexuid=4833665711534616506; yabs-sid=2337898871534616506; i=bzdmQRb/errNtYJ5SFwyDZF2RqEoVFcD5sK5SRr0MXaOLj5lonlIf2NVUyrM0i5tfojnUAKKySCQ8SJ6vXj6WWmlNYg=; yp=1566152506.yrts.1534616506#1566152506.yrtsi.1534616506

                                         
                                         87.250.251.119
HTTP/1.1 302 Found
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:53 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 18 Aug 2018 18:21:53 GMT
Expires: Sat, 18 Aug 2018 18:21:53 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: sync_cookie_csrf=2144163615fake; domain=mc.yandex.ru; path=/; expires=Sat, 18-Aug-2018 18:31:53 GMT
Location: https://ymetrica1.com/sync_cookie_image_decide?token=1883.-mYtMduBBNdSEwXuzgJLF4FWpsWVFXo9zakH-6kur7BEBqykJwG0dLuoKoOgdHy6zMDYfhPslWCZbohNDY1uh6ySrkKLkKJN6f0L3ZfeqYg%2C.iDktR_3JnRHJLGKCxrmZavHMQQI%2C
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            GET /sync_cookie_image_decide?token=1883.-mYtMduBBNdSEwXuzgJLF4FWpsWVFXo9zakH-6kur7BEBqykJwG0dLuoKoOgdHy6zMDYfhPslWCZbohNDY1uh6ySrkKLkKJN6f0L3ZfeqYg%2C.iDktR_3JnRHJLGKCxrmZavHMQQI%2C HTTP/1.1 
Host: ymetrica1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu
Cookie: yabs-sid=1148419301534616510; sync_cookie_csrf=3653491192fake

                                         
                                         154.47.36.47
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:53 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 18 Aug 2018 18:21:53 GMT
Expires: Sat, 18 Aug 2018 18:21:53 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: yandexuid=4833665711534616506; domain=.com; path=/; expires=Fri, 13-Aug-2038 18:21:53 GMT sync_cookie_ok=synced; domain=ymetrica1.com; path=/; expires=Sun, 19-Aug-2018 18:21:53 GMT
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            OPTIONS /watch/45727869?wmode=7&page-ref=http%3A%2F%2Fwww.theadgateway.com%2Fjump%2Fnext.php%3Fr%3D2045607%26sub1%3D%7Bsource_id%7D&page-url=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A10%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x737%3Az%3A120%3Ai%3A20180818202142%3Aet%3A1534616513%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A1123265916980%3Arqn%3A1%3Arn%3A444805582%3Ahid%3A1000498191%3Awn%3A63029%3Ahl%3A1%3Agdpr%3A14%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616513%3Au%3A1534616503510260951%3Ahi%3A%3At%3ATotal%20War%3A%20ARENA HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://totalwararena.net
Access-Control-Request-Method: POST

                                         
                                         87.250.251.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:53 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Origin: https://totalwararena.net
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            POST /watch/45727869?wmode=7&page-ref=http%3A%2F%2Fwww.theadgateway.com%2Fjump%2Fnext.php%3Fr%3D2045607%26sub1%3D%7Bsource_id%7D&page-url=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A10%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x737%3Az%3A120%3Ai%3A20180818202142%3Aet%3A1534616513%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A1123265916980%3Arqn%3A1%3Arn%3A444805582%3Ahid%3A1000498191%3Awn%3A63029%3Ahl%3A1%3Agdpr%3A14%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616513%3Au%3A1534616503510260951%3Ahi%3A%3At%3ATotal%20War%3A%20ARENA HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu
Content-Length: 0
Origin: https://totalwararena.net
Cookie: yandexuid=4833665711534616506; yabs-sid=2337898871534616506; i=bzdmQRb/errNtYJ5SFwyDZF2RqEoVFcD5sK5SRr0MXaOLj5lonlIf2NVUyrM0i5tfojnUAKKySCQ8SJ6vXj6WWmlNYg=; yp=1566152506.yrts.1534616506#1566152506.yrtsi.1534616506; sync_cookie_csrf=2144163615fake
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         87.250.251.119
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:53 GMT
Content-Length: 152
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 18 Aug 2018 18:21:53 GMT
Expires: Sat, 18 Aug 2018 18:21:53 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: https://totalwararena.net
Access-Control-Allow-Credentials: true
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   152
Md5:    52390abe95c754cd5ccea78840ffc0f1
Sha1:   d37669dff455ce01a520cf31bc032d7af0600024
Sha256: 3208ce86020f7cc1360f0df53e5b4966f78b300aff23e8e0c39f1ed8953c70b1
                                        
                                            OPTIONS /watch/45727869?page-url=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A7%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x737%3Az%3A120%3Ai%3A20180818202158%3Aet%3A1534616518%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A258%3Als%3A1123265916980%3Arqn%3A2%3Arn%3A445711175%3Ahid%3A1000498191%3Agdpr%3A14%3Aeu%3A1%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616518%3Au%3A1534616503510260951%3Ahi%3A HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://totalwararena.net
Access-Control-Request-Method: POST

                                         
                                         87.250.251.119
HTTP/1.1 200 OK
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:58 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Access-Control-Allow-Origin: https://totalwararena.net
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
                                        
                                            POST /watch/45727869?page-url=https%3A%2F%2Ftotalwararena.net%2Fjoin%2F3337_NO1%2520%3Futm_campaign%3D2045607-2476246003-0%26utm_medium%3D8710%26acsc%3D102390166%26sid%3DSIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A%26lpsn%3DTWA%2BOBT%2BLight%2BLP%26utm_source%3Dwotcpu&charset=utf-8&browser-info=ti%3A7%3Aj%3A1%3As%3A1176x885x24%3Aadb%3A2%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1159x737%3Az%3A120%3Ai%3A20180818202158%3Aet%3A1534616518%3Aen%3Autf-8%3Ac%3A1%3Ala%3Aen-us%3Aar%3A1%3Anb%3A1%3Acl%3A258%3Als%3A1123265916980%3Arqn%3A2%3Arn%3A445711175%3Ahid%3A1000498191%3Agdpr%3A14%3Aeu%3A1%3Av%3A1210%3Arqnl%3A1%3Ast%3A1534616518%3Au%3A1534616503510260951%3Ahi%3A HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://totalwararena.net/join/3337_NO1%20?utm_campaign=2045607-2476246003-0&utm_medium=8710&acsc=102390166&sid=SIDZ8edzK2AuWD32DrX6W8cQo9ueJ6A2sm_YT0J_eHe9LNZoDxB-YqAB16czxcKKNqIs-ajf7f13Vhx0cE58FZShCodCWG57DdACCDci2gWyRf6JOtarM838rnwP3wM5bZ1YHLnIm5vBV4_ka1eTAI_5FsET1JxOtkwV2XXz9gSqp0CI1-6yWq1uR8meP7tlicwFwDkkcdUXuRuWsn6rNbHo7UTfXBKP-A&lpsn=TWA+OBT+Light+LP&utm_source=wotcpu
Content-Length: 0
Origin: https://totalwararena.net
Cookie: yandexuid=4833665711534616506; yabs-sid=2337898871534616506; i=bzdmQRb/errNtYJ5SFwyDZF2RqEoVFcD5sK5SRr0MXaOLj5lonlIf2NVUyrM0i5tfojnUAKKySCQ8SJ6vXj6WWmlNYg=; yp=1566152506.yrts.1534616506#1566152506.yrtsi.1534616506; sync_cookie_csrf=2144163615fake
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         87.250.251.119
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Sat, 18 Aug 2018 18:21:58 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Last-Modified: Sat, 18 Aug 2018 18:21:58 GMT
Expires: Sat, 18 Aug 2018 18:21:58 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Access-Control-Allow-Origin: https://totalwararena.net
Access-Control-Allow-Credentials: true
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /promo_web/a_kunitskiy/TWA/2.ogv HTTP/1.1 
Host: cdn2wotcom.gcdn.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Range: bytes=0-

                                         
                                         92.38.156.254
HTTP/1.1 206 Partial Content
Content-Type: video/ogg
                                        
Server: nginx
Date: Sat, 18 Aug 2018 18:21:41 GMT
Content-Length: 8298652
Connection: keep-alive
Last-Modified: Thu, 22 Mar 2018 15:26:30 GMT
Etag: "7ea09c-56801ee8c9580"
Cache-Control: max-age=290304000, public
Expires: Tue, 22 May 2018 17:00:41 GMT
Access-Control-Allow-Origin: *
Cache: HIT
X-Cached-Since: 2018-04-24T17:00:41+00:00
X-ID: ts-up-gc4
Content-Range: bytes 0-8298651/8298652


--- Additional Info ---