Overview

URL nufashesto.com/b.3/VR0vPM3hpOvnb/mWVBJKZqDN0M0LNRT/Q/wzO/TxIS0zLWTxQ/1/NvD-AP5BMojnUl
IP88.85.94.245
ASNWebzilla B.V.
Location Netherlands
Report completed2022-10-04 15:20:01 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-09-12 2 privacyportal-de.onetrust.com/ Generic/Spear Phishing
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (37)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-04 04:45:06 UTC 34.217.237.91
mnemonic passive DNS img-getpocket.cdn.mozilla.net (4) 1631 2017-09-01 03:40:57 UTC 2022-10-04 04:18:32 UTC 34.120.237.76
mnemonic passive DNS mc.yandex.ru (9) 2672 2017-01-29 05:34:36 UTC 2022-10-04 08:04:40 UTC 93.158.134.119
mnemonic passive DNS alb.reddit.com (1) 1521 2017-06-15 05:33:56 UTC 2022-10-04 14:48:04 UTC 151.101.85.140
mnemonic passive DNS www.google.no (2) 25607 2016-04-05 19:50:59 UTC 2022-10-04 08:54:14 UTC 142.250.74.3
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-04 04:16:51 UTC 34.117.237.239
mnemonic passive DNS ocsp.godaddy.com (1) 698 2012-05-20 19:28:57 UTC 2022-10-04 04:40:22 UTC 192.124.249.36
mnemonic passive DNS rdr.wargaming.net (1) 88763 2018-04-19 16:16:11 UTC 2022-10-03 18:59:32 UTC 92.223.27.99
mnemonic passive DNS ocsp.pki.goog (11) 175 2017-06-14 07:23:31 UTC 2022-10-04 04:17:09 UTC 142.250.74.3
mnemonic passive DNS eu.wargaming.net (1) 145570 2014-10-03 10:49:42 UTC 2022-09-30 10:44:42 UTC 92.223.7.169
mnemonic passive DNS b92.yahoo.co.jp (1) 15866 2012-10-07 00:06:28 UTC 2022-10-04 06:44:00 UTC 183.79.249.252
mnemonic passive DNS d.adroll.com (15) 1530 2015-03-06 22:06:59 UTC 2022-10-04 13:50:02 UTC 34.240.197.120
mnemonic passive DNS nufashesto.com (2) 0 2022-02-15 10:03:08 UTC 2022-10-04 09:18:50 UTC 88.85.94.245 Unknown ranking
mnemonic passive DNS ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2022-10-04 07:51:20 UTC 93.184.220.29
mnemonic passive DNS ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 54.230.245.110
mnemonic passive DNS privacyportal-de.onetrust.com (1) 8687 2018-05-25 09:58:46 UTC 2022-10-04 07:50:54 UTC 104.18.41.98
mnemonic passive DNS geolocation.onetrust.com (1) 802 2018-02-07 11:23:41 UTC 2022-10-04 07:59:41 UTC 172.64.146.158
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-04 04:29:41 UTC 143.204.55.25
mnemonic passive DNS promo-cdn.worldofwarships.com (16) 355412 2022-02-14 08:03:08 UTC 2022-10-02 14:35:11 UTC 92.223.97.97
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-10-04 04:25:35 UTC 142.250.74.164
mnemonic passive DNS googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-10-04 09:27:47 UTC 142.250.74.34
mnemonic passive DNS s.adroll.com (6) 2553 2012-06-27 18:27:26 UTC 2022-10-04 06:21:30 UTC 143.204.55.84
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-04 09:13:54 UTC 143.204.55.35
mnemonic passive DNS ocsp.globalsign.com (4) 2075 2012-05-25 06:20:55 UTC 2022-10-04 04:22:54 UTC 104.18.21.226
mnemonic passive DNS 10697551.fls.doubleclick.net (1) 157761 2021-04-07 14:28:26 UTC 2022-09-27 20:39:57 UTC 142.250.74.70
mnemonic passive DNS a.quora.com (1) 7568 2017-05-08 19:06:55 UTC 2022-10-04 09:02:21 UTC 162.159.153.247
mnemonic passive DNS track.wg-aff.com (1) 124015 2019-09-30 07:03:52 UTC 2022-10-04 14:22:44 UTC 35.204.130.99
mnemonic passive DNS cdn.jsdelivr.net (1) 439 2012-09-30 00:15:09 UTC 2022-10-04 04:19:28 UTC 151.101.85.229
mnemonic passive DNS cdn.cookielaw.org (3) 502 2013-12-28 13:20:36 UTC 2022-10-04 06:04:47 UTC 104.16.149.64
mnemonic passive DNS q.quora.com (1) 3239 2017-05-08 19:06:57 UTC 2022-10-04 08:01:13 UTC 52.2.147.16
mnemonic passive DNS s.yimg.jp (1) 11015 2012-10-25 03:38:43 UTC 2022-10-04 06:44:00 UTC 183.79.249.252
mnemonic passive DNS r3.o.lencr.org (11) 344 2020-12-02 08:52:13 UTC 2022-10-04 04:17:22 UTC 23.36.76.226
mnemonic passive DNS www.googletagmanager.com (2) 75 2012-12-25 14:52:06 UTC 2022-10-04 09:37:43 UTC 142.250.74.168
mnemonic passive DNS promo.worldofwarships.eu (2) 327898 2020-10-28 08:34:32 UTC 2022-10-04 12:14:50 UTC 92.223.97.97
mnemonic passive DNS www.redditstatic.com (1) 1440 2012-06-30 12:33:28 UTC 2022-10-04 06:14:40 UTC 151.101.85.140
mnemonic passive DNS adservice.google.com (1) 76 2021-02-20 16:10:48 UTC 2022-10-04 14:29:35 UTC 142.250.74.66
mnemonic passive DNS adservice.google.no (1) 96969 2017-09-26 14:23:08 UTC 2022-10-04 04:17:30 UTC 216.58.207.226


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 88.85.94.245

Date UQ / IDS / BL URL IP
2022-11-26 22:44:56 +0000
0 - 0 - 3 scared-consequence.com/cEG_FGzHc.zI9Jk-aLXMQN (...) 88.85.94.245
2022-10-04 15:20:01 +0000
0 - 0 - 1 nufashesto.com/b.3/VR0vPM3hpOvnb/mWVBJKZqDN0M (...) 88.85.94.245
2022-09-20 16:11:53 +0000
0 - 0 - 4 scared-consequence.com/bH3-VJ0KP.3LJMy_aOWPQQ (...) 88.85.94.245
2022-09-20 16:11:52 +0000
0 - 0 - 4 scared-consequence.com/bg3hV.0iP_3kJlymanW-Qp (...) 88.85.94.245
2022-09-14 01:25:23 +0000
0 - 0 - 2 scared-consequence.com/b.3AVu0hPv3VpAvYbDm/VU (...) 88.85.94.245

Last 5 reports on ASN: Webzilla B.V.

Date UQ / IDS / BL URL IP
2022-11-26 22:44:56 +0000
0 - 0 - 3 scared-consequence.com/cEG_FGzHc.zI9Jk-aLXMQN (...) 88.85.94.245
2022-11-26 18:28:30 +0000
0 - 0 - 3 g0td0main.com/Purb99d0745f9c8757824933c881516 (...) 188.72.236.136
2022-11-26 15:12:50 +0000
0 - 0 - 1 chikiclicki.com/ 188.72.236.136
2022-11-26 12:13:11 +0000
0 - 0 - 19 dfiles.eu/files/xq2mtzl5f 91.226.124.80
2022-11-26 10:09:07 +0000
0 - 0 - 7 dfiles.eu/files/n01frqnqw/F1FA-14.exe 91.226.124.76

Last 1 reports on domain: nufashesto.com

Date UQ / IDS / BL URL IP
2022-10-04 15:20:01 +0000
0 - 0 - 1 nufashesto.com/b.3/VR0vPM3hpOvnb/mWVBJKZqDN0M (...) 88.85.94.245

No other reports with similar screenshot



JavaScript

Executed Scripts (38)


Executed Evals (4)

#1 JavaScript::Eval (size: 485, repeated: 1) - SHA256: 1324ed8dc18a9bf3caad3607dc460754ee3fb2437a1c4bd2b4ad5601e96e2d14

                                        importScripts("https://promo-cdn.worldofwarships.com/glows-31312/src/js/riddler/sha3.js");
self.onmessage = function(e) {
    var global = {};
    global.env = {};
    self.postMessage((function(e) {
        for (var t, r = e.key, n = e.stamp, o = e.prefix, s = e.offset, i = e.step, a = e.expiresAt, l = function(e) {
                var t = CryptoJS.SHA3([n, e].join(":"));
                return 0 === String(t, {
                    outputLength: 512
                }).indexOf(o)
            };;) {
            if (s % 1e3 == 0 && (t = void 0, t = Date.now() / 1e3, a < t)) return {
                key: r,
                counter: null
            };
            if (l(s)) return {
                key: r,
                counter: s
            };
            s += i
        }
    })(e.data))
}
                                    

#2 JavaScript::Eval (size: 81, repeated: 1) - SHA256: bed6d5a9e64eff6b2353c54d94e8d540746c00e7bc4bde27d11323060df11507

                                        (function() {
    return google_tag_manager["GTM-58Z37MT"].macro(13).split("?")[0]
})();
                                    

#3 JavaScript::Eval (size: 83, repeated: 1) - SHA256: db67f3a811c17993a0388ea2c4679e41f29d21c3a74de4b873ff862df1dfdb07

                                        (function() {
    var b = 2;
    return function(a) {
        a.set("dimension" + b, a.get("clientId"))
    }
})();
                                    

#4 JavaScript::Eval (size: 80, repeated: 1) - SHA256: bb57d1fc7dcdb37b2fb94cebf98da064d7905886c31a1224f0de8e2aa4b6d304

                                        (function() {
    return google_tag_manager["GTM-58Z37MT"].macro(7).split("?")[0]
})();
                                    

Executed Writes (0)



HTTP Transactions (115)


Request Response
                                        
                                            GET /b.3/VR0vPM3hpOvnb/mWVBJKZqDN0M0LNRT/Q/wzO/TxIS0zLWTxQ/1/NvD-AP5BMojnUl HTTP/1.1 
Host: nufashesto.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         88.85.94.245
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 04 Oct 2022 15:19:49 GMT
Content-Length: 162
Connection: keep-alive
Location: https://nufashesto.com/b.3/VR0vPM3hpOvnb/mWVBJKZqDN0M0LNRT/Q/wzO/TxIS0zLWTxQ/1/NvD-AP5BMojnUl
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 14:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: g6xxJZp70jxf0EYiVfa8BJO_1IUlxONCY1soiCDXvIOWJ-D1aE21Nw==
Age: 1965


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6369
Expires: Tue, 04 Oct 2022 17:05:59 GMT
Date: Tue, 04 Oct 2022 15:19:50 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.25
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hovGG-pNWzva9aWFMAwHb9NX53uij4Zr2zglw9BIMEpzhcdSUlaXdw==
age: 35483
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:50 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 14:29:33 GMT
Expires: Tue, 04 Oct 2022 14:31:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Xoq31NwyAxZCKDngKkgTdudKEUGp-g3YvHSoNdgWXkglNOwvDEANrQ==
Age: 3017


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5445
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 15:19:50 GMT
Last-Modified: Tue, 04 Oct 2022 13:49:05 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         192.124.249.36
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Tue, 04 Oct 2022 15:19:51 GMT
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 04 Oct 2022 03:34:43 GMT
Expires: Wed, 05 Oct 2022 03:34:43 GMT
ETag: "74e816ac44805bbb4c14eea82ef1054ce18ec450"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1778
Md5:    686354bcba1be4ae4529728212ef1839
Sha1:   74e816ac44805bbb4c14eea82ef1054ce18ec450
Sha256: 55dbb2cd3a3812156f827421f673dad4613bc6170a05a672667662554a7337ad
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CsdI2EIgWA4t8CezlOch5g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.217.237.91
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1sArrivylnqz7ot5g8Lr9D4BTWA=

                                        
                                            GET /click?pid=1287&offer_id=82&ref_id=jdsb6nvtgxkgmk0axf0c&sub1=E447HGBJ6R HTTP/1.1 
Host: track.wg-aff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         35.204.130.99
HTTP/2 302 Found
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
content-length: 0
location: https://rdr.wargaming.net/713tw6jf/?pub_id=1287&xid=633c4f176be7a1000136408d&xid_param1=E447HGBJ6R&xid_param_2=
set-cookie: afclick=633c4f176be7a1000136408d; expires=Wed, 04 Oct 2023 15:19:51 GMT; secure; SameSite=None afoffers={"82":1664896791}; expires=Wed, 04 Oct 2023 15:19:51 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6252
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 15:19:51 GMT
Last-Modified: Tue, 04 Oct 2022 13:35:39 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /713tw6jf/?pub_id=1287&xid=633c4f176be7a1000136408d&xid_param1=E447HGBJ6R&xid_param_2= HTTP/1.1 
Host: rdr.wargaming.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         92.223.27.99
HTTP/1.1 301 Moved Permanently
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Tue, 04 Oct 2022 15:19:51 GMT
Content-Length: 22
Connection: keep-alive
Location: https://promo.worldofwarships.eu/glows-31312/eu-en/?pub_id=1287&xid=633c4f176be7a1000136408d&xid_param1=E447HGBJ6R&xid_param_2=&sid=SIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ&enctid=cnd8nn47hn3i&lpsn=WOWS+Inpage+Registration+Bismarck&foris=1&teclient=1664896791240865238&utm_source=wlap&utm_medium=affiliate&utm_campaign=713tw6jf&utm_content=1287
Set-Cookie: STIDREFERRAL=SIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure enctid=cnd8nn47hn3i; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure teclient=1664896791240865238; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   22
Md5:    0e0bf67572311f8a23814419ff24ee9a
Sha1:   78328dfc54708433cdfb3e7857e57f87ec443b08
Sha256: c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A02AB5265C99D1EB2018E634B1E874F0259E6CDBB4FAEAD86E4E5E480E65F730"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5671
Expires: Tue, 04 Oct 2022 16:54:22 GMT
Date: Tue, 04 Oct 2022 15:19:51 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DF125BDBAF33C4FF9800DA11622A2018E11B38B321595CB5D8019D671E71CD4F"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15440
Expires: Tue, 04 Oct 2022 19:37:11 GMT
Date: Tue, 04 Oct 2022 15:19:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DF125BDBAF33C4FF9800DA11622A2018E11B38B321595CB5D8019D671E71CD4F"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15440
Expires: Tue, 04 Oct 2022 19:37:11 GMT
Date: Tue, 04 Oct 2022 15:19:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DF125BDBAF33C4FF9800DA11622A2018E11B38B321595CB5D8019D671E71CD4F"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15440
Expires: Tue, 04 Oct 2022 19:37:11 GMT
Date: Tue, 04 Oct 2022 15:19:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DF125BDBAF33C4FF9800DA11622A2018E11B38B321595CB5D8019D671E71CD4F"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15440
Expires: Tue, 04 Oct 2022 19:37:11 GMT
Date: Tue, 04 Oct 2022 15:19:51 GMT
Connection: keep-alive

                                        
                                            GET /global_static/fonts/roboto-condensed-v18-latin-ext_latin_cyrillic-ext_cyrillic-700.woff2 HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
content-length: 50804
last-modified: Mon, 14 Feb 2022 22:01:30 GMT
etag: "22898c3b19e2f0bd46fcfef9d88a47e6"
x-amz-request-id: tx000000000000000c13d4f-006322f436-1bf83e19-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T10:38:28+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 50804, version 1.0\012- data
Size:   50804
Md5:    22898c3b19e2f0bd46fcfef9d88a47e6
Sha1:   4b8c0ac521f165a7e4b62af431cf8f1f1e78ea19
Sha256: 6db76515ba91d77318f17a2a287b14026e277145497ba9915b1a30acf4338858
                                        
                                            GET /global_static/fonts/roboto-v20-latin-ext_latin_cyrillic-ext_cyrillic-regular.woff2 HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
content-length: 51116
last-modified: Mon, 14 Feb 2022 22:01:44 GMT
etag: "9549360090baf2eb8b25d3a9708fc19d"
x-amz-request-id: tx000000000000001592ae9-006322f436-1bd1576a-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T10:38:28+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 51116, version 1.0\012- data
Size:   51116
Md5:    9549360090baf2eb8b25d3a9708fc19d
Sha1:   3229ae839d33696d39c89dc0d3e193fe985f1da4
Sha256: a7bf1f115e60e0c8f3b335df66d4d77baaae4eb11d2cea2cf7c5b4693403a46f
                                        
                                            GET /gtag/js?id=UA-40205758-4 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 15:19:51 GMT
expires: Tue, 04 Oct 2022 15:19:51 GMT
cache-control: private, max-age=900
last-modified: Tue, 04 Oct 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42339
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2039)
Size:   42339
Md5:    84e692dfa0188050d1a078188adc5307
Sha1:   f2c006759d09257d79bda08e477afe0e42bb006c
Sha256: fcf1186fcb1dcf338ca380e0110a728d4603e402f46fe20f579ca2d1d87cacc3
                                        
                                            GET /glows-31312/eu-en/?pub_id=1287&xid=633c4f176be7a1000136408d&xid_param1=E447HGBJ6R&xid_param_2=&sid=SIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ&enctid=cnd8nn47hn3i&lpsn=WOWS+Inpage+Registration+Bismarck&foris=1&teclient=1664896791240865238&utm_source=wlap&utm_medium=affiliate&utm_campaign=713tw6jf&utm_content=1287 HTTP/1.1 
Host: promo.worldofwarships.eu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
vary: Accept-Encoding
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: W/"c0cd76cb3e84eb752ce7cfee315f9d3a"
x-amz-request-id: tx000000000000000b28f21-0063234bd2-1be2488f-ed1
cache: HIT
x-cached-since: 2022-10-03T11:42:28+00:00
x-id: sto5-up-gc12
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   38931
Md5:    e9140fb53e01549db1c5838e0206c4cb
Sha1:   671211d955dd74a52e9a28422530ff0181555b76
Sha256: 8b64a84d7df80a45314695bd7bbc9314b67bc02dbe02af9cf3dabe740a04cf6b
                                        
                                            GET /glows-31312/src/css/main.css HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
vary: Accept-Encoding
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: W/"480df8a796cef864a14036c5dc2a9824"
x-amz-request-id: tx000000000000001443a93-006322f436-1bd15767-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T10:38:28+00:00
x-id: sto5-up-gc12
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1184)
Size:   20969
Md5:    10d2d68f1e69d4765ef92b7b651e1f7d
Sha1:   d2de44df6195090d9ac9f3a3b577d9ea3910ccd4
Sha256: 4fce64624757274a0181522e0a7ff6d86aa1d6157f4c4ccd765ca708d394de5c
                                        
                                            GET /glows-31312/src/js/main.js HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: W/"afb18a02207ea76bdcc80553459bba9a"
x-amz-request-id: tx000000000000000a75a24-006322f43b-1be2488f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T10:38:29+00:00
x-id: sto5-up-gc14
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65474)
Size:   52143
Md5:    2345be978ba912633c8c4fe349476662
Sha1:   1833741077f5311c8c81104f2e2880ca52880241
Sha256: 16c9b3c6d8060d67f1016edf3c3e63d0d8a0edd8a79f75389f7fdd2e1c2882d3
                                        
                                            GET /gtm.js?id=GTM-58Z37MT HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 15:19:51 GMT
expires: Tue, 04 Oct 2022 15:19:51 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 117672
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (38404)
Size:   117672
Md5:    91e6101f13b48b9331ed1941d86c1eea
Sha1:   97353ad288d7d8f7ca2162941e4f429b32566d93
Sha256: ea091733793db040922da233313025b3fb648d6dfb8ec89bd00a27f3ce96764f
                                        
                                            GET /glows-31312/src/images/bg_realm-eu.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-31312/src/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
content-length: 3063
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: "cea2cb818165bd37571b8968e64a75de"
x-amz-request-id: tx000000000000000a7c80b-006322f613-1be2488f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T13:21:42+00:00
x-id: sto5-up-gc14
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 248, 4-bit colormap, non-interlaced\012- data
Size:   3063
Md5:    cea2cb818165bd37571b8968e64a75de
Sha1:   78098620e048cfc283cd09fbc17213901339f052
Sha256: ba6c14161403a6a83a7ddb1609349db79546ee5f8167cc6630d0393683b58062
                                        
                                            GET /global_static/fonts/roboto-condensed-v18-latin-ext_latin_cyrillic-ext_cyrillic-regular.woff2 HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
content-length: 51016
last-modified: Mon, 14 Feb 2022 22:01:34 GMT
etag: "b01fe2aa282b2e998a5871916b81c995"
x-amz-request-id: tx0000000000000014441ee-006322f476-1bd15767-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T10:38:33+00:00
x-id: sto5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 51016, version 1.0\012- data
Size:   51016
Md5:    b01fe2aa282b2e998a5871916b81c995
Sha1:   abb7fdb290c0c9f6bb0fc5d1b73a0a4c054b9c7f
Sha256: a6211f1400be78ad64995ab928393338f085bf30d2ca27e25dc576e6accb8851
                                        
                                            GET /glows-31312/src/images/icon_arrow-right.svg HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-31312/src/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: W/"6d44229672fe70ca15457aa2904add9c"
x-amz-request-id: tx000000000000000a7ba4a-006322f46a-1bfb9e94-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T10:38:33+00:00
x-id: sto5-up-gc14
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5706)
Size:   2013
Md5:    25d647df471c486b1473c672f7aae0e6
Sha1:   e714cdaab5ff71cb161f1e1ce74d356a4f3d2782
Sha256: 947678fcaab263314d444cfcfdf7bc5b99dc654161b60dfaa7cd645529b985d8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5344
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 15:19:51 GMT
Last-Modified: Tue, 04 Oct 2022 13:50:47 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4664
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 15:19:51 GMT
Last-Modified: Tue, 04 Oct 2022 14:02:07 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /registration/api/v2/account/basic/header/challenge/?type=pow HTTP/1.1 
Host: eu.wargaming.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         92.223.7.169
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
content-length: 189
http_x_wg_challenge_key: xFtv2EvSbaU4g5bf3V2NRaxC5WQNxha4
allow: GET, OPTIONS
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
access-control-allow-methods: get, options
access-control-allow-headers: X-Requested-With, X-Requested-For, X-Wg-Challenge-Key, Content-Type
access-control-expose-headers: HTTP_X_WG_CHALLENGE_KEY, Location
vary: Accept-Language, Cookie
content-language: en
set-cookie: wgnr_language=en; expires=Tue, 18-Oct-2022 15:19:51 GMT; Max-Age=1209600; Path=/registration/; SameSite=Lax; Secure
content-security-policy: default-src 'self'; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' sc-static.net a.ad-analyze.jp cdn.microad.jp ad.adriver.ru ad4mmo.pl ads.yahoo.com avazutracking.net bam.nr-data.net bat.bing.com bc.x-lift.jp bs.serving-sys.com cdn-cm.gcdn.co cdn-cm.wgcdn.co cdn.taboola.com cdn.jsdelivr.net cdn.poly.stream api.flocktory.com clixGalore.com connect.facebook.net conversion.7search.com covusaffiliates.go2cloud.org demo.hiconversion.ru engine.4dsply.com gcnhu.com googleads.g.doubleclick.net ipapi.co is.accesstrade.net js-agent.newrelic.com platform.twitter.com polystream-tracking.azurewebsites.net s.yimg.jp secure.adnxs.com secure-ds.serving-sys.com server.netsales.pl static.criteo.net t.dcmn.io tag.marinsm.com telemetry.production.global.cloud.poly.stream track.hubrus.com track.wg-aff.com tracking.crobo.com u360.d-bi.fr vk.com wgpartner.com wg-playtest.com www.rentracks.jp inv-dmp.admixer.net *.getblue.io *.cheqzone.com *.1dmp.io *.soloway.ru *.admixer.net *.advarkads.com *.creative-serving.com *.onetrust.com *.cookielaw.org *.teads.tv *.acstat.com *.taboola.com *.accesstra.de *.ipstatp.com *.tiktok.com *.seznam.cz *.adform.net *.singular.net *.i-mobile.co.jp *.redditstatic.com *.4dsply.com *.accesstrade.net *.adroll.com *.adroll.mgr.consensu.org *.ads-twitter.com *.amazon-adsystem.com *.bidpro.io *.doubleclick.net *.dcmn.io *.google.com *.mail.ru *.mgid.com *.outbrain.com *.yimg.com *.yimg.jp *.valuecommerce.com *.visualwebsiteoptimizer.com *.vk.com *.cloudfront.net *.criteo.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.hybrid.ai *.pinimg.com *.rfihub.net *.rutarget.ru *.sjv.io *.serving-sys.com *.taboola.com *.twitter.com *.tradelab.fr *.tvsquared.com *.impactradius-event.com *.imedia.cz *.wargaming.net *.worldoftanks.com *.yahoo.com *.yahoo.co.jp *.yandex.by *.yandex.com.tr *.yandex.kz *.yandex.net *.yandex.ru *.yandex.ua *.stackadapt.com *.powerspace.com *.pwspace.com statad.ru ; style-src 'unsafe-inline' cdn-cm.gcdn.co cdn-cm.wgcdn.co tagmanager.google.com tags.srv.stackadapt.com *.wargaming.net *.worldofwarships.ru *.googleapis.com ; img-src data: 'self' * *.bidpro.io ; font-src data: cdn-cm.gcdn.co cdn-cm.wgcdn.co fonts.gstatic.com *.wargaming.net ; frame-src creativecdn.com a2g-secure.com adsimilis.go2jump.org adstrx.com ad3.adfarm1.adition.com api.advpartners.org content.adriver.ru covusaffiliates.go2cloud.org eng.trkcnv.com mediaforceltd.go2jump.org sevengames.go2cloud.org simstrx.com t.dcmn.io api.flocktory.com tracking.crobo.com tracking.sevengamesnetwork.com www.adsimilis.com *.getblue.io *.advarkads.com *.adform.net *.i-mobile.co.jp *.amazon-adsystem.com *.bidpro.io *.accesstrade.net *.doubleclick.net *.criteo.com *.google.com *.googleadservices.com *.googletagmanager.com *.rutarget.ru *.rfihub.com *.mail.ru *.wargaming.net *.yandex.by *.yandex.com.tr *.yandex.kz *.yandex.net *.yandex.ru *.yandex.ua *.powerspace.com *.pwspace.com *.yimg.com ; connect-src hit.acstat.com api.advpartners.org api.flocktory.com api.advcake.com *.getblue.io *.cheqzone.com *.onetrust.com *.cookielaw.org *.taboola.com *.singular.net *.visualwebsiteoptimizer.com *.adroll.com *.adroll.mgr.consensu.org *.bidpro.io *.criteo.com *.google-analytics.com *.googleapis.com *.mail.ru *.prfct.co *.rfihub.com *.doubleclick.net *.stackadapt.com *.wargaming.net *.yandex.by *.yandex.com.tr *.yandex.kz *.yandex.net *.yandex.ru *.yandex.ua *.yimg.com; report-uri https://cspreport.wargaming.net/cspreport
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   189
Md5:    0f100b12491df175bcd92dfa796bdf81
Sha1:   ad10b83a83e4cd1faa8eeb8d213280b684707bf4
Sha256: 51a3a7c575b150f33f0ea70a3045b356c46a3f871bf0d28e0d375329ecf712eb
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3818CB7B42F5BDC73845A1CBA2EFFFE08ABBE94D5242C17CABCB8D4CE2020ED0"
Last-Modified: Mon, 03 Oct 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14274
Expires: Tue, 04 Oct 2022 19:17:45 GMT
Date: Tue, 04 Oct 2022 15:19:51 GMT
Connection: keep-alive

                                        
                                            GET /npm/yandex-metrica-watch/tag.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.245.0
x-jsd-version-type: version
etag: W/"33a2f-8LAWo/m1uPKVR6/desBN4giRHHM"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 04 Oct 2022 15:19:51 GMT
age: 22130
x-served-by: cache-fra19157-FRA, cache-bma1621-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 83822
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (593)
Size:   83822
Md5:    5df383641efa0a3ba4302c7fec8d6394
Sha1:   f0cec22d20f41110ab644ee246201cb8787379b0
Sha256: 10fb3cdc6d2cbc33aa86bd81a8325449c04d227555a8a9f504deb8cfb0f16e91
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3818CB7B42F5BDC73845A1CBA2EFFFE08ABBE94D5242C17CABCB8D4CE2020ED0"
Last-Modified: Mon, 03 Oct 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14273
Expires: Tue, 04 Oct 2022 19:17:45 GMT
Date: Tue, 04 Oct 2022 15:19:52 GMT
Connection: keep-alive

                                        
                                            GET /ads/pixel.js HTTP/1.1 
Host: www.redditstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.140
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 19 Jul 2022 22:48:09 GMT
etag: "95212d33cfff78ad59f5af5b20c48c53"
cache-control: public, max-age=60
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 15:19:52 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25224)
Size:   7722
Md5:    95212d33cfff78ad59f5af5b20c48c53
Sha1:   9b99a4091a6eb716bc68f1428e3c86eca068b25b
Sha256: bd69f250efa08cb2c0a06c35d91fda762779820d87779019c25211f4559ebb1d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "95C18D214F2BA3AD4702C9398FF87F98A21D38F7"
Expires: Wed, 05 Oct 2022 02:00:00 GMT
Last-Modified: Tue, 04 Oct 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1420
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754ee5f63e81fab4-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    be86d472f93a60e2d6b1d205261496b7
Sha1:   2f99638b84e415a0a997c6348464637732dd5a0f
Sha256: 1f9fa6a1668c20360d158eb2571b23f749afa0ff80f5b068d573d0dd83dabda9
                                        
                                            GET /activityi;src=10697551;type=pagev0;cat=allvi0;ord=3410189646054;gtm=2wg9s0;auiddc=973010215.1664896791;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287? HTTP/1.1 
Host: 10697551.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.70
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 15:19:52 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 706
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 04-Oct-2022 15:34:52 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1456), with no line terminators
Size:   706
Md5:    f5097d10e68587b37d6c11aee8b42498
Sha1:   015b021f54370453fb28f3e13ecdd95fe9803927
Sha256: 76f5ad303a68352a009f49e3dc57900adc6dad12cdc27e951af5e94f7627d3ab
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9393518F98675E8BF542020E1DDD2EF24E915F14EA328E3086F94FF11171D0AF"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7802
Expires: Tue, 04 Oct 2022 17:29:54 GMT
Date: Tue, 04 Oct 2022 15:19:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6847
Expires: Tue, 04 Oct 2022 17:13:59 GMT
Date: Tue, 04 Oct 2022 15:19:52 GMT
Connection: keep-alive

                                        
                                            GET /scripttemplates/6.19.0/otBannerSdk.js HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.16.149.64
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Tue, 04 Oct 2022 15:19:52 GMT
content-length: 85963
content-encoding: gzip
content-md5: +Hns4aB1vz7uZd8xsOEb+Q==
last-modified: Wed, 07 Jul 2021 06:39:42 GMT
etag: 0x8D941120097E0CB
x-ms-request-id: 132ec10d-c01e-0040-166c-c4f108000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 30301907
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754ee5f7c9ca0b02-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65455)
Size:   85963
Md5:    f879ece1a075bf3eee65df31b0e11bf9
Sha1:   8f16b2a067723d26bcca8815a18232065e034f00
Sha256: 33701f227dc019963daa750be752b382b764b4a4c137f0d998593ca5134a1235
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6847
Expires: Tue, 04 Oct 2022 17:13:59 GMT
Date: Tue, 04 Oct 2022 15:19:52 GMT
Connection: keep-alive

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Content-Length: 939
Connection: keep-alive
Expires: Sat, 08 Oct 2022 13:21:27 GMT
ETag: "3427073e58bc6b528edad4aa2b8116365a1175c2"
Last-Modified: Tue, 04 Oct 2022 13:21:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1496
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754ee5f7dfc6fab4-OSL

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:51 GMT
age: 38221
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Content-Length: 939
Connection: keep-alive
Expires: Sat, 08 Oct 2022 13:21:27 GMT
ETag: "3427073e58bc6b528edad4aa2b8116365a1175c2"
Last-Modified: Tue, 04 Oct 2022 13:21:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1496
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754ee5f80fddfab4-OSL

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Content-Length: 939
Connection: keep-alive
Expires: Sat, 08 Oct 2022 13:21:27 GMT
ETag: "3427073e58bc6b528edad4aa2b8116365a1175c2"
Last-Modified: Tue, 04 Oct 2022 13:21:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1496
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754ee5f80a16b523-OSL

                                        
                                            GET /global_static/age_ratings/v2/pegi_rating.svg HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
last-modified: Mon, 14 Feb 2022 22:01:21 GMT
etag: W/"207ef7e145ba483b342b96f8c2fbf72a"
x-amz-request-id: tx000000000000000c1284a-006322f398-1bf83e19-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T09:43:20+00:00
x-id: sto5-up-gc13
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   6068
Md5:    a7b1aff09cd7b532cb88c390661af213
Sha1:   c2c3d054d3ceac420a676614e7590866d755ba98
Sha256: 8cfe6a68e5b6cada7d9f24280c4f6bed62b359257fc86068210ef4e382bf86fe
                                        
                                            GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=3410189646054;gtm=2wg9s0;auiddc=973010215.1664896791;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287 HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10697551.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.66
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 15:19:52 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 705
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1455), with no line terminators
Size:   705
Md5:    495d8894f1f11bfe47052e53730a965c
Sha1:   2862ed2b7344651eaf364156c174c46c9d253255
Sha256: 5b0ef5ff4742d3263dca3716ad3d734c3c337d48ad01053a3a66a4a72cf16bc0
                                        
                                            GET /global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"635ea99325f08d75fd8f09201f998f50"
x-amz-request-id: tx000000000000000c12edd-006322f3c2-1bde7e9c-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T09:44:20+00:00
x-id: sto5-up-gc11
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   29100
Md5:    d5fe787e8a0d6567f144afca8f793b1a
Sha1:   69e644d66921cd8b896dd8602e02adca85dcec6f
Sha256: f1948cbc5773be1fd772a1079c77b61d055e40b41ee82805e37eb9e2f65bdc35
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DOS5kVEVqBrCVMKRw07fX-6HDgWVb9lJwkVM2pXs0PQHys6CBJUVfQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 63332
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9917
Md5:    d8c08f8066cc732de8befd6ccd629a95
Sha1:   22aab05208a01ae5def4d63dc145085630f57bcb
Sha256: f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
                                        
                                            GET /global_static/age_ratings/v2/pegi_ext-violence.svg HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"9a3e2c35d77bd8b96138310eeb6b7f7b"
x-amz-request-id: tx000000000000000a7462b-006322f3c2-1b210667-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T09:44:20+00:00
x-id: sto5-up-gc11
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   22993
Md5:    10e18034d3a46f44f12b8076d9397533
Sha1:   82bb3140094e6fbdddcfbca0732e4d4253244d17
Sha256: 40d728ed4893a364d848662767af66751747aaf87b6d58ea0dfb14bc31191598
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SGeDEPoXxsTV5UwkZnn3MJPbjhHhrKSsueHPxVapV_7Icl6daFk3oA==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 63332
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4858
Md5:    6779181f9c06975f2a662da743893939
Sha1:   585e7146fd24cdc2496b05baafea04091dc541e2
Sha256: 8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
                                        
                                            GET /glows-31312/src/js/riddler/sha3.js HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:52 GMT
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: W/"81d95a3ecb2e7e00dc609f51c621c2f6"
x-amz-request-id: tx000000000000000c144ae-006322f476-1bf83e19-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T11:46:34+00:00
x-id: sto5-up-gc12
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (59689)
Size:   20469
Md5:    de61d95b8cdc3dd693692d0e0f08015f
Sha1:   04a6737200a34e7611adf66e27d433cd4c4dc60d
Sha256: f3a027d1b75060c2df1fa96beea928ff5e35f1cfccd0be1e99d0d322dbff4a2b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tag=ViewContent&ts=1664896791502 HTTP/1.1 
Host: q.quora.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Cookie: __cf_bm=g5HK4UQo46W.gvvz6QZH.v48AAa5y1.EqlTYLnz9zWA-1664896792-0-AcAnICNJPuJZ91DXmRh//Y0hp91AjZGvtDFFXbmJIBU1gKrV0WWQdu0R2MEHVWJRXaE6TecEAky8Gtv9yHBqQkY=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.2.147.16
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,bceeb3ac2cdafd10745eea69275eb07b,10.0.0.247,39960,91.90.42.154,,200442841053,1,1664896792.430,0.001,,.,0,0,0.000,0.000,-,0,0,197,191,95,10,26847,,,,,,-,
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afp%3A1104%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A444158559099%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151951%3Aet%3A1664896792%3Ac%3A1%3Arn%3A113210053%3Arqn%3A1%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C25%2C9%2C1%2C670%2C0%2C%2C212%2C5%2C%2C%2C%2C1095%3Ans%3A1664896790057%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896792%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 419
date: Tue, 04 Oct 2022 15:19:52 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 15:19:52 GMT
last-modified: Tue, 04-Oct-2022 15:19:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    45a2c8aa157f02bad350a6b8edb6b9e2
Sha1:   b2e7c0ad4f2c725e5d7f885540424ca2c2ea6f45
Sha256: c08856d49b9b70a01364145e25973df231952a10679a4282667513b1aedb04ef
                                        
                                            GET /watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afp%3A1104%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A463033400268%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151951%3Aet%3A1664896792%3Ac%3A1%3Arn%3A171921785%3Arqn%3A1%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C25%2C9%2C1%2C670%2C0%2C%2C212%2C5%2C%2C%2C%2C1095%3Ans%3A1664896790057%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896792%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 400
date: Tue, 04 Oct 2022 15:19:52 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 15:19:52 GMT
last-modified: Tue, 04-Oct-2022 15:19:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Size:   400
Md5:    1f236e503c641802e38ebc689d5d006b
Sha1:   97580b3df0dba231057c73506d13a21d7e551bd5
Sha256: 8b7ec250845de1ac5b417685a1516a84003c941bcfbdcac508782840e8007c35
                                        
                                            GET /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afp%3A1104%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A800200037891%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151951%3Aet%3A1664896792%3Ac%3A1%3Arn%3A255750371%3Arqn%3A1%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C25%2C9%2C1%2C670%2C0%2C%2C212%2C5%2C%2C%2C%2C1095%3Ans%3A1664896790057%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896792%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 419
date: Tue, 04 Oct 2022 15:19:52 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 15:19:52 GMT
last-modified: Tue, 04-Oct-2022 15:19:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    18efbdc6064fcfef598cb385d0db5c13
Sha1:   43b1cc2f9077fb98c36b1d5780676d44074316dc
Sha256: e4bd3f10c160bb2fdf032f8f20ba9d5fef2891375bf24f537dee73c2e0e7173c
                                        
                                            GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=3410189646054;gtm=2wg9s0;auiddc=973010215.1664896791;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287 HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.226
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 15:19:52 GMT
expires: Tue, 04 Oct 2022 15:19:52 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   177
Md5:    9393b28661a65a763699c108887882eb
Sha1:   c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
Sha256: 2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /global_static/favicon/v2/favicon-64x64.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:52 GMT
content-length: 1198
last-modified: Mon, 05 Sep 2022 07:56:21 GMT
etag: "de30b29e8bbc72b7828734d5d781b9eb"
x-amz-request-id: tx000000000000000a74b29-006322f3c2-1be2488f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T09:44:21+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size:   1198
Md5:    de30b29e8bbc72b7828734d5d781b9eb
Sha1:   9d5fb51148291180b45d9481b756eb7fc2d4a352
Sha256: e47efd1c616db1a5564776f4be806183ee085c80d2d3722d3f8d5a06115e46ee
                                        
                                            GET /global_static/favicon/v2/apple-touch-icon-180x180.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:52 GMT
content-length: 2326
last-modified: Mon, 05 Sep 2022 07:56:20 GMT
etag: "687168d21b7e78dfb6175de97ae3d045"
x-amz-request-id: tx000000000000001593509-006322f48f-1bd1576a-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T09:49:41+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   2326
Md5:    687168d21b7e78dfb6175de97ae3d045
Sha1:   78081e22c1ea9e51a6cac8910d7ce01c319132e1
Sha256: 49f69cf7e37fda7051cd440048ecd5b2ab0973f106dc6e669959ee453b03e5d1
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Tue, 04 Oct 2022 15:19:52 GMT
access-control-allow-origin: *
etag: "633be002-2b"
expires: Tue, 04 Oct 2022 16:19:52 GMT
accept-ranges: bytes
last-modified: Tue, 04 Oct 2022 10:25:54 GMT
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /scripttemplates/6.19.0/assets/otCenterRounded.json HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.16.149.64
HTTP/2 200 OK
content-type: application/json
                                        
date: Tue, 04 Oct 2022 15:19:52 GMT
content-length: 2571
content-encoding: gzip
content-md5: jNo6jJWiovaho1WEWcrcUw==
last-modified: Wed, 07 Jul 2021 06:39:36 GMT
etag: 0x8D94111FD23EBEB
x-ms-request-id: d322fa99-201e-0145-5342-ca4322000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 10654
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754ee5faad370b02-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (7547)
Size:   2571
Md5:    8cda3a8c95a2a2f6a1a3558459cadc53
Sha1:   95c29661bab271196810b334fb607c4e45df75a6
Sha256: 505d8a10c5116cd627ec4ddf7fecc423ac36c2b7ed27ad86c9c7749fea9a42a5
                                        
                                            GET /scripttemplates/6.19.0/assets/v2/otPcCenter.json HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.16.149.64
HTTP/2 200 OK
content-type: application/json
                                        
date: Tue, 04 Oct 2022 15:19:52 GMT
content-length: 11530
content-encoding: gzip
content-md5: DmLA+Ntm3UcuLFpSfryS+A==
last-modified: Wed, 07 Jul 2021 06:39:37 GMT
etag: 0x8D94111FD7F62F3
x-ms-request-id: 8638f6ab-701e-00da-766c-c47dcd000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 30301748
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754ee5faad3a0b02-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (37251)
Size:   11530
Md5:    0e62c0f8db66dd472e2c5a527ebc92f8
Sha1:   0dbeae7213aa2ec3d6afe85f454acd424449129e
Sha256: c0d1bb0cb14eabeb0deb0ae363ddb957f5a7bd974e7811879461b5dfa8a0eb53
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 04 Oct 2022 15:19:52 GMT
expires: Tue, 04 Oct 2022 15:19:52 GMT
cache-control: private, max-age=3600
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1654)
Size:   15187
Md5:    8766c5a801f08afceca9b66ff9097e6a
Sha1:   ce7640d1d166eddeb9d40be642ec34652f790713
Sha256: f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
                                        
                                            GET /rp.gif?ts=1664896791515&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=b7c18e56-f995-4581-9a10-0c74d0c3bb6f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_02c59ad6 HTTP/1.1 
Host: alb.reddit.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.140
HTTP/2 200 OK
content-type: image/gif
                                        
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Tue, 04 Oct 2022 15:19:52 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/1006839708/?random=1664896792318&cv=9&fst=1664896792318&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&auid=973010215.1664896791&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.34
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 15:19:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1464
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 04-Oct-2022 15:34:53 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3516), with no line terminators
Size:   1464
Md5:    10a0731e3e530c14b5ee93e254d9ce79
Sha1:   36e790c57de19a183db214931ea49378dea731f9
Sha256: 282846f53660604cc1752e0d4e3c7645a79502618b408f58a436539554e08553
                                        
                                            GET /watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afp%3A1104%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A444158559099%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151951%3Aet%3A1664896792%3Ac%3A1%3Arn%3A113210053%3Arqn%3A1%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C25%2C9%2C1%2C670%2C0%2C%2C212%2C5%2C%2C%2C%2C1095%3Ans%3A1664896790057%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896792%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         93.158.134.119
HTTP/2 302 Found
                                        
location: /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afp%3A1104%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A444158559099%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151951%3Aet%3A1664896792%3Ac%3A1%3Arn%3A113210053%3Arqn%3A1%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C25%2C9%2C1%2C670%2C0%2C%2C212%2C5%2C%2C%2C%2C1095%3Ans%3A1664896790057%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896792%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 04 Oct 2022 15:19:52 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yandexuid=8939500011664896792; Expires=Wed, 04-Oct-2023 15:19:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=8939500011664896792; Expires=Wed, 04-Oct-2023 15:19:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yabs-sid=1750055051664896792; Path=/; SameSite=None; Secure i=GmYCNzVdghzVj9hajOVfFJTbvzMxRH5yU2kuY5JRfezs9rm2hs71Wlp2R9WE4Qw/WpeUgfm99RXrvWnaJ2a25iRV4IE=; Expires=Fri, 01-Oct-2032 15:19:46 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None ymex=1696432792.yrts.1664896792#1696432792.yrtsi.1664896792; Expires=Wed, 04-Oct-2023 15:19:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 15:19:52 GMT
last-modified: Tue, 04-Oct-2022 15:19:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1664896792_d0252d9eaea6e6013e47627d616acaf7476faed8dc02e97eb53c70c78366173b&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A444158559099%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151952%3Aet%3A1664896792%3Ac%3A1%3Arn%3A744643515%3Arqn%3A2%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664896790057%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896793%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29aw%281%29rqnt%282%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Tue, 04 Oct 2022 15:19:53 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 15:19:53 GMT
last-modified: Tue, 04-Oct-2022 15:19:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:19:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /images/listing/tool/cv/ytag.js HTTP/1.1 
Host: s.yimg.jp
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         183.79.249.252
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Tue, 04 Oct 2022 15:19:18 GMT
vary: Accept-Encoding
last-modified: Tue, 30 Aug 2022 04:48:29 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
age: 35
content-length: 9790
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32042), with no line terminators
Size:   9790
Md5:    756de2120f79f1aa501b0e0b490dca58
Sha1:   4a4b8d596749960af503ec1309b6bd821a7bdbf3
Sha256: 128c1c4b2018808bbe4ec25198b92ef894df5a131cf0ca647dbd3ada66ba939e
                                        
                                            GET /pagead/1p-conversion/1006839708/?random=1664896792331&cv=9&fst=1664896792331&num=1&value=0&label=H356CMb80IcDEJzPjOAD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9s0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&auid=973010215.1664896791&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 15:19:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   63
Md5:    0339f8f57d1bf75003db591e28957e45
Sha1:   ae2286e497c9f76a02cb40c40a674b73bd293b76
Sha256: 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
                                        
                                            GET /pagead/1p-user-list/1006839708/?random=1664896792318&cv=9&fst=1664895600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=3&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9s0&sendb=1&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&async=1&fmt=3&is_vtc=1&random=3726302985&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 15:19:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1664896792_86af04981e8338cf81b6231cda71ad20dc53c1be4bde1396cb55bb5e2c564a1e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A463033400268%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151952%3Aet%3A1664896793%3Ac%3A1%3Arn%3A735465057%3Arqn%3A2%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1664896790057%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896793%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)aw(1)rqnt(2)ecs(1)fip(1)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 302 Found
                                        
location: /watch/71343676/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1664896792_86af04981e8338cf81b6231cda71ad20dc53c1be4bde1396cb55bb5e2c564a1e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A463033400268%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151952%3Aet%3A1664896793%3Ac%3A1%3Arn%3A735465057%3Arqn%3A2%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1664896790057%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896793%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29aw%281%29rqnt%282%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 04 Oct 2022 15:19:53 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yandexuid=2291152161664896793; Expires=Wed, 04-Oct-2023 15:19:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=2291152161664896793; Expires=Wed, 04-Oct-2023 15:19:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yabs-sid=2190751471664896793; Path=/; SameSite=None; Secure i=MA5/S9viq1rKaqzahYKDcfkFqX6Qw6w2JqU+HIB4vne8fXf5l3WKXUIJCeb8vOJ4CJ0txT69RA/WfuNTO1iBFiGEh9k=; Expires=Fri, 01-Oct-2032 15:19:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None ymex=1696432793.yrts.1664896793#1696432793.yrtsi.1664896793; Expires=Wed, 04-Oct-2023 15:19:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 15:19:53 GMT
last-modified: Tue, 04-Oct-2022 15:19:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1664896793.0380328&pvid=1sl8rx9l6f2l8uckb9p&tsyjad=0&_impl=ytag HTTP/1.1 
Host: b92.yahoo.co.jp
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         183.79.249.252
HTTP/2 403 Forbidden
content-type: text/html
                                        
date: Tue, 04 Oct 2022 15:19:54 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Size:   14275
Md5:    e986e7a04549f3bef16fe1bb24e61acd
Sha1:   b3ec35460824fae12cf6342ae42d27597ec94fb7
Sha256: e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
                                        
                                            GET /j/roundtrip.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.84
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 16:19:02 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: _1pMdIg8ZKVWvWVsd.6_G47b4IRenbWR
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 04 Oct 2022 14:46:46 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"0cd31c666a232bba0fd6ab0fef962f75"
Vary: Accept-Encoding
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
Age: 2008
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RpMF6txQwdo18q2Z2nl9rJPuK44AOZ9Z5M2qaw6zEhKvlyHYXAZUXQ==


--- Additional Info ---
Magic:  ASCII text, with very long lines (1096)
Size:   17013
Md5:    1a1277e5af39d5cf435a70be8c279c43
Sha1:   8f7f9a4c2685c823fafcccd39c4dedb4f264e453
Sha256: 9ff23f521d476ca3bca69210b5e2c5bf4681b3dd1a0d6eba8fcb6945fb49a09b
                                        
                                            GET /j/pre/5DEKGEZXIZFGBAVTF7IHV4/LEK33SDIZZFERBERPONNLY/index.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.84
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Content-Length: 0
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 05:05:45 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: ja.h1ndhrf_0qN_tMH0tcflsBGTEFsvO
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 14:27:47 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: "d41d8cd98f00b204e9800998ecf8427e"
Vary: Accept-Encoding
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
Age: 3149
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ckUm-YrnLFVouX_AX3NzWuDXfbGBKieRKZZqDjKRRvA3kHmEupFPcw==

                                        
                                            GET /j/pre/5DEKGEZXIZFGBAVTF7IHV4/LEK33SDIZZFERBERPONNLY/fpconsent.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.84
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
                                        
Content-Length: 0
Connection: keep-alive
Date: Tue, 04 Oct 2022 00:54:21 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/pre/index.js
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
Age: 51932
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aRKUrbIwd7NB4iBuMvqzwf39q0JkMKtrAL0fjXrfpNgqabJk2zHcyw==

                                        
                                            GET /watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1664896792_d0252d9eaea6e6013e47627d616acaf7476faed8dc02e97eb53c70c78366173b&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A444158559099%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151952%3Aet%3A1664896792%3Ac%3A1%3Arn%3A744643515%3Arqn%3A2%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664896790057%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896793%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 302 Found
                                        
location: /watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1664896792_d0252d9eaea6e6013e47627d616acaf7476faed8dc02e97eb53c70c78366173b&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A444158559099%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151952%3Aet%3A1664896792%3Ac%3A1%3Arn%3A744643515%3Arqn%3A2%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664896790057%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896793%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29aw%281%29rqnt%282%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 04 Oct 2022 15:19:53 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yandexuid=792207211664896793; Expires=Wed, 04-Oct-2023 15:19:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=792207211664896793; Expires=Wed, 04-Oct-2023 15:19:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yabs-sid=301294401664896793; Path=/; SameSite=None; Secure i=N8dZT+dMHW4DdoL9v0IeqyPKrUB02IZ0+fwmQqpXgMhTyy5eR/oAqK5ths1hPVVidcXV463lUqlC8fpRlKddSZBEe58=; Expires=Fri, 01-Oct-2032 15:19:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None ymex=1696432793.yrts.1664896793#1696432793.yrtsi.1664896793; Expires=Wed, 04-Oct-2023 15:19:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 15:19:53 GMT
last-modified: Tue, 04-Oct-2022 15:19:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

                                        
                                            GET /j/exp/5DEKGEZXIZFGBAVTF7IHV4/index.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.84
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
                                        
Content-Length: 0
Connection: keep-alive
Date: Tue, 04 Oct 2022 15:06:23 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/exp/index.js
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
Age: 810
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0-RYOY9t6HtIPis41yjGlnLejSO4jOpc4fPc4FcrE6iJAB1ZCuXanw==

                                        
                                            GET /j/exp/index.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.84
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 28
Connection: keep-alive
Last-Modified: Fri, 02 Sep 2022 17:25:28 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: VS8aSrwndm.MeiNnyJ10ruHH56v74CIF
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 00:03:41 GMT
Etag: "5816cced8568d223aa09d889f300692b"
Vary: Accept-Encoding
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
Age: 54990
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JdS06YBKPtWzWRorFQGBpCsEpNR1rYm2kO09zpHqxhhNPjQrCTbVQA==


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   28
Md5:    5816cced8568d223aa09d889f300692b
Sha1:   95cab5e474d7391762c3da5c7dc50fcf05df529f
Sha256: f59e5f34a941183aacaed25322ac0856628493c2cfd936ded3fddc0a49510e52
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 15:19:54 GMT
Last-Modified: Tue, 04 Oct 2022 15:03:47 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yM1Dv-dXEU4xMlC3DnjBZ-z-M2m4ogqibJXgP8bI0MFluWbE-o5JSg==
Age: 967

                                        
                                            GET /consent/check/5DEKGEZXIZFGBAVTF7IHV4?arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&_s=ec185e3e112eaab024c6a1ee16ca1160&_b=2 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Tue, 04 Oct 2022 15:19:54 GMT
content-length: 446
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=01f8a73d2047a21aec4afe639073dfe8-a_1664896794; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=01f8a73d2047a21aec4afe639073dfe8-a_1664896794; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (446), with no line terminators
Size:   446
Md5:    36eaed968292bd8ceeea3d19f8f974e8
Sha1:   ed3e42f1c855a311fe9ffe4664048b3aeeed43a2
Sha256: 58bb31d406d4af92619b34a47f75947efa1f5be72949722e2b1cffbe75e812d8
                                        
                                            GET /pixel/5DEKGEZXIZFGBAVTF7IHV4/LEK33SDIZZFERBERPONNLY?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&pv=1762439361.612489&cookie=&adroll_s_ref=&keyw= HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 302 Found
                                        
date: Tue, 04 Oct 2022 15:19:54 GMT
content-length: 0
location: https://s.adroll.com/pixel/5DEKGEZXIZFGBAVTF7IHV4/LEK33SDIZZFERBERPONNLY/T7KB52I6CJEZ3FZ557J2BD.js
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=a5ab6de88d6385ab462f5fed3229be6d-a_1664896794; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=a5ab6de88d6385ab462f5fed3229be6d-a_1664896794; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
x-advertisable-eid: 5DEKGEZXIZFGBAVTF7IHV4
x-conversion-currency:
x-conversion-value: 0.00
x-pixel-eid: LEK33SDIZZFERBERPONNLY
x-rule: *
x-rule-type: p
x-segment-display-name: Visitors to Unsegmented Pages
x-segment-eid: T7KB52I6CJEZ3FZ557J2BD
x-segment-name: *
X-Firefox-Spdy: h2

                                        
                                            GET /pixel/5DEKGEZXIZFGBAVTF7IHV4/LEK33SDIZZFERBERPONNLY/T7KB52I6CJEZ3FZ557J2BD.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.84
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 19:53:23 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: uRJRZWC66nmx.Z9zELdJYNT8cBs_ICw9
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 04 Oct 2022 14:59:55 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"8be3f27d194c30f1f6fe5862e987202b"
Vary: Accept-Encoding
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
Age: 1200
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fiT-ikeF1MmoidMXCT7jyAKFptcpL58S8oMST2THBCK75B3SKSBbYQ==


--- Additional Info ---
Magic:  ASCII text, with very long lines (657)
Size:   1576
Md5:    e0273eb2dfa4a1a2c324646ef4fa4913
Sha1:   f1dd935a49f9dd2fffad31ca99c289ab29e9053d
Sha256: 43984e453c2a5c5e1953441391b79b4f949de6d14d1eba17951cd5db2c3d9244
                                        
                                            GET /cm/g/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4&google_nid=adroll5 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=c7cb679ba9d0b2f77f530517275ea66e-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=c7cb679ba9d0b2f77f530517275ea66e-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/b/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=d97efbef154eb7c95667640588f1e719-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=d97efbef154eb7c95667640588f1e719-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/g/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=fc7fd60900b9282e9098dd1ff587bc20-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=fc7fd60900b9282e9098dd1ff587bc20-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/index/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=004e30292acfbcf1204701dbfde365aa-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=004e30292acfbcf1204701dbfde365aa-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/l/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-transform,public,max-age=300,s-maxage=900
vary: Cookie
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/n/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=17573ef9b7299d70b4c0ec17011a288f-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=17573ef9b7299d70b4c0ec17011a288f-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/o/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=9d12f15e2f5ba7d57132e77b2142cbd7-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=9d12f15e2f5ba7d57132e77b2142cbd7-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/pubmatic/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=14e58d37b7d3801209e12aa7d9416d09-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=14e58d37b7d3801209e12aa7d9416d09-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/outbrain/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=c568757bc0716b628db1321b801d1704-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=c568757bc0716b628db1321b801d1704-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/r/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=4cdaca6178fc4e03d8545f2f30682f05-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=4cdaca6178fc4e03d8545f2f30682f05-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/taboola/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=e2edd0d0c7130b0606e057097202ef11-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=e2edd0d0c7130b0606e057097202ef11-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/x/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=d0415b1656dbae9b9f175087a61f80f9-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=d0415b1656dbae9b9f175087a61f80f9-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cm/triplelift/out?adroll_fpc=adf184cc150b8a643914215232935662-1664896794315&arrfrr=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&advertisable=5DEKGEZXIZFGBAVTF7IHV4 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.240.197.120
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:19:55 GMT
content-length: 42
server: nginx/1.20.0
cache-control: no-store, no-cache, must-revalidate
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
pragma: no-cache
set-cookie: __adroll=59558a1b4aba9284c8565b79a999214c-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure __adroll_shared=59558a1b4aba9284c8565b79a999214c-a_1664896795; Version=1; Expires=Fri, 03-Nov-2023 15:19:54 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bf68975-a099-4d4b-9abd-6e684653439d.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10878
x-amzn-requestid: a849d918-ec40-47d4-93cb-e938b010bd50
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpJKGAPIAMFSiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b556d-242a8d2208b6574c34063c1f;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7ZaoEBhn_F_zDvoalcEpb4PtdGMuU9stAktSCviy5SsaaBaxYUJ6Fg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 63339
etag: "d893d8035379e06e53e365b9f47f5da40bff932b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10878
Md5:    f62719b24a32198c6f462a0a0412ac98
Sha1:   d893d8035379e06e53e365b9f47f5da40bff932b
Sha256: ca863affca1559e92e415a4de2e78e4b4c1ec4cf8e8549693499c6f79bd27975
                                        
                                            POST /request/v1/consentreceipts HTTP/1.1 
Host: privacyportal-de.onetrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 7992
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.18.41.98
HTTP/2 201 Created
                                        
date: Tue, 04 Oct 2022 15:19:59 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 754ee6263ba9b4ff-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            GET /glows-31312/src/images/bg_Bismarck.jpg HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
content-length: 222313
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: "177bc842cd3bd3962aaa68e91789bc2c"
x-amz-request-id: tx000000000000000a7b4cc-006322f43b-1bfb9e94-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T10:38:29+00:00
x-id: sto5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /glows-31312/src/video/bismarckLP_05.webm HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 206 Partial Content
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
content-length: 4476964
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: "9aba7d11fdf9ee8eaa2fb1f15d21b96d"
x-amz-request-id: tx000000000000000a75a25-006322f43b-1be2488f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T10:21:19+00:00
x-id: sto5-up-gc13
content-range: bytes 0-4476963/4476964
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /cookieconsentpub/v1/geo/location HTTP/1.1 
Host: geolocation.onetrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         172.64.146.158
HTTP/2 200 OK
content-type: application/json
                                        
date: Tue, 04 Oct 2022 15:19:52 GMT
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 754ee5f64e720b4d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /glows-31312/workers/eval.js HTTP/1.1 
Host: promo.worldofwarships.eu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/glows-31312/eu-en/?pub_id=1287&xid=633c4f176be7a1000136408d&xid_param1=E447HGBJ6R&xid_param_2=&sid=SIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ&enctid=cnd8nn47hn3i&lpsn=WOWS+Inpage+Registration+Bismarck&foris=1&teclient=1664896791240865238&utm_source=wlap&utm_medium=affiliate&utm_campaign=713tw6jf&utm_content=1287
Cookie: _gcl_au=1.1.973010215.1664896791; _rdt_uuid=1664896791514.b7c18e56-f995-4581-9a10-0c74d0c3bb6f; _ym_uid=1664896792895599376; _ym_d=1664896792
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:52 GMT
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: W/"d3d5c2172d396e72356b80c53b8e40cf"
x-amz-request-id: tx00000000000000005a5e3-0063234bd4-1bf417c9-ed1
cache: HIT
x-cached-since: 2022-10-02T11:42:57+00:00
x-id: sto5-up-gc12
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /b.3/VR0vPM3hpOvnb/mWVBJKZqDN0M0LNRT/Q/wzO/TxIS0zLWTxQ/1/NvD-AP5BMojnUl HTTP/1.1 
Host: nufashesto.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         88.85.94.245
HTTP/2 200 OK
content-type: text/html;charset=UTF-8
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:50 GMT
vary: Accept-Encoding
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-frame-options: DENY
referrer-policy: no-referrer
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Tue, 04 Oct 2022 15:19:50 GMT
set-cookie: kadCCap=199507:1:1655888030;168401:1:1663017409;194136:1:1663118711;132751:1:1663300715;210565:1:1660883596;180343:1:1656296307;211845:1:1661388894;210190:1:1662153287;199455:1:1662011125; max-age=1696432790; path=/ kadACap=419303:1:1662804291;427172:1:1661328422;434768:1:1656274688;444311:1:1663771206;432801:1:1656295814;424441:1:1664896790;320483:1:1661342695;419295:1:1661224266;443580:1:1661935629;410252:1:1664551078;384014:1:1664132279;446120:1:1663148405;346327:1:1664882578;434524:1:1657107027;383700:1:1662671864;432805:1:1656295137;419299:1:1662523186;445933:1:1662662013;445060:1:1664112757;442019:1:1663736826;401659:1:1662418246;419301:1:1663566374;272913:1:1661284037;444360:1:1662446108;444565:1:1663112893;438050:1:1657036135;445389:1:1663209970;407186:1:1660140957;319611:1:1659066943;438036:1:1657029440;444410:1:1662620118;445475:1:1662616891;419297:1:1662889803;426142:1:1655888030;419291:1:1662829503;419293:1:1662883102;419321:1:1662477203;419323:1:1664196007;442673:1:1660504936;448088:1:1664871485;422197:1:1661937740;435966:1:1656602141;433660:1:1662623802;443007:1:1661388894; max-age=1696432790; path=/ kadASCap=448088:1:1664871485;346327:1:1664882578;424441:1:1664896790; path=/ kadRPixJ=bnVsbA==; max-age=1696432790; path=/ kadUnP3=CAUQvdjvmQYaCwjdCRABGJiK8JkGGg0I1b+ZARABGJKv8JkGGg0I68akARABGL3Y75kGGg0Ir6f+ARABGMeb8JkGGg0I/JOVAhABGJae8ZkGIgoIARACGJiK8JkGIgoIAxADGL3Y75kGKgwIw+kMEAEYx5vwmQYqDAiDvRIQARiSr/CZBioMCPX/ExABGL3Y75kGKgsIqAMQARiYivCZBioMCPn0JxABGJae8ZkG; max-age=1696432790; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /qevents.js HTTP/1.1 
Host: a.quora.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         162.159.153.247
HTTP/2 200 OK
content-type: text/plain
                                        
date: Tue, 04 Oct 2022 15:19:52 GMT
x-amz-id-2: jHbk68zF0oCrN99I6TpiQ8LNg0dDTKL0BkbZQKZkL1zB85BMiiIcpjSQWNebJHGDeWUqTCN88Lg=
x-amz-request-id: 4K18RXATE8CH2H8E
last-modified: Fri, 18 Mar 2022 00:16:52 GMT
etag: W/"47078e63380c6b0cbbfb6d8508b25ee7"
x-amz-meta-s3cmd-attrs: atime:1647562609/ctime:1647562609/gid:150037/gname:ezhang/md5:47078e63380c6b0cbbfb6d8508b25ee7/mode:33204/mtime:1647562609/uid:150037/uname:ezhang
cache-control: public, max-age=14400
x-amz-version-id: vyBstMTGyA6m5sV66zq8xsypUg.tAOk.
cf-cache-status: HIT
age: 5309821
expires: Tue, 04 Oct 2022 19:19:51 GMT
set-cookie: __cf_bm=g5HK4UQo46W.gvvz6QZH.v48AAa5y1.EqlTYLnz9zWA-1664896792-0-AcAnICNJPuJZ91DXmRh//Y0hp91AjZGvtDFFXbmJIBU1gKrV0WWQdu0R2MEHVWJRXaE6TecEAky8Gtv9yHBqQkY=; path=/; expires=Tue, 04-Oct-22 15:49:52 GMT; domain=.quora.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ee5f5feecb523-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /glows-31312/src/libs/oneTrustBanner.js HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         92.223.97.97
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx
date: Tue, 04 Oct 2022 15:19:51 GMT
last-modified: Mon, 05 Sep 2022 14:57:40 GMT
etag: W/"756187d7b894fafd3191e6683d92af26"
x-amz-request-id: tx000000000000001443aaf-006322f437-1bd15767-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-10-01T10:38:29+00:00
x-id: sto5-up-gc14
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afp%3A1104%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A800200037891%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151951%3Aet%3A1664896792%3Ac%3A1%3Arn%3A255750371%3Arqn%3A1%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C25%2C9%2C1%2C670%2C0%2C%2C212%2C5%2C%2C%2C%2C1095%3Ans%3A1664896790057%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896792%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         93.158.134.119
HTTP/2 302 Found
                                        
location: /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-31312%2Feu-en%2F%3Fpub_id%3D1287%26xid%3D633c4f176be7a1000136408d%26xid_param1%3DE447HGBJ6R%26xid_param_2%3D%26sid%3DSIDyRkII9wQgIB0-GLWGRjNe7Tsl_CnKMASg4WVkot5ocPDqS3B2hLcm1EhOqAZBlRqY1NCABm0tps0zLs5UA7ZOV6yUosrl2qXk7kMyyMGb3obq9FjrsvS-PBjQJ1HG0x5Yv9UkfRzW_f8CQ%26enctid%3Dcnd8nn47hn3i%26lpsn%3DWOWS%2BInpage%2BRegistration%2BBismarck%26foris%3D1%26teclient%3D1664896791240865238%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildvcz5k%3Afp%3A1104%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A800200037891%3Ahid%3A1005978474%3Az%3A0%3Ai%3A20221004151951%3Aet%3A1664896792%3Ac%3A1%3Arn%3A255750371%3Arqn%3A1%3Au%3A1664896792895599376%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C25%2C9%2C1%2C670%2C0%2C%2C212%2C5%2C%2C%2C%2C1095%3Ans%3A1664896790057%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664896792%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 04 Oct 2022 15:19:52 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yandexuid=561885621664896792; Expires=Wed, 04-Oct-2023 15:19:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=561885621664896792; Expires=Wed, 04-Oct-2023 15:19:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yabs-sid=2617771741664896792; Path=/; SameSite=None; Secure i=gCveSBSSADiglxhlcIQOh4xdqfPh6zAwCKlhwYWWgXi+oIrSN/LzJXE2VR+xtUNKnkkUB0GbEbNgVcKbjsV7UkruzEM=; Expires=Fri, 01-Oct-2032 15:19:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None ymex=1696432792.yrts.1664896792#1696432792.yrtsi.1664896792; Expires=Wed, 04-Oct-2023 15:19:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 15:19:52 GMT
last-modified: Tue, 04-Oct-2022 15:19:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---