r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3c0c53379f331e934f61070074d41035
420f6e542cbf741838566f22e475a80e2f600d21
4b7213ec107cdf1c2cd61a124453fb682ec291af0004d071105c87e2fe7528f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B7213EC107CDF1C2CD61A124453FB682EC291AF0004D071105C87E2FE7528F5"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3170
Expires: Wed, 14 Dec 2022 08:37:23 GMT
Date: Wed, 14 Dec 2022 07:44:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 555d8608594803d49eeb9581c6b70702
d01e0201e0ba0cf751ef97226620338a853bc635
2885cdac311a30161a8ac9ef8e54c788afafd4f86ed197a651fc6d8bda077908
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2885CDAC311A30161A8AC9EF8E54C788AFAFD4F86ED197A651FC6D8BDA077908"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16200
Expires: Wed, 14 Dec 2022 12:14:33 GMT
Date: Wed, 14 Dec 2022 07:44:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 14 Dec 2022 07:33:48 GMT
content-type: application/json
age: 645
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d29881eeb0456eff8cf415ad2ce64ba0
e3cfdd5f56ff88066257ec8f4726f53e3a733bd3
2cd90072f113163f976ddb8bc7017884efd3f764e7e8961b04e3ba5ec0a17d85
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CD90072F113163F976DDB8BC7017884EFD3F764E7E8961B04E3BA5EC0A17D85"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5582
Expires: Wed, 14 Dec 2022 09:17:35 GMT
Date: Wed, 14 Dec 2022 07:44:33 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BsdWvDxHTbX8IrvVUWRSnuOZG2V+U+u1A04jbx62paq5eUlKLUFHKPZtD7y1S1y3XTllDj8qugDkBEbdPlC8mw==
x-amz-request-id: DXBS4Y5XDZHA363J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 14 Dec 2022 06:52:15 GMT
age: 3138
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
kaizenft.com/
200 OK 27 kB IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (42311)
Hash ed1d0e710b26d852c95c0153cf5ac2fa
c34979e56138fc64eb5cdb947fe6d3e45b2956e8
b01143c291ff07296a2dbdda6f957278f8c5bb88a2b47fab6b49862abc4a9bb2
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: nginx/1.23.2
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
X-Server-Cache: true
X-Proxy-Cache: HIT
Transfer-Encoding: chunked
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:33 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
kaizenft.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.7.6
200 OK 468 B URL HTTP/1.1 kaizenft.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.7.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3412), with no line terminators
Hash f88a6a529851c8ed1ffe2bd83219e490
597ff167b702900ee4473e31e390808b8de95664
ae20c6ea52a0534fdda58a7ae13839ac66194434406e00a3bb5f4538f9909886
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.7.6 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 07:05:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 468
Content-Type: text/css
kaizenft.com/wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=3.7.6
200 OK 13 kB URL HTTP/1.1 kaizenft.com/wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=3.7.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (45376)
Hash 172da7a43180320d5317955db9d94883
c20dc6828f6a17d438ded8680f182a4875dad08c
a8f98d135d01e80a8c0a5c1f96d2205bf3dddc6aaa5b73c0441a9522a372dfd3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=3.7.6 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Thu, 23 Dec 2021 07:05:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13042
Content-Type: text/css
kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.6.4
200 OK 4.4 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.6.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (26516)
Hash fdd462f58aee3f9349eabdefb5ca0b57
bb6e017d5537630516ccb98952593690a8c69864
ca51806fcedbe90dd613c4c28673af8693381806a5cb3b43dce2ea4f43e8b314
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.6.4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4436
Content-Type: text/css
kaizenft.com/wp-content/uploads/elementor/css/post-535.css?ver=1649871863
200 OK 1.0 kB URL HTTP/1.1 kaizenft.com/wp-content/uploads/elementor/css/post-535.css?ver=1649871863
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5301), with no line terminators
Hash 7c8c61645bcaf6442e599f105c43a81f
650466ad26bc1f8bca715743e8304622af752b5b
711879fd5e3a1d26f1244be2012feb9b533ead758a0d9c477da57909638a0e58
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-535.css?ver=1649871863 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 17:44:23 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1028
Content-Type: text/css
kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
200 OK 308 B URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (489)
Hash 0a08469d24387f830bbaaa00b3c228ae
01f5dfeb8f93a32c9a8f66fe5940758109771fcd
3c7c29e5fc1193ff7ce24f72f77b2dc129e1a9434a97ef7b625f6f715531803c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 308
Content-Type: text/css
kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.6.4
200 OK 4.4 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.6.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14869)
Hash 7bab7ad64ffbd7846dd6819250b93e2e
c924918d540389aff62220088b6761f38a5da272
045250efe67364c953a91f6a60cf407ebb5cfdb2da04e84c3d98e5bab5eca9ba
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.6.4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4359
Content-Type: application/javascript
kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
200 OK 13 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (57726)
Hash dc63c0a8e2d5857cc7a00a4b5456dabb
ee29df5eb2a4bf3eb805b160551c1afd84b42599
035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12577
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bfb5d3c071cebab21e6ab8647e84b6ba
ebc1553e88dbe512449a31b3cb4c10c659484d7d
cf794ab56bfa29d8e47637d68f5c82e4c60b855a8f6b772f344a72c712da3c4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bfb5d3c071cebab21e6ab8647e84b6ba
ebc1553e88dbe512449a31b3cb4c10c659484d7d
cf794ab56bfa29d8e47637d68f5c82e4c60b855a8f6b772f344a72c712da3c4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kaizenft.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.4
200 OK 2.3 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4921)
Hash 7d020a34e237a973f81e36790d7a1bf4
88d384268be9926288690c6cd68bbba4b7d1c452
6be1f636695ba02ffc054502ca782f0fd3685b1e1f64ddae6a5b768f69db56c0
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2314
Content-Type: application/javascript
kaizenft.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.6.4
200 OK 22 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.6.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65497)
Hash 02286976f2f6aa838ab581c6be07e562
cd1d13658810cc3f434423b0dfaa6fd226ec1474
4ef188e58cd0fce1a5b0a7de53e0a689c9dc2d2e18e329c3d00484bff40929fd
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.6.4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: text/css
kaizenft.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.7.6
200 OK 5.4 kB URL HTTP/1.1 kaizenft.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.7.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (16278), with no line terminators
Hash f2df0f758de6c1f4c2049ab5d5d08b0b
2549c22023bf724fd86735f6d79624dd3133aa5d
f279c802c33af58055bced0fa52ba4938a7536a57cba21195d9126b4ed35dc61
GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=3.7.6 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 07:05:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5411
Content-Type: application/javascript
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 14 Dec 2022 07:33:20 GMT
age: 673
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
kaizenft.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/1.1 kaizenft.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 02:29:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4618
Content-Type: application/javascript
kaizenft.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.4
200 OK 5.7 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14238)
Hash 755e516a396d5dcef2eec924aa7ce4d7
70e5294714b0d859904bf7bbfcf0459e7c599072
18541171013bb88267a4d73504377ae8b07071f881f9e77fd2c1d3d35895d2c9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5676
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bfb5d3c071cebab21e6ab8647e84b6ba
ebc1553e88dbe512449a31b3cb4c10c659484d7d
cf794ab56bfa29d8e47637d68f5c82e4c60b855a8f6b772f344a72c712da3c4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kaizenft.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 3.7 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12198), with no line terminators
Hash e2a8decccf4d0a6b925af707a36077a9
26a0febc9c3d91e75410f74b9ec62099ba1cbe90
09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3747
Content-Type: application/javascript
kaizenft.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 8.3 kB URL HTTP/1.1 kaizenft.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 838560e989767f2ef5951b9eeee20352
6bf8419cb4d68d9beced9e4b79b22b347ae16a46
72e6d275c5229613a59aef94523fc6a96330553976aee003d8544d5806fa0c3d
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 02:29:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8344
Content-Type: application/javascript
kaizenft.com/wp-includes/js/underscore.min.js?ver=1.13.4
200 OK 8.3 kB URL HTTP/1.1 kaizenft.com/wp-includes/js/underscore.min.js?ver=1.13.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (18798)
Hash ac9c7baaab74ef2576932d5798161987
fa202113e12b09696788a7024984879bddd29143
c03d52f8f157e9209646e3e696e9845d7d2b3cf3e73c8204f371b7393e738026
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 02:29:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8305
Content-Type: application/javascript
kaizenft.com/wp-includes/js/wp-util.min.js?ver=6.1.1
200 OK 758 B URL HTTP/1.1 kaizenft.com/wp-includes/js/wp-util.min.js?ver=6.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1391)
Hash 60bc75e3b14030c62d9fd3a3d317d8a8
6d919bbd05a3984a8e5e67b693e6d5d41cc885f9
e22df84be1a3ffe3b54352a4a39e14adb3fac69f2ce755e4c7babbc243c5bb4b
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-util.min.js?ver=6.1.1 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 02:29:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 758
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2f377c0e3f07ad6684623ac9755d3efc
6d23fdd148a39bfe0e36abebdfc8d7aa93681f32
9468f40801d2c0837e77a8b4d73104564693e71b8988f3981568535c0fca1cf0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9468F40801D2C0837E77A8B4D73104564693E71B8988F3981568535C0FCA1CF0"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 14 Dec 2022 13:44:33 GMT
Date: Wed, 14 Dec 2022 07:44:33 GMT
Connection: keep-alive
record.findtrustclicks.com/sort.js?v=7.0.1
200 OK 1.6 kB URL HTTP/1.1 record.findtrustclicks.com/sort.js?v=7.0.1
IP
File type ASCII text, with very long lines (4204), with no line terminators
Hash 240955a18e7f3ae327e2306c896cd951
0a1fe7f61b4989c537940a3bdfce3621edae23cc
28c95c49023d438a63df21c7f7d717fcc571628860a3a3be361932f80af668f6
GET /sort.js?v=7.0.1 HTTP/1.1
Host: record.findtrustclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaizenft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Dec 2022 07:44:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Fri, 09 Dec 2022 11:46:49 GMT
ETag: W/"106c-5ef63b57c68ec"
Content-Encoding: gzip
kaizenft.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 18 kB URL HTTP/1.1 kaizenft.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (47826)
Hash 9415c9562591af7a582c29139621505f
0b12eecf36a48b871a3198550f4f65bb4a6d9b1b
06c70d3232c2ae3ed2aa259eb7a1beb329b654926813935fffa8902cd5ebaa4a
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 16 Nov 2022 04:16:13 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: text/css
kaizenft.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0
200 OK 4.0 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19082)
Hash 1a51c193793d105fc6aaddfc3bc05349
238e509973276daa145be273af1aba0fbb3801bf
69e8578f795564941f826ab314ab57c83da7fb6ca7d9221c8df5f1e9081ae6e3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3978
Content-Type: text/css
ocsp.digicert.com/
200 OK 471 B IP
Hash de9e80c3bbe25e8623562110be8b8c9c
013f87db47c4ce3daf3380bc5e0ac3b1b496fe6f
792d587777c03d661a39a0593b71b3ec7611cb6e9d7a834bc79f28e6ace19692
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 718
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:33 GMT
Last-Modified: Wed, 14 Dec 2022 07:32:35 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
kaizenft.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 40 kB URL HTTP/1.1 kaizenft.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (62918)
Hash 79d5d4271b4af6b8fb4d7f54f0e7ae0d
285be1f91ca445c9d1801b218cce80f80889417d
1cd95c7010b872de3ba1d69b6e4b826df3512f4938058aca02e537fded2a503b
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Tue, 22 Nov 2022 08:01:05 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: application/javascript
kaizenft.com/wp-content/uploads/elementor/css/post-475.css?ver=1649867278
200 OK 357 B URL HTTP/1.1 kaizenft.com/wp-content/uploads/elementor/css/post-475.css?ver=1649867278
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1119), with no line terminators
Hash 273c47cc48606a4ae95daedf2bc35193
7604bd4245790f5e4bc1bac25826686fde7a4bcc
651848e9c229c7407da32c5819a10f823adfed0685b2c1ab14003e0096a5f871
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-475.css?ver=1649867278 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 16:27:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 357
Content-Type: text/css
kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.4
200 OK 13 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (59158)
Hash e6b67e11736ae36a062b381717f2ea9f
a663a79bc8d42aa58bfea1351cc27e0d0b09c9b2
a07a94d36246d0b3e5b9b18e274e31995d0e23cda955babf5e350e91a879523d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:33 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12862
Content-Type: text/css
kaizenft.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.1.2
200 OK 374 B URL HTTP/1.1 kaizenft.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (754), with no line terminators
Hash ef785f463505633971eae5c08ad626d4
624e22257f386801822229db3a4bbd2e24b25e2f
b2a0dc77f0f79d81698a7e3893e16ecba7b0d980b80a5233656d9b11f1d8160d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.1.2 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:34 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Thu, 23 Dec 2021 07:32:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 374
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5df9fe2e4a36bdfa7b14ef0012f7bf4b
6343ff953c7aee540e5c08a92e7d2a9eda7f4d1f
6ff93311040796406d4a23ab6646c1fcf2eb2d6fdae845eb94445f10c75531db
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6FF93311040796406D4A23AB6646C1FCF2EB2D6FDAE845EB94445F10C75531DB"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15799
Expires: Wed, 14 Dec 2022 12:07:53 GMT
Date: Wed, 14 Dec 2022 07:44:34 GMT
Connection: keep-alive
kaizenft.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.6.4
200 OK 15 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.6.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (37702)
Hash b371f8745337418c76d8da1bce09024b
2a431cdfbfdeac1b4902729b6da81f120717623b
cf257af34107798df389a979dff2e9ade1a63dfe32f3e85ba8fb27026f765e33
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.6.4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:34 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14706
Content-Type: application/javascript
kaizenft.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 5.9 kB URL HTTP/1.1 kaizenft.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 7fd60a111f7e00e6e67aa5ea88fa5d61
f303f2739161f9fbb55eb7e6b4d02fcca751e151
01b53eae9b086016fc090980e854b8d5128da67ad5d660bfb5cc95ba5bb44423
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:34 GMT
Server: Apache
Last-Modified: Tue, 22 Nov 2022 08:01:05 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5918
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4557f99d9d9535e0134db96dfe8063b2
c9b446d4f382a8ee3d73b1b2e77c96c3e4787059
74305a78c814edc962f442dbbc14023e0b96c5822d5aa9f4ef4c8e4bc791fc00
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4557f99d9d9535e0134db96dfe8063b2
c9b446d4f382a8ee3d73b1b2e77c96c3e4787059
74305a78c814edc962f442dbbc14023e0b96c5822d5aa9f4ef4c8e4bc791fc00
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://kaizenft.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Dec 2022 18:52:55 GMT
expires: Tue, 12 Dec 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 132699
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/vollkorn/v21/0ybgGDoxxrvAnPhYGzMlQLzuMasz6Df213aeHmmc.woff2
200 OK 25 kB URL HTTP/2 fonts.gstatic.com/s/vollkorn/v21/0ybgGDoxxrvAnPhYGzMlQLzuMasz6Df213aeHmmc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24596, version 1.0\012- data
Hash e6a0c4a1cca419f8d1d1f06fa19cf73d
43a63263f190239d84f4d6936ab0881b54ec37df
2ec8d8ea4c76b02f93bbb1d7d21b4e186709312268e6bd35e0b967ac045ad56d
GET /s/vollkorn/v21/0ybgGDoxxrvAnPhYGzMlQLzuMasz6Df213aeHmmc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://kaizenft.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 02:31:57 GMT
expires: Thu, 14 Dec 2023 02:31:57 GMT
cache-control: public, max-age=31536000
age: 18757
last-modified: Tue, 23 Aug 2022 18:35:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
way.specialblueitems.com/qqJVYyyv?&se_referrer=&default_keyword=&&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97
200 OK 3.0 kB URL HTTP/1.1 way.specialblueitems.com/qqJVYyyv?&se_referrer=&default_keyword=&&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9683), with no line terminators
Hash 90f5d7a6c6b5af4dd780da954aa49260
6fec38437297491cecd2316066ff4e8d9d7b6095
41e9cd9b0f4a83292384c45f1c6eb1c28da77d7c42bcb594d7de863dc62b9030
GET /qqJVYyyv?&se_referrer=&default_keyword=&&frm639317151a8ac=script639317151a8ae&_cid=cd0fa365-cd5a-1ed9-e213-8e1ce3b6bb97 HTTP/1.1
Host: way.specialblueitems.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaizenft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Dec 2022 07:44:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpa865af;Expires=Saturday, 14-Jan-2023 07:44:34 GMT;Max-Age=2678400;Path=/
674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjRcIjoxNjcxMDAzODc0fSxcImNhbXBhaWduc1wiOntcIjJcIjoxNjcxMDAzODc0fSxcInRpbWVcIjoxNjcxMDAzODc0fSJ9.-TlU-XutyFj5LEmOE_NPYHapYNU8rQgcC3Dnl1cxPp8;Expires=Wednesday, 27-Nov-2075 15:29:08 GMT;Max-Age=1671090274;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4557f99d9d9535e0134db96dfe8063b2
c9b446d4f382a8ee3d73b1b2e77c96c3e4787059
74305a78c814edc962f442dbbc14023e0b96c5822d5aa9f4ef4c8e4bc791fc00
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AV6K5ostm7pcyB/puNh0dw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ad3gF40FZBDvdo14RIQc4VebvJg=
kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/1.1 kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://kaizenft.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:34 GMT
Server: Apache
Last-Modified: Wed, 13 Apr 2022 16:11:38 GMT
Accept-Ranges: bytes
Content-Length: 76764
Content-Type: font/woff2
kaizenft.com/wp-content/uploads/2021/12/opensea-logo-7DE9D85D62-seeklogo.com_.png
200 OK 15 kB URL HTTP/1.1 kaizenft.com/wp-content/uploads/2021/12/opensea-logo-7DE9D85D62-seeklogo.com_.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 34e1b6ac87d264d015e4ae2fe4762a9c
487916c3efc7fab09c02726261a2537cbaa79815
71880f017a065a5ca230ce9895626b48ca105aa63f798573735be0e90626b0ba
GET /wp-content/uploads/2021/12/opensea-logo-7DE9D85D62-seeklogo.com_.png HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:34 GMT
Server: Apache
Last-Modified: Tue, 28 Dec 2021 07:51:26 GMT
Accept-Ranges: bytes
Content-Length: 14704
Content-Type: image/png
kaizenft.com/wp-content/uploads/2021/12/final_616f8a62350cb5008776233f_240554.mp4
206 Partial Content 33 kB URL HTTP/1.1 kaizenft.com/wp-content/uploads/2021/12/final_616f8a62350cb5008776233f_240554.mp4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type OpenPGP Public Key\012- data
Hash 2392cb19040e5f53938055d5dcbb0ae7
bf8e335c7615cd6a9561dca3f4e265fc38bcadbd
05d58a9375962d8820fcdae32deb81e3a45766ed42466abccfaa5fca1869af8c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/12/final_616f8a62350cb5008776233f_240554.mp4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=1507328-
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 206 Partial Content
Date: Wed, 14 Dec 2022 07:44:34 GMT
Server: Apache
Last-Modified: Tue, 28 Dec 2021 07:28:37 GMT
Accept-Ranges: bytes
Content-Length: 33223
Content-Range: bytes 1507328-1540550/1540551
Content-Type: video/mp4
kaizenft.com/wp-content/uploads/2021/12/final_616f8a62350cb5008776233f_240554.mp4
206 Partial Content 55 kB URL HTTP/1.1 kaizenft.com/wp-content/uploads/2021/12/final_616f8a62350cb5008776233f_240554.mp4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash cd8bdcdca0231b34812395d2b4ebbf56
89b635b901830933eff8410daf74d44c9dc9644a
129ff9f58ea55fee07c16e3cae45d9942886b2462e1fa04685b22131a117ca90
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/12/final_616f8a62350cb5008776233f_240554.mp4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 206 Partial Content
Date: Wed, 14 Dec 2022 07:44:34 GMT
Server: Apache
Last-Modified: Tue, 28 Dec 2021 07:28:37 GMT
Accept-Ranges: bytes
Content-Length: 1540551
Content-Range: bytes 0-1540550/1540551
Content-Type: video/mp4
kaizenft.com/wp-content/uploads/2021/12/1_k_cZzASLaorWhLtk4mONHQ_2x-removebg-preview.png
200 OK 78 kB URL HTTP/1.1 kaizenft.com/wp-content/uploads/2021/12/1_k_cZzASLaorWhLtk4mONHQ_2x-removebg-preview.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash e07bdc07723fb9fd0d1829e96661fe0b
83260b40d8f7e6e0dab23942aa4ca148e574c047
a1772478c208b0200f4d030ae8afa07685dd8a047a44414935c9fe43b610125e
GET /wp-content/uploads/2021/12/1_k_cZzASLaorWhLtk4mONHQ_2x-removebg-preview.png HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:34 GMT
Server: Apache
Last-Modified: Tue, 28 Dec 2021 09:28:09 GMT
Accept-Ranges: bytes
Content-Length: 78541
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a57ca9d64d07fef91a9fb771082c95da
f2f6af722aa86423b4c5d59bc663d88e1109a3ef
0e90769263c426e3ed67ee22cc97fb8479d50ef5685179e1c304cd7a7d356bc7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E90769263C426E3ED67EE22CC97FB8479D50EF5685179E1C304CD7A7D356BC7"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6748
Expires: Wed, 14 Dec 2022 09:37:02 GMT
Date: Wed, 14 Dec 2022 07:44:34 GMT
Connection: keep-alive
kaizenft.com/wp-content/uploads/2021/12/final_616f8a62350cb5008776233f_615132.mp4
206 Partial Content 202 kB URL HTTP/1.1 kaizenft.com/wp-content/uploads/2021/12/final_616f8a62350cb5008776233f_615132.mp4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 202 kB (201730 bytes)
Hash 3488ea902e33c036b6c6e1d97d69005e
df61f30015adf5a5c704aa356a539cc7cbc6f8de
8abf086b379f7c30bb7b72f11a2f3ffa4ceb12e05f80c5dae7ac05039fb4e680
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/12/final_616f8a62350cb5008776233f_615132.mp4 HTTP/1.1
Host: kaizenft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://kaizenft.com/
HTTP/1.1 206 Partial Content
Date: Wed, 14 Dec 2022 07:44:34 GMT
Server: Apache
Last-Modified: Tue, 28 Dec 2021 08:39:47 GMT
Accept-Ranges: bytes
Content-Length: 201730
Content-Range: bytes 0-201729/201730
Content-Type: video/mp4
js.interestmoments.com/scripts/trimpc.js
200 OK 2.2 kB URL HTTP/1.1 js.interestmoments.com/scripts/trimpc.js
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
File type ASCII text, with very long lines (6273), with no line terminators
Hash bd5f69c2542e83fddf47867c10bccc0a
746fb3432ba9279a97b8a9a32695aafac1504ad7
a8d57ffe103fc0d3d7bc988916ee4315fca1d1be8de43f9d62981450a44ea10f
Analyzer Verdict Alert fortinet Malware
GET /scripts/trimpc.js HTTP/1.1
Host: js.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaizenft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Dec 2022 07:44:34 GMT
Content-Type: application/javascript
Last-Modified: Fri, 09 Dec 2022 11:25:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63931b0c-1881"
Expires: Sat, 24 Dec 2022 07:44:34 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f340e8485c80338c159be2ac5f8050c5
704f9da662775b15315248a59353c9af39a1ef0e
2197d905b6847b6ae4eb8b90be3edb8ed0e6c809208590d3a59559e8fce99f8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f3666ec4d84b33ace3d26bb89c3f12aa
287083a360cd46fd36b40cf5f9e8bf72ebaa7e60
cd319197ce1024ff7fee8ac0ebcc10d4c279001553f79686b099cf27248175e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CD319197CE1024FF7FEE8AC0EBCC10D4C279001553F79686B099CF27248175E4"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11402
Expires: Wed, 14 Dec 2022 10:54:37 GMT
Date: Wed, 14 Dec 2022 07:44:35 GMT
Connection: keep-alive
long.interestmoments.com/go/fl-way.php?id=8568-11-4563432&pid=098
302 Found 0 B URL HTTP/1.1 long.interestmoments.com/go/fl-way.php?id=8568-11-4563432&pid=098
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/fl-way.php?id=8568-11-4563432&pid=098 HTTP/1.1
Host: long.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaizenft.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 14 Dec 2022 07:44:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://long.interestmoments.com/go/fl-way.php?id=16477-22-569654345&pid=235&jid=473
Access-Control-Allow-Origin: *
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12580
Expires: Wed, 14 Dec 2022 11:14:15 GMT
Date: Wed, 14 Dec 2022 07:44:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12580
Expires: Wed, 14 Dec 2022 11:14:15 GMT
Date: Wed, 14 Dec 2022 07:44:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12580
Expires: Wed, 14 Dec 2022 11:14:15 GMT
Date: Wed, 14 Dec 2022 07:44:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12580
Expires: Wed, 14 Dec 2022 11:14:15 GMT
Date: Wed, 14 Dec 2022 07:44:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12580
Expires: Wed, 14 Dec 2022 11:14:15 GMT
Date: Wed, 14 Dec 2022 07:44:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F654e7722-a3eb-46c4-b652-ed202ea6f8d1.webp
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F654e7722-a3eb-46c4-b652-ed202ea6f8d1.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25e5932a6449b859223367ce1e67e59c
5d2ea71d4f0d952d665586bdf32ed0e88c605af6
160021eb4b65b4720d90337bf46bfc3c5b317b2ec406ba377c9368a11c56f629
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F654e7722-a3eb-46c4-b652-ed202ea6f8d1.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12046
x-amzn-requestid: 53e890e7-eaa7-434d-bcde-4a1e60b5b6b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dGqNWEhooAMFZxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6398f0bb-0282299f7b644bbd2b65c079;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 21:38:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XJelUmwr6ECrVewxG3xTG9Zfvy0dUgxkP6FhPndIJ43i3iK6yrJZsw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 21:56:34 GMT
age: 35281
etag: "5d2ea71d4f0d952d665586bdf32ed0e88c605af6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8b0477fb90d103e2155bbf7ab47d877
ab668e755bd742b165fa3ba46a4c486c616a7ff6
40e2282cf64da6034f73a2ff0c0d060550caa364244d5bdf282d2f54719d48ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4703
x-amzn-requestid: 975cb427-5feb-4c36-bcfe-bed0cc9bd3b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czpW4Hh4IAMFeRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639155c5-63d6d97371f11d6012edae68;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 03:11:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BouIqIrg_vfxBH0weDXiqoEBcSV8_d4qDVB3Er5PeIrZz249iHdqGQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 05:29:25 GMT
age: 8110
etag: "ab668e755bd742b165fa3ba46a4c486c616a7ff6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79a2c580-94e2-4dbb-9a82-9c5b12a9ecfa.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79a2c580-94e2-4dbb-9a82-9c5b12a9ecfa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 027a9fc390a10242c7389ac20d8be93a
9bc06ec4c13fd3f14bde06387d56814f2a886a88
8ef7b73d6657c8d5cfd26fcad97b82f0acd21637d7ee8af84688295ffca85093
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79a2c580-94e2-4dbb-9a82-9c5b12a9ecfa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4041
x-amzn-requestid: 5f92302c-f41f-46a4-9283-2c5d49c3c282
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dGpc2Gl5IAMFzUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6398ef85-54bd3ad3579e0d081e17b206;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 21:32:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RuZ47uh2aq0Ib0ZGmC7gBooDauMtzuzRZspYkVePk5lFecEIrgTqFw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 21:57:03 GMT
age: 35252
etag: "9bc06ec4c13fd3f14bde06387d56814f2a886a88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf99cc35-2988-4958-a87c-f7f44e2094c7.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf99cc35-2988-4958-a87c-f7f44e2094c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f8501112ef886bfa0aaf2239cee2d312
f07542e9312ef0b42c96f2687766fe46f57f38cb
296c8dd5bdcb6ff49fcfebe464a7baa9c22bbe8ef6fef0798e92b10e1b3b1ac9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf99cc35-2988-4958-a87c-f7f44e2094c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4294
x-amzn-requestid: a906aaed-cfa3-453a-b872-87f906f6251c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dGp1ME7aoAMFWyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6398f021-23ddca2815a10a181549c5d8;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 21:35:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2uDwp7t_YtOtwnTAUFA9n_mcS-JHhi37LnqgWhLYF6We8IQl6gfCBQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 21:55:32 GMT
age: 35343
etag: "f07542e9312ef0b42c96f2687766fe46f57f38cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F054e0b4b-d420-4463-a5a6-3096c010530a.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F054e0b4b-d420-4463-a5a6-3096c010530a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb3fe83fc6c46d9953cd9a5a37846113
ee75bf121ea7418f2063aba8f9a633a4ad6d43bd
bb5cabacaedef79cc52f747b9551711435fb4e06d8130d545cbe6f750881b03e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F054e0b4b-d420-4463-a5a6-3096c010530a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7467
x-amzn-requestid: 117d50cf-86a5-4b45-aec1-e7cc651904e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c-FJQFiooAMF8wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6395823b-2626bd6f1c3c97ac113992dc;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 07:09:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Aik5pccRONkkK_c5pf8HhwSVmJ52e8IwFOwEuIBk34Fe0WrAfXmJ9A==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 08:02:10 GMT
age: 85345
etag: "ee75bf121ea7418f2063aba8f9a633a4ad6d43bd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6b84af-02ea-400c-ab94-e7774c464de0.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6b84af-02ea-400c-ab94-e7774c464de0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eecda03470e6d1e63e4c027071b78cfd
9bbfa53c2e7467ab4a98d5a683fb9c6300443e5d
c6d5454072d8a22e511ff7d623fb4d9527011b647b7fd59cf0f2008feaea63ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6b84af-02ea-400c-ab94-e7774c464de0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10712
x-amzn-requestid: c5358650-9889-4925-b861-66a14bc5a3f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dGp0iHrRoAMFwLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6398f01c-3b6ae94b501be25057cac868;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 21:35:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jflQ6FwFFFpVVPy-2KKQ_fs1zZcS3BEEJgwNoHdAJDy9vRoajW_4Cg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 21:45:52 GMT
age: 35923
etag: "9bbfa53c2e7467ab4a98d5a683fb9c6300443e5d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
long.interestmoments.com/go/fl-way.php?id=16477-22-569654345&pid=235&jid=473
200 OK 440 B URL HTTP/1.1 long.interestmoments.com/go/fl-way.php?id=16477-22-569654345&pid=235&jid=473
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash f5450b641683c45579121dc41689ccbb
6c07388ab822f19b46035df6e96afef93ecb97a9
286a779d2607338d9d7d9799a1f320187d58d497969f16150ac9bf57f9396c68
GET /go/fl-way.php?id=16477-22-569654345&pid=235&jid=473 HTTP/1.1
Host: long.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kaizenft.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Dec 2022 07:44:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 4cfad25ad03779309e92204efd324976
922bcf6ca98d2c90252f19652a41a2bb4e424c21
07ce7721bee4b74a13f06912ab911564227efba5504a1656c9c5c1da9bfdd3ee
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 14 Dec 2022 07:44:36 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 13 Dec 2022 21:21:48 GMT
Expires: Wed, 14 Dec 2022 21:21:48 GMT
ETag: "922bcf6ca98d2c90252f19652a41a2bb4e424c21"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
track.wg-aff.com/click?pid=1287&offer_id=82&ref_id=jdsbykynofswpad1koa1&sub1=E0HHDGBJ6R
302 Found 0 B URL HTTP/2 track.wg-aff.com/click?pid=1287&offer_id=82&ref_id=jdsbykynofswpad1koa1&sub1=E0HHDGBJ6R
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=1287&offer_id=82&ref_id=jdsbykynofswpad1koa1&sub1=E0HHDGBJ6R HTTP/1.1
Host: track.wg-aff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 14 Dec 2022 07:44:36 GMT
content-length: 0
location: https://trck.wargaming.net/713tw6jf/?t=1&pub_id=1287&xid=63997ee4660c68000161cfa1&xid_param1=E0HHDGBJ6R&xid_param_2=
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=63997ee4660c68000161cfa1; expires=Thu, 14 Dec 2023 07:44:36 GMT; secure; SameSite=None
afoffers={"82":1671003876}; expires=Thu, 14 Dec 2023 07:44:36 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 52979e5e13fa2415f158ebf97db71e55
7f6bc62baa52569c6e34b1818db6a5c02101709b
8289ea921a0aadd6eb199d18535afc8cf6f436bd5c2935f72d0d570f81a4fbf0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 401
Cache-Control: max-age=93923
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:36 GMT
Etag: "63984936-1d7"
Expires: Thu, 15 Dec 2022 09:49:59 GMT
Last-Modified: Tue, 13 Dec 2022 09:43:18 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
trck.wargaming.net/713tw6jf/?t=1&pub_id=1287&xid=63997ee4660c68000161cfa1&xid_param1=E0HHDGBJ6R&xid_param_2=
301 Moved Permanently 22 B URL HTTP/1.1 trck.wargaming.net/713tw6jf/?t=1&pub_id=1287&xid=63997ee4660c68000161cfa1&xid_param1=E0HHDGBJ6R&xid_param_2=
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with no line terminators
Hash 0e0bf67572311f8a23814419ff24ee9a
78328dfc54708433cdfb3e7857e57f87ec443b08
c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
GET /713tw6jf/?t=1&pub_id=1287&xid=63997ee4660c68000161cfa1&xid_param1=E0HHDGBJ6R&xid_param_2= HTTP/1.1
Host: trck.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 14 Dec 2022 07:44:36 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 22
Connection: keep-alive
Location: https://promo.worldofwarships.eu/glows-58322/eu-en/?t=1&pub_id=1287&xid=63997ee4660c68000161cfa1&xid_param1=E0HHDGBJ6R&xid_param_2=&sid=SIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g&enctid=cp1dfrgr8w06&lpsn=WOWS+Bismarck+with+bonuses+Code+BRAVO&foris=1&teclient=1671003876743102109&utm_source=wlap&utm_medium=affiliate&utm_campaign=713tw6jf&utm_content=1287
Set-Cookie: STIDREFERRAL=SIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
enctid=cp1dfrgr8w06; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
teclient=1671003876743102109; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 040269815185e07357622c80d00b2834
beb5807515dfa58ab3508ad5cc097ac874f1c7a1
5b9ca767e1b1c723a06111d2a12789d584736438faa88753031910874e0ab93d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5B9CA767E1B1C723A06111D2A12789D584736438FAA88753031910874E0AB93D"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18527
Expires: Wed, 14 Dec 2022 12:53:23 GMT
Date: Wed, 14 Dec 2022 07:44:36 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ee0c469970516bf6d255dafb0bd1225
884a347c2db0f220ce35dae3a64b1525ddbc3fa4
ff8285413954679ea64613c021380586779d139c7e0ccb6595f9efe3f1ae7e1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d75798af1e55d520e3456be1cc73f16c
ac89c59681e94259a604029c0ebc76e69e54788d
b4f19ee7a45635111a019fd7694d5d00d132bdc607e572e41544ad8e73a02c7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B4F19EE7A45635111A019FD7694D5D00D132BDC607E572E41544AD8E73A02C7E"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12689
Expires: Wed, 14 Dec 2022 11:16:06 GMT
Date: Wed, 14 Dec 2022 07:44:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d75798af1e55d520e3456be1cc73f16c
ac89c59681e94259a604029c0ebc76e69e54788d
b4f19ee7a45635111a019fd7694d5d00d132bdc607e572e41544ad8e73a02c7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B4F19EE7A45635111A019FD7694D5D00D132BDC607E572E41544AD8E73A02C7E"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6002
Expires: Wed, 14 Dec 2022 09:24:39 GMT
Date: Wed, 14 Dec 2022 07:44:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d75798af1e55d520e3456be1cc73f16c
ac89c59681e94259a604029c0ebc76e69e54788d
b4f19ee7a45635111a019fd7694d5d00d132bdc607e572e41544ad8e73a02c7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B4F19EE7A45635111A019FD7694D5D00D132BDC607E572E41544AD8E73A02C7E"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12718
Expires: Wed, 14 Dec 2022 11:16:35 GMT
Date: Wed, 14 Dec 2022 07:44:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d75798af1e55d520e3456be1cc73f16c
ac89c59681e94259a604029c0ebc76e69e54788d
b4f19ee7a45635111a019fd7694d5d00d132bdc607e572e41544ad8e73a02c7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B4F19EE7A45635111A019FD7694D5D00D132BDC607E572E41544AD8E73A02C7E"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12775
Expires: Wed, 14 Dec 2022 11:17:32 GMT
Date: Wed, 14 Dec 2022 07:44:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d75798af1e55d520e3456be1cc73f16c
ac89c59681e94259a604029c0ebc76e69e54788d
b4f19ee7a45635111a019fd7694d5d00d132bdc607e572e41544ad8e73a02c7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B4F19EE7A45635111A019FD7694D5D00D132BDC607E572E41544AD8E73A02C7E"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6005
Expires: Wed, 14 Dec 2022 09:24:42 GMT
Date: Wed, 14 Dec 2022 07:44:37 GMT
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=UA-40205758-4
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-40205758-4
IP
File type ASCII text, with very long lines (1921)
Hash 055683e5e4eeaa2a603fb8431181ebc5
c192a051104b6861ba93bc0b1bf615a19fa20ad8
38c866966c8ab4048f4c909962892eba7cb4f22a26fc8509c9cc0d7e08d477c6
GET /gtag/js?id=UA-40205758-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 14 Dec 2022 07:44:37 GMT
expires: Wed, 14 Dec 2022 07:44:37 GMT
cache-control: private, max-age=900
last-modified: Wed, 14 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43594
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/images/doubloons.png
200 OK 98 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/images/doubloons.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 119017fbc5d5a687adb89c9867e45a9e
ab7cb4b11852332d9c6207b51e210ec15a1eeac1
a4df9b1f3ef18079abe8ac230229166cdb5da1ad555af810db45f6650ffcb913
GET /glows-58322/src/images/doubloons.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/png
content-length: 97597
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: "119017fbc5d5a687adb89c9867e45a9e"
x-amz-request-id: tx000000000000001872bc6-00636277be-1c86523b-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:18+00:00
x-id: sto5-up-gc11
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/images/wowsl_logo.png
200 OK 10 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/images/wowsl_logo.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 749 x 299, 8-bit colormap, non-interlaced\012- data
Hash 4d9371a87a4f9a0d6a8792e0397aa303
1308b49f8614f0ab05e81698daf5bfc4a2498bf0
68ddcc9fad945493001c241d8de6fb9acdd436bc82bff503302dbffa64f4f5ed
GET /glows-58322/src/images/wowsl_logo.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/png
content-length: 10514
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: "4d9371a87a4f9a0d6a8792e0397aa303"
x-amz-request-id: tx000000000000001d6ec80-00636277bd-1c888e0e-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/images/footer-logo.png
200 OK 1.9 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/images/footer-logo.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 275 x 63, 8-bit colormap, non-interlaced\012- data
Hash 7ce94cd1324102c254e60ced58661dc3
b76e3b4e14cf98aa766788bc8cf4fbc97058fec0
fdd269a537d61d3fafbef167c6c7e22ae7707217427b506674f5f0d2f3caed48
GET /glows-58322/src/images/footer-logo.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/png
content-length: 1939
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: "7ce94cd1324102c254e60ced58661dc3"
x-amz-request-id: tx0000000000000012badc4-0063627a56-1bbb63a8-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:18+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/images/credits.png
200 OK 100 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/images/credits.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Size 100 kB (100270 bytes)
Hash 268b3fea76ccacbadde45db5cb8fd100
8935b886c3cc27b13e8dc450e212109ec5618782
2b5153397c333755224fe430b9affd512663b685c95a876236bb82e9bbc08e9b
GET /glows-58322/src/images/credits.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/png
content-length: 100270
last-modified: Wed, 02 Nov 2022 09:51:39 GMT
etag: "268b3fea76ccacbadde45db5cb8fd100"
x-amz-request-id: tx000000000000001872be7-00636277be-1c86523b-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:18+00:00
x-id: sto5-up-gc11
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/images/prem.png
200 OK 116 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/images/prem.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Size 116 kB (115483 bytes)
Hash 92a361233fe6826358e6fb4319581a4c
09f042ce8985958cdd88524a694d42df8709a30c
bdd5ade5599ac4377cc0e5ed1a342d45544b95cc0becf39276c4f8865dda62e4
GET /glows-58322/src/images/prem.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/png
content-length: 115483
last-modified: Wed, 02 Nov 2022 09:51:39 GMT
etag: "92a361233fe6826358e6fb4319581a4c"
x-amz-request-id: tx0000000000000012b50c6-00636277be-1bbb63a8-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/images/ship.png
200 OK 123 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/images/ship.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Size 123 kB (123245 bytes)
Hash 597158834b6875cbce3861362c7b1e6c
2ad02d404edfa3ad0b1c44faf3ff468f7acce524
4b5b09b3433de07d375ca481b6fa90d60f659655e61f5323972cbaa3ec6c4fd4
GET /glows-58322/src/images/ship.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/png
content-length: 123245
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: "597158834b6875cbce3861362c7b1e6c"
x-amz-request-id: tx0000000000000017cd25d-00636277be-1c8e9cf0-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:18+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/images/bg_Bismarck.jpg
200 OK 222 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/images/bg_Bismarck.jpg
IP
ASN #199524 G-Core Labs S.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 222 kB (222313 bytes)
Hash 177bc842cd3bd3962aaa68e91789bc2c
236420cc46bc9c18ea0b5b7655b91ac8b28a5244
5394fd7074550962369dfc22f26ae5a54d1897912579451b36796e1ce3f7abad
GET /glows-58322/src/images/bg_Bismarck.jpg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/jpeg
content-length: 222313
last-modified: Wed, 02 Nov 2022 09:51:39 GMT
etag: "177bc842cd3bd3962aaa68e91789bc2c"
x-amz-request-id: tx0000000000000011aaa9f-0063627a56-1bbb63a2-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc14
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ee0c469970516bf6d255dafb0bd1225
884a347c2db0f220ce35dae3a64b1525ddbc3fa4
ff8285413954679ea64613c021380586779d139c7e0ccb6595f9efe3f1ae7e1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promo-cdn.worldofwarships.com/glows-58322/src/styles/style.css
200 OK 5.8 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/styles/style.css
IP
ASN #199524 G-Core Labs S.A.
Hash 8fdb5720487295159801c9552aa2bbd7
ec841b4da94edb1d5cbd86e327d2ca8829345b51
a9893e096728221538e3e67b362c3459166b36cf02d3414173a6dd569df51e3b
GET /glows-58322/src/styles/style.css HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: W/"c1a0079d71834c5b925eebff449342a7"
x-amz-request-id: tx000000000000001d6ec77-00636277bd-1c888e0e-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/fonts/robotocondensed-regular.woff
200 OK 92 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/fonts/robotocondensed-regular.woff
IP
ASN #199524 G-Core Labs S.A.
File type Web Open Font Format, TrueType, length 92000, version 1.0\012- data
Hash 390bd5d824e087653e297bdd9b369153
98d3f9b6c56788ca8a31212c8edc71e476a97bec
b32cf642f870c95b900ad763b21c6278701e4a4de13ac6f28e2da2a891a1706b
GET /glows-58322/src/fonts/robotocondensed-regular.woff HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-length: 92000
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: "390bd5d824e087653e297bdd9b369153"
x-amz-request-id: tx0000000000000011a5b91-00636277bd-1bbb63a2-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc14
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/libs/aos.css
200 OK 3.2 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/libs/aos.css
IP
ASN #199524 G-Core Labs S.A.
Hash e939a7497ff91a8246f740175b0ac828
be1c1a5920b79be5e83f50058955220606d69c71
125cc755e4ae1b28f28d9f677d0f6230199b525c0cd79c9143141b6d189344a4
GET /glows-58322/src/libs/aos.css HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: W/"1691966fad1799cece5fedf5bbd55bfc"
x-amz-request-id: tx0000000000000011a5b8d-00636277bd-1bbb63a2-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/fonts/robotocondensed-bold.woff
200 OK 92 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/fonts/robotocondensed-bold.woff
IP
ASN #199524 G-Core Labs S.A.
File type Web Open Font Format, TrueType, length 92496, version 1.0\012- data
Hash fb69d9cc5aea733510b530ed221b75dc
86276b2f2dfb7b42dc1639730c0bec56aa709be4
3b063cd5ae1793c617df8450a6c4343f7493ad006a574d9c3e9f7e81be9578f8
GET /glows-58322/src/fonts/robotocondensed-bold.woff HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-length: 92496
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: "fb69d9cc5aea733510b530ed221b75dc"
x-amz-request-id: tx000000000000001872bbe-00636277bd-1c86523b-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/libs/oneTrustBanner.js
200 OK 6.1 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/libs/oneTrustBanner.js
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (10016)
Hash 0e990187baaf3e4799c9bcb5d185b4ca
1d164ba20fb871624bebee9708312d198cc816db
d8d27d6cb5aed3abe0ae9140a49db539fb9a4a63abd0e4f1877b3b1626e02fef
GET /glows-58322/src/libs/oneTrustBanner.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: W/"756187d7b894fafd3191e6683d92af26"
x-amz-request-id: tx00000000000000186fc29-00636277bd-1c8fb11d-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc13
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
200 OK 7.2 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
File type ASCII text, with very long lines (21747)
Hash 1cdc786dd1264609f9834f4aba53e2ef
fff15e833ab27c356e7723dce3441e194b6350bf
70768bac474def6b0ed3e517083dd9c2f1ae3f0fe714ea550c406ce89906adc9
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: application/javascript
content-length: 7151
content-encoding: gzip
content-md5: HNx4bdEmRgn5g09KulPi7w==
last-modified: Tue, 13 Dec 2022 20:24:09 GMT
etag: 0x8DADD47FD75A24B
x-ms-request-id: 8565ddd7-701e-00f8-0b50-0f13fb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 21292
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550b84dc7b506-OSL
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/videos/bismarckLP_05.webm
206 Partial Content 1.1 MB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/videos/bismarckLP_05.webm
IP
ASN #199524 G-Core Labs S.A.
File type WebM\012- EBML file, creator webmB\20\012- data
Size 1.1 MB (1061022 bytes)
Hash 30f255709e9d3afa733a1ba016318492
eaa35eda336b9d90ec2f427b2c29f986db4720e0
1e8b9c55e1f8679225887958bce84b37bc997be2aba1e4706d07b53599bb7ce5
GET /glows-58322/src/videos/bismarckLP_05.webm HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-length: 1061022
last-modified: Wed, 02 Nov 2022 09:51:39 GMT
etag: "30f255709e9d3afa733a1ba016318492"
x-amz-request-id: tx0000000000000018788f4-0063627a57-1c86523b-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:28:10+00:00
x-id: sto5-up-gc10
content-range: bytes 0-1061021/1061022
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/libs/jquery.fullpage.min.css
200 OK 123 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/libs/jquery.fullpage.min.css
IP
ASN #199524 G-Core Labs S.A.
Size 123 kB (123217 bytes)
Hash 8e433053cb1df4b106e49797a0c7b3a3
1dc069b0392e3a9e222b4ff25f5aed40ecd464b8
3a398f5c815205d3fd64b4ec8ad006ec0867228681c0d9ddf47c1c4c650906b6
GET /glows-58322/src/libs/jquery.fullpage.min.css HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: W/"c397710fd5227e7e53b0c95cbc6b9d61"
x-amz-request-id: tx000000000000000503c6d-006375fc70-1cdf9313-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-11T12:18:06+00:00
x-id: sto5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json
200 OK 1.9 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json
IP
File type JSON data\012- , ASCII text, with very long lines (5875), with no line terminators
Hash 23b49030e418c340a4d3b3c510f6558d
fd7f8e05f97e7bf21c83782409f6972b172121f1
0f1e442050ca65df6cbaa0371a5097b75cb8bd93d0a7df66dfb88c249ed86b71
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: application/x-javascript
content-length: 1898
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: I7SQMOQYw0Ck07PFEPZVjQ==
last-modified: Fri, 25 Nov 2022 10:09:39 GMT
etag: 0x8DACECD29F68FC0
x-ms-request-id: 22332b09-f01e-0147-73b6-0041d8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 76494
expires: Thu, 15 Dec 2022 07:44:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550b8eec8b506-OSL
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
200 OK 18 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
IP
ASN #199524 G-Core Labs S.A.
Hash d5062a12dfcd5a05c564c2ccfe6942a8
c38e01c1d995c3e6ab44e681fe4d3cb5e234eada
85026371bae8ccae1c4d1c37df9de537a1b4b05af9bce80f24562070247b9e0f
GET /global_static/age_ratings/v2/pegi_ext-violence.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"9a3e2c35d77bd8b96138310eeb6b7f7b"
x-amz-request-id: tx00000000000000080ab06-00633fe0c3-1c4c0c09-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-10T08:22:21+00:00
x-id: sto5-up-gc11
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0433fbd1fce23a4ef7cc57d125978157
ea3a6ab371fde7b300a6c8f7717ce928dd270a4a
78512d3a66d775eebb884c20bb79fda3f374295ef224d13c63bc29eea64bd996
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 7780df2faaa99a4a15483892658b0649
6c8dabfffcbdea57b2daa78f7a8f6204e1a662fb
56f51955dfa93f89461de1b053feaa8d38478b62313b06f92bfd6f6338134c8f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 134
Cache-Control: max-age=121698
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Etag: "6398b6c1-117"
Expires: Thu, 15 Dec 2022 17:32:55 GMT
Last-Modified: Tue, 13 Dec 2022 17:30:41 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
200 OK 94 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65451)
Hash f6a491be9dc7f6ba1271f4faa9753179
e11e8e291ca6548f4933103088b8acd15af84191
6cf04708cbb25e9b7144e865deebd75bd4b2d42fa703299ba303a084d457b081
GET /scripttemplates/202211.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: application/javascript
content-length: 93485
content-encoding: gzip
content-md5: 9qSRvp3H9roScfT6qXUxeQ==
last-modified: Wed, 30 Nov 2022 07:37:09 GMT
etag: 0x8DAD2A5B0177E6D
x-ms-request-id: 7cacc22c-c01e-014f-273e-055aab000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 83190
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550ba6894b506-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07720019c98fc55813c8815036142f54
fcc8e0342dd7bf34c61204f5db99de21eb5bfb88
92dee381fa7b3e92ac57b13ae6d72ce743152968905e74a4f3a2b15d7b47c3c4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1671003875118&cv=11&fst=1671003875118&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&auid=2010633432.1671003875&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1671003875118&cv=11&fst=1671003875118&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&auid=2010633432.1671003875&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (3151), with no line terminators
Hash 5cba46c7694b7197b0cf55b059188f33
69b21efe115b351410ab7b19a92e60205ba5abf2
431a5ebdaa8f90767c1b0e4bb2740e854be9d1d81a91da705bd6bba945d726be
GET /pagead/viewthroughconversion/1006839708/?random=1671003875118&cv=11&fst=1671003875118&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&auid=2010633432.1671003875&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 14 Dec 2022 07:44:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1301
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 14-Dec-2022 07:59:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
200 OK 2.6 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
IP
ASN #199524 G-Core Labs S.A.
Hash 17fe9378bbf59b9d4baabf0cdea34dbc
b6fd73d81db5c174209ada237345fcb207898bda
49077de487b7751dc2a422cf6368e792e15cfb221974ebd19187e530aed04f30
GET /global_static/age_ratings/v2/pegi_rating.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:21 GMT
etag: W/"207ef7e145ba483b342b96f8c2fbf72a"
x-amz-request-id: tx0000000000000002a85f1-00633fe0c3-1c4459fa-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-10T08:23:28+00:00
x-id: sto5-up-gc13
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6266cd7c12d1ab0ff994b63798b53b30
04eba0ba789b23371d383cba14a01d21b0fd96ed
6fcdf7036d0cc551eee84f3a54036371a44520768efb1269e9ea15a22daec24d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6FCDF7036D0CC551EEE84F3A54036371A44520768EFB1269E9EA15A22DAEC24D"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13318
Expires: Wed, 14 Dec 2022 11:26:35 GMT
Date: Wed, 14 Dec 2022 07:44:37 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 7780df2faaa99a4a15483892658b0649
6c8dabfffcbdea57b2daa78f7a8f6204e1a662fb
56f51955dfa93f89461de1b053feaa8d38478b62313b06f92bfd6f6338134c8f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 134
Cache-Control: max-age=121698
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Etag: "6398b6c1-117"
Expires: Thu, 15 Dec 2022 17:32:55 GMT
Last-Modified: Tue, 13 Dec 2022 17:30:41 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
promo-cdn.worldofwarships.com/glows-58322/src/libs/jquery.fullpage.js
200 OK 40 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/libs/jquery.fullpage.js
IP
ASN #199524 G-Core Labs S.A.
Hash 5650ee501f5cbc0f28742fb1d8a490f3
3a09dc09b5e0c292e57ecd239fc64a78c56345bb
ac9d0ad762e562c4aeb3b220a8742a9aa6e7f2027e35f630075bf326e1726927
GET /glows-58322/src/libs/jquery.fullpage.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: W/"9a854eed59d24b9252aa7e8ff082eda8"
x-amz-request-id: tx00000000000000186fc2a-00636277bd-1c8fb11d-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc14
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (48198), with no line terminators
Hash b423017d2eccc05cb5e3921d36eeb535
b989dd503a71fa6a448860a5d59c28bbceee910b
b8aab8ba299a063e0e5faacea59d7cc56da466c0fd3b91a8d03480184eaf7495
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: application/x-javascript
content-length: 11485
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: tCMBfS7MwFy145IdNu61NQ==
last-modified: Fri, 25 Nov 2022 10:09:21 GMT
etag: 0x8DACECD1F1475FC
x-ms-request-id: ba3e27e9-f01e-00e9-15b6-0024e0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 76274
expires: Thu, 15 Dec 2022 07:44:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550bad944b506-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6266cd7c12d1ab0ff994b63798b53b30
04eba0ba789b23371d383cba14a01d21b0fd96ed
6fcdf7036d0cc551eee84f3a54036371a44520768efb1269e9ea15a22daec24d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6FCDF7036D0CC551EEE84F3A54036371A44520768EFB1269E9EA15A22DAEC24D"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13318
Expires: Wed, 14 Dec 2022 11:26:35 GMT
Date: Wed, 14 Dec 2022 07:44:37 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0433fbd1fce23a4ef7cc57d125978157
ea3a6ab371fde7b300a6c8f7717ce928dd270a4a
78512d3a66d775eebb884c20bb79fda3f374295ef224d13c63bc29eea64bd996
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07720019c98fc55813c8815036142f54
fcc8e0342dd7bf34c61204f5db99de21eb5bfb88
92dee381fa7b3e92ac57b13ae6d72ce743152968905e74a4f3a2b15d7b47c3c4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f340e8485c80338c159be2ac5f8050c5
704f9da662775b15315248a59353c9af39a1ef0e
2197d905b6847b6ae4eb8b90be3edb8ed0e6c809208590d3a59559e8fce99f8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=7344948120142;gtm=2wgbu0;gcs=G111;auiddc=2010633432.1671003875;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287
200 OK 594 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=7344948120142;gtm=2wgbu0;gcs=G111;auiddc=2010633432.1671003875;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1497), with no line terminators
Hash 156b4750087dfedd62634acaa0870d7a
430b5273fca428b2c3dea9ed042e22d122f6475a
248d1f841d71e0eb51af8c620690649f3522eb3611eb8b4755979fe9cbbb67b9
GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=7344948120142;gtm=2wgbu0;gcs=G111;auiddc=2010633432.1671003875;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10697551.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 14 Dec 2022 07:44:37 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 594
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f340e8485c80338c159be2ac5f8050c5
704f9da662775b15315248a59353c9af39a1ef0e
2197d905b6847b6ae4eb8b90be3edb8ed0e6c809208590d3a59559e8fce99f8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCenterRounded.json
200 OK 2.6 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCenterRounded.json
IP
File type JSON data\012- , ASCII text, with very long lines (7753)
Hash 688f5aef949a8982bda0771893cc67d3
c50441dea985350ab305848e2d87d6286adfda3c
da30c398b0e6646c44fc5a53e44371004a33267d6cd07404775ab6380979b058
GET /scripttemplates/202211.1.0/assets/otCenterRounded.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: application/json
content-length: 2639
content-encoding: gzip
content-md5: aI9a75SaiYK9oHcYk8xn0w==
last-modified: Wed, 30 Nov 2022 07:37:01 GMT
etag: 0x8DAD2A5AB6C83EE
x-ms-request-id: 448de741-101e-008e-32c9-049747000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 76274
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550bc1ad1b506-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/v2/otPcCenter.json
200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/v2/otPcCenter.json
IP
File type JSON data\012- , ASCII text, with very long lines (50353)
Hash 0cd2fb0fd730954ef2159520d96f1934
d2656260dfdac230479c8e7dc44444e9d5c8faf2
b821093423791675ca31c2d688b528b329737cca90ef62bc44f5c5b39423c8f6
GET /scripttemplates/202211.1.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: application/json
content-length: 12540
content-encoding: gzip
content-md5: DNL7D9cwlU7yFZUg2W8ZNA==
last-modified: Wed, 30 Nov 2022 07:37:02 GMT
etag: 0x8DAD2A5AC58BC53
x-ms-request-id: fbcd2477-d01e-00ba-40c9-0438ef000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 76274
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550bc1ad3b506-OSL
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 0a264590ec231d303c6cd5cb957f7398
b487cf470b145a8cc4848aaa716f59fea6916b94
1de3b58dc21fbaeecb7dbf0fc21768ac79694310b622e4f3185a1a91ed70ba38
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:37 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 18 Dec 2022 05:42:28 GMT
ETag: "b487cf470b145a8cc4848aaa716f59fea6916b94"
Last-Modified: Wed, 14 Dec 2022 05:42:29 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3554
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 779550bc6d90b51e-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 0a264590ec231d303c6cd5cb957f7398
b487cf470b145a8cc4848aaa716f59fea6916b94
1de3b58dc21fbaeecb7dbf0fc21768ac79694310b622e4f3185a1a91ed70ba38
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 14 Dec 2022 07:44:37 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 18 Dec 2022 05:42:28 GMT
ETag: "b487cf470b145a8cc4848aaa716f59fea6916b94"
Last-Modified: Wed, 14 Dec 2022 05:42:29 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3554
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 779550bc6df6b4e8-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4639c657cf22b8bb603cdbbe9bb37c46
d57cbcfa27681e015ba68dadebda7a1dea7f52ba
cecea4b1fcaf2bb5d76732ebd45558f6d7be60e80d0e13f8481061a173685bff
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png
200 OK 13 kB URL HTTP/2 cdn.cookielaw.org/logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png
IP
File type PNG image data, 1000 x 320, 8-bit/color RGBA, non-interlaced\012- data
Hash c90475872d8975dcc4b5ed7db6cc5e28
1e5a413845f5d501c174ae4940e1329a2575067f
e79eb16948cca42e0f7884fad7637fa6ec69117a07dbc04cc8b3ea7ebeaef719
GET /logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/png
content-length: 13003
content-md5: yQR1hy2JddzEte19tsxeKA==
last-modified: Fri, 02 Oct 2020 14:20:55 GMT
etag: 0x8D866DE604098C2
x-ms-request-id: 80efabc0-001e-0056-516d-c43096000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 83113
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550bc8b4cb506-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCommonStyles.css
200 OK 3.7 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCommonStyles.css
IP
Hash 4d6848539d7355e9fbb3998a66907350
68aade3513cbcf4268e26b340191bb8072c1dd26
8be374d0b87ccc6c544242ad241f27eac000f71b6751e60326dc59c0e45cbc59
GET /scripttemplates/202211.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/css
content-md5: XcxlleAcPGO2n5kTZrHH2Q==
last-modified: Wed, 30 Nov 2022 07:37:14 GMT
x-ms-request-id: 35f86005-301e-00d6-78c9-04933c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 76274
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550bc1ad7b506-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A3%3Adp%3A0%3Als%3A1607398355252%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A619860429%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 472 B URL HTTP/2 mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A3%3Adp%3A0%3Als%3A1607398355252%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A619860429%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
Hash 4639c657cf22b8bb603cdbbe9bb37c46
d57cbcfa27681e015ba68dadebda7a1dea7f52ba
cecea4b1fcaf2bb5d76732ebd45558f6d7be60e80d0e13f8481061a173685bff
GET /watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A3%3Adp%3A0%3Als%3A1607398355252%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A619860429%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A3%3Adp%3A0%3Als%3A1607398355252%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A619860429%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 14 Dec 2022 07:44:37 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=522693731671003877; Path=/; SameSite=None; Secure
i=0Mvvg/+fcAHvJnpQPdKFAjrQn2qbchX1e9OOTuxsYcpWQIwpxHYmd7077vYzt73yxfTNPKAD4FIm3Ea6y5WtQr0TbkA=; Expires=Sat, 11-Dec-2032 07:44:36 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=6443520681671003877; Expires=Thu, 14-Dec-2023 07:44:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6443520681671003877; Expires=Thu, 14-Dec-2023 07:44:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702539877.yc.1671003877#1702539877.yrts.1671003877#1702539877.yrtsi.1671003877; Expires=Thu, 14-Dec-2023 07:44:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Dec-2022 07:44:37 GMT
last-modified: Wed, 14-Dec-2022 07:44:37 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A992801475%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A992801475%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 30696c66ebf2ea7b98bedd1cb1616bb1
8fe4cbc0acac7f11f1475432444251860386ae68
20aed25ce855e8e4f57507dcb34bc60d93831f134a9eee9d9f99b38afa307dae
GET /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A992801475%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Wed, 14 Dec 2022 07:44:37 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Dec-2022 07:44:37 GMT
last-modified: Wed, 14-Dec-2022 07:44:37 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A725804636789%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A1011838841%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A725804636789%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A1011838841%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 195129f652526c4300877b2ebd068d46
0f10de9f8e09cba0b8915c306cbe91021a97f30b
b5a226e42717e15cccae0a9d1b8a36ca39a7f7c4e187835c2ec4a65659730ab4
GET /watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A725804636789%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A1011838841%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A725804636789%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A1011838841%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 14 Dec 2022 07:44:37 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=326021601671003877; Path=/; SameSite=None; Secure
i=0RPd3H4NCYvjkQ2IKkYcRBB3TAuGWNf+uUTVMe4fUqK4bmHWAX8ycL+SAAMqcAQLo1B8kytPk/ABdmWkbXWx5XoDfFU=; Expires=Sat, 11-Dec-2032 07:44:34 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=2840900751671003877; Expires=Thu, 14-Dec-2023 07:44:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2840900751671003877; Expires=Thu, 14-Dec-2023 07:44:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702539877.yc.1671003877#1702539877.yrts.1671003877#1702539877.yrtsi.1671003877; Expires=Thu, 14-Dec-2023 07:44:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Dec-2022 07:44:37 GMT
last-modified: Wed, 14-Dec-2022 07:44:37 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A3%3Adp%3A0%3Als%3A1607398355252%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A619860429%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A3%3Adp%3A0%3Als%3A1607398355252%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A619860429%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash fcb2320e8fb82ca48ebe64d4f73943b3
1eb13268f1336661e692f0b937f94befedaf94d8
a5ed9faf12df72bec0f6fb81e80957423d82f92d6653a6e33ad24e386629922a
GET /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A3%3Adp%3A0%3Als%3A1607398355252%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A619860429%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Wed, 14 Dec 2022 07:44:37 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Dec-2022 07:44:37 GMT
last-modified: Wed, 14-Dec-2022 07:44:37 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4096e533f90296f1ac4bf26f5a736084
3b942c91727bdbc7cc3d0800af680faf394621f0
f0103f214cb0060fa1030b2e7b94568ae888c6980e6229ca8517d62bb177eb14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F0103F214CB0060FA1030B2E7B94568AE888C6980E6229CA8517D62BB177EB14"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14530
Expires: Wed, 14 Dec 2022 11:46:47 GMT
Date: Wed, 14 Dec 2022 07:44:37 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 058c9e100b3576e633367ab86b5f4e7b
cdff1e70fd08c3432d51bc87a0facd8c04a62d43
f3669c345974098decc6e96cb4e6c6d1cfac6583cb0b14cd040e208cb2f4dbaf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 07:44:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=305768517.1671003875&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F>m=2wgbu058Z37MT&auid=2010633432.1671003875
302 Found 42 B URL HTTP/2 www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=305768517.1671003875&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F>m=2wgbu058Z37MT&auid=2010633432.1671003875
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G111&gcd=G111&rnd=305768517.1671003875&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F>m=2wgbu058Z37MT&auid=2010633432.1671003875 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 14 Dec 2022 07:44:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=305768517.1671003875&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F>m=2wgbu058Z37MT&auid=2010633432.1671003875
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_ddf49e28defdf876f18e471b199a04dd3dc3644b99f1857b78cf0c8aad17330b&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A381713120%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_ddf49e28defdf876f18e471b199a04dd3dc3644b99f1857b78cf0c8aad17330b&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A381713120%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_ddf49e28defdf876f18e471b199a04dd3dc3644b99f1857b78cf0c8aad17330b&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A381713120%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 14 Dec 2022 07:44:38 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Dec-2022 07:44:38 GMT
last-modified: Wed, 14-Dec-2022 07:44:38 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_4b0e43632cfb2c3ccbdb10c4f83f6eda9fbda1e9b708b4a778253d16a51e7b2e&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A725804636789%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A1067908733%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_4b0e43632cfb2c3ccbdb10c4f83f6eda9fbda1e9b708b4a778253d16a51e7b2e&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A725804636789%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A1067908733%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_4b0e43632cfb2c3ccbdb10c4f83f6eda9fbda1e9b708b4a778253d16a51e7b2e&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A725804636789%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A1067908733%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71343676/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_4b0e43632cfb2c3ccbdb10c4f83f6eda9fbda1e9b708b4a778253d16a51e7b2e&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A2%3Adp%3A0%3Als%3A725804636789%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A1067908733%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
date: Wed, 14 Dec 2022 07:44:38 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=2366910281671003878; Path=/; SameSite=None; Secure
i=4WsD53q2LHmhrOwXT6aGbrdkDNdTVRy8cLrj7caEpWuz51hJ7QOEYRSUoNpYUHSyK0eu9Yl79q/j8D+DS/4fa2w/uqU=; Expires=Sat, 11-Dec-2032 07:44:36 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8019188251671003878; Expires=Thu, 14-Dec-2023 07:44:38 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8019188251671003878; Expires=Thu, 14-Dec-2023 07:44:38 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702539878.yc.1671003878#1702539878.yrts.1671003878#1702539878.yrtsi.1671003878; Expires=Thu, 14-Dec-2023 07:44:38 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Dec-2022 07:44:38 GMT
last-modified: Wed, 14-Dec-2022 07:44:38 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
q.quora.com/_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tag=ViewContent&ts=1671003875415
200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tag=ViewContent&ts=1671003875415
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tag=ViewContent&ts=1671003875415 HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 14 Dec 2022 07:44:38 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,f2c9b2fbd64b0da8b259e12d77e6ae9e,10.0.0.120,32822,91.90.42.154,,86309380574,1,1671003878.121,0.001,,.,0,0,0.000,0.000,-,0,0,197,170,85,10,34729,,,,,,-,
Content-Length: 43
Connection: keep-alive
www.google.no/pagead/1p-user-list/1006839708/?random=1671003875118&cv=11&fst=1671001200000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&fmt=3&is_vtc=1&random=1207828802&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1006839708/?random=1671003875118&cv=11&fst=1671001200000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&fmt=3&is_vtc=1&random=1207828802&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1006839708/?random=1671003875118&cv=11&fst=1671001200000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&fmt=3&is_vtc=1&random=1207828802&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 14 Dec 2022 07:44:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1006839708/?random=1671003875122&cv=11&fst=1671003875122&bg=ffffff&guid=ON&async=1>m=2wgbu0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&value=0&bttype=purchase&auid=2010633432.1671003875&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1006839708/?random=1671003875122&cv=11&fst=1671003875122&bg=ffffff&guid=ON&async=1>m=2wgbu0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&value=0&bttype=purchase&auid=2010633432.1671003875&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1006839708/?random=1671003875122&cv=11&fst=1671003875122&bg=ffffff&guid=ON&async=1>m=2wgbu0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&tiba=World%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&value=0&bttype=purchase&auid=2010633432.1671003875&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 14 Dec 2022 07:44:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash b604b44a44140d3e443d1c1c9da02d8d
05407447253dbbd694e67456c6b25b5112bd359d
0dcc105aceee70b68e812bdb6033ab465720efe541259c35f19aa09fadc88bf8
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 73737
date: Wed, 14 Dec 2022 07:44:38 GMT
access-control-allow-origin: *
etag: "63933377-12009"
expires: Wed, 14 Dec 2022 08:44:38 GMT
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 14 Dec 2022 07:44:38 GMT
access-control-allow-origin: *
etag: "63933377-2b"
expires: Wed, 14 Dec 2022 08:44:38 GMT
accept-ranges: bytes
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1671003875268&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=851e15d1-fe4e-4e55-81ad-72bafd75fc41&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1671003875268&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=851e15d1-fe4e-4e55-81ad-72bafd75fc41&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1671003875268&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=851e15d1-fe4e-4e55-81ad-72bafd75fc41&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Wed, 14 Dec 2022 07:44:38 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
s.yimg.jp/images/listing/tool/cv/ytag.js
200 OK 9.8 kB URL HTTP/2 s.yimg.jp/images/listing/tool/cv/ytag.js
IP
File type ASCII text, with very long lines (32042), with no line terminators
Hash 756de2120f79f1aa501b0e0b490dca58
4a4b8d596749960af503ec1309b6bd821a7bdbf3
128c1c4b2018808bbe4ec25198b92ef894df5a131cf0ca647dbd3ada66ba939e
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Wed, 14 Dec 2022 07:35:32 GMT
vary: Accept-Encoding
last-modified: Tue, 30 Aug 2022 04:48:29 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
age: 546
content-length: 9790
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
b92.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1671003876.666859&pvid=ftb0s255o89lbnckaz3&tsyjad=0&_impl=ytag
403 Forbidden 14 kB URL HTTP/2 b92.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1671003876.666859&pvid=ftb0s255o89lbnckaz3&tsyjad=0&_impl=ytag
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Hash e986e7a04549f3bef16fe1bb24e61acd
b3ec35460824fae12cf6342ae42d27597ec94fb7
e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
GET /rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1671003876.666859&pvid=ftb0s255o89lbnckaz3&tsyjad=0&_impl=ytag HTTP/1.1
Host: b92.yahoo.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Wed, 14 Dec 2022 07:44:39 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
content-type: text/html
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb64315e8-d453-4b08-ba2e-ae9d16e0e991.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb64315e8-d453-4b08-ba2e-ae9d16e0e991.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6b168e3824e827bcdd7932346821e4a
beb28749fbc51a517fcfb253087e7e0ceea2a597
865d7135c7149a1e22525c43e2a0e3a9ca16b5ee6e34b8fcc08996b7e925edfd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb64315e8-d453-4b08-ba2e-ae9d16e0e991.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8294
x-amzn-requestid: 6c180dda-e035-4def-9c1f-3a4b865576ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dA16hF26oAMFalg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63969d0f-135c3332652c079b78439261;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 03:16:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0TAq5NUwo_Mw1AoPb9S0FMCKVq2Wbi1FqEeS30PxxJhQ7q6FVLXLpg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 04:57:45 GMT
age: 10017
etag: "beb28749fbc51a517fcfb253087e7e0ceea2a597"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A400%7CVollkorn%3A700&display=fallback&ver=3.7.6
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400%7CVollkorn%3A700&display=fallback&ver=3.7.6
IP
GET /css?family=Open+Sans%3A400%7CVollkorn%3A700&display=fallback&ver=3.7.6 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaizenft.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 14 Dec 2022 07:44:33 GMT
date: Wed, 14 Dec 2022 07:44:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/powered_by_logo.svg
200 OK 0 B URL HTTP/2 cdn.cookielaw.org/logos/static/powered_by_logo.svg
IP
GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/svg+xml
content-md5: nvsqHj63Mt+zbyhgtmGw4w==
last-modified: Mon, 12 Dec 2022 17:31:50 GMT
x-ms-request-id: cf01a6f4-501e-00a0-259e-0e1780000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 83193
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550bc8b4db506-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/ot_guard_logo.svg
200 OK 0 B URL HTTP/2 cdn.cookielaw.org/logos/static/ot_guard_logo.svg
IP
GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Mon, 12 Dec 2022 07:33:55 GMT
x-ms-request-id: 0016acc2-201e-0086-2937-0e8c34000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 76812
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 779550bc9b5db506-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_ddf49e28defdf876f18e471b199a04dd3dc3644b99f1857b78cf0c8aad17330b&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A381713120%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_ddf49e28defdf876f18e471b199a04dd3dc3644b99f1857b78cf0c8aad17330b&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A381713120%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP
GET /watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_ddf49e28defdf876f18e471b199a04dd3dc3644b99f1857b78cf0c8aad17330b&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A381713120%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&hittoken=1671003877_ddf49e28defdf876f18e471b199a04dd3dc3644b99f1857b78cf0c8aad17330b&browser-info=ar%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003876%3Ac%3A1%3Arn%3A381713120%3Arqn%3A2%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003876%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
date: Wed, 14 Dec 2022 07:44:38 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=1509532821671003878; Path=/; SameSite=None; Secure
i=lfhACSLmG0m/323t6dVfHJxfqaYzwWbiFT2AD5fsaD2EGPDvUi9xWC9ckCRsTQCfaefyN50uXeBVTkp45CUO4mf184s=; Expires=Sat, 11-Dec-2032 07:44:33 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1377095591671003878; Expires=Thu, 14-Dec-2023 07:44:38 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1377095591671003878; Expires=Thu, 14-Dec-2023 07:44:38 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702539878.yc.1671003878#1702539878.yrts.1671003878#1702539878.yrtsi.1671003878; Expires=Thu, 14-Dec-2023 07:44:38 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Dec-2022 07:44:38 GMT
last-modified: Wed, 14-Dec-2022 07:44:38 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
thirawogla.com/b/3AVh0.Pl3NpuvDbUmhVRJLZxDk0d0WNDTacW5GN/DVM/yuLFTUQY1vN/znkx0DM-zeMl
200 OK 0 B URL HTTP/2 thirawogla.com/b/3AVh0.Pl3NpuvDbUmhVRJLZxDk0d0WNDTacW5GN/DVM/yuLFTUQY1vN/znkx0DM-zeMl
IP
GET /b/3AVh0.Pl3NpuvDbUmhVRJLZxDk0d0WNDTacW5GN/DVM/yuLFTUQY1vN/znkx0DM-zeMl HTTP/1.1
Host: thirawogla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://long.interestmoments.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:35 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
x-frame-options: DENY
referrer-policy: no-referrer
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Wed, 14 Dec 2022 07:44:35 GMT
set-cookie: kadCCap=222582:1:1669973958;222513:1:1670219541;132751:1:1669884292;219484:1:1667715065;219652:1:1669330335;79610:1:1669272875;194136:1:1669413157;199455:1:1668245056;218665:1:1670219511;212269:1:1667199062;215297:1:1670576419;220790:1:1668460505;220335:1:1670435916;221398:1:1670525489;218693:1:1669515516;223255:1:1670393482;221352:1:1670163762;219047:1:1667194435;222775:1:1670485741; max-age=1702539875; path=/
kadACap=401659:1:1670959694;419303:1:1670918283;458045:1:1670528140;445788:1:1669918420;441369:1:1670904683;419297:1:1670740668;446013:1:1668228435;419321:1:1670561943;445506:1:1669286676;451724:1:1669565807;410252:1:1670940513;419299:1:1670986713;449523:1:1670210030;444748:1:1669841678;451139:1:1670889134;346327:1:1670911939;190964:1:1669272875;424441:1:1671003875;419293:1:1670916947;346329:1:1670226206;407100:1:1668246232;419291:1:1670871864;446531:1:1669270846;272913:1:1670219562;442019:1:1670904913;446714:1:1670893090;419323:1:1670913571;419301:1:1670722501;383700:1:1670835873;453831:1:1670649751;458041:1:1670526590;419295:1:1670818287;445499:1:1670164226;450649:1:1670852908;445735:1:1669286676; max-age=1702539875; path=/
kadASCap=401659:1:1670959694;419299:1:1670986713;419303:1:1670918283;424441:1:1671003875;410252:1:1670940513; path=/
kadRPixJ=bnVsbA==; max-age=1702539875; path=/
kadUnP3=CAYQ4Y7inAYaDQivp/4BEAIYw8jknAYaDQiQrZcCEAEYzqTjnAYaDQjowJcCEAIY2ffknAYiCggBEAIYw8jknAYiCggDEAIY2ffknAYqDAjD6QwQAhjDyOScBioMCNuXKBABGM6k45wGKgwI85ooEAIY2ffknAY=; max-age=1702539875; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/scripts/script.js
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/scripts/script.js
IP
ASN #199524 G-Core Labs S.A.
GET /glows-58322/src/scripts/script.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: W/"eab843ce65c0521f3d120a4b09548b66"
x-amz-request-id: tx00000000000000186fc2c-00636277bd-1c8fb11d-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
a.quora.com/qevents.js
200 OK 0 B IP
GET /qevents.js HTTP/1.1
Host: a.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/plain
x-amz-id-2: jHbk68zF0oCrN99I6TpiQ8LNg0dDTKL0BkbZQKZkL1zB85BMiiIcpjSQWNebJHGDeWUqTCN88Lg=
x-amz-request-id: 4K18RXATE8CH2H8E
last-modified: Fri, 18 Mar 2022 00:16:52 GMT
etag: W/"47078e63380c6b0cbbfb6d8508b25ee7"
x-amz-meta-s3cmd-attrs: atime:1647562609/ctime:1647562609/gid:150037/gname:ezhang/md5:47078e63380c6b0cbbfb6d8508b25ee7/mode:33204/mtime:1647562609/uid:150037/uname:ezhang
cache-control: public, max-age=14400
x-amz-version-id: vyBstMTGyA6m5sV66zq8xsypUg.tAOk.
cf-cache-status: HIT
age: 11416907
expires: Wed, 14 Dec 2022 11:44:37 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 779550badd69b505-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A992801475%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A992801475%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A992801475%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-58322%2Feu-en%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63997ee4660c68000161cfa1%26xid_param1%3DE0HHDGBJ6R%26xid_param_2%3D%26sid%3DSIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g%26enctid%3Dcp1dfrgr8w06%26lpsn%3DWOWS%2BBismarck%2Bwith%2Bbonuses%2BCode%2BBRAVO%26foris%3D1%26teclient%3D1671003876743102109%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3D713tw6jf%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A1235%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1650536096810%3Ahid%3A377361423%3Az%3A0%3Ai%3A20221214074435%3Aet%3A1671003875%3Ac%3A1%3Arn%3A992801475%3Arqn%3A1%3Au%3A1671003875477619446%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A70%2C33%2C9%2C1%2C773%2C0%2C%2C293%2C51%2C1366%2C1366%2C2%2C1197%3Aco%3A0%3Ans%3A1671003873662%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1671003875%3At%3AWorld%20of%20Warships%20%E2%80%94%20massive%20naval%20clashes.%20Take%20command%20of%20legendary%20vessels%20from%20the%20early%2020th%20century%20and%20fight%20for%20domination%20on%20the%20high%20seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 14 Dec 2022 07:44:37 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=1548607391671003877; Path=/; SameSite=None; Secure
i=pfoQ/TZ/Xs3yAJedhHqEeImMblamHv9uoXrufYY8wnVzX6yUxPByzXvVbuJTEIDFdiQ7gCu4qo0KaAHsgsqWzZM6REQ=; Expires=Sat, 11-Dec-2032 07:44:34 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=4119741431671003877; Expires=Thu, 14-Dec-2023 07:44:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4119741431671003877; Expires=Thu, 14-Dec-2023 07:44:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702539877.yc.1671003877#1702539877.yrts.1671003877#1702539877.yrtsi.1671003877; Expires=Thu, 14-Dec-2023 07:44:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 14-Dec-2022 07:44:37 GMT
last-modified: Wed, 14-Dec-2022 07:44:37 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
IP
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kaizenft.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 14 Dec 2022 07:44:33 GMT
date: Wed, 14 Dec 2022 07:44:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/libs/aos.js
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/libs/aos.js
IP
ASN #199524 G-Core Labs S.A.
GET /glows-58322/src/libs/aos.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: W/"7ee92212a3ecbc19d9d71fa3818508af"
x-amz-request-id: tx00000000000000186fc2b-00636277bd-1c8fb11d-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/images/logo-hor.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/images/logo-hor.svg
IP
ASN #199524 G-Core Labs S.A.
GET /glows-58322/src/images/logo-hor.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/svg+xml
last-modified: Wed, 02 Nov 2022 09:51:39 GMT
etag: W/"f37677b980c03bd3f2537e0ab36aa703"
x-amz-request-id: tx0000000000000012b50a4-00636277bd-1bbb63a8-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc14
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/libs/jquery.min.js
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/libs/jquery.min.js
IP
ASN #199524 G-Core Labs S.A.
GET /glows-58322/src/libs/jquery.min.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: W/"4f252523d4af0b478c810c2547a63e19"
x-amz-request-id: tx0000000000000012b5097-00636277bd-1bbb63a8-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc12
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58322/src/images/logo-main.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-58322/src/images/logo-main.svg
IP
ASN #199524 G-Core Labs S.A.
GET /glows-58322/src/images/logo-main.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:37 GMT
content-type: image/svg+xml
last-modified: Wed, 02 Nov 2022 09:51:39 GMT
etag: W/"3205035293624ac8f4502ce6c888db9e"
x-amz-request-id: tx000000000000001d6ec7c-00636277bd-1c888e0e-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-12-12T17:08:17+00:00
x-id: sto5-up-gc11
content-encoding: gzip
X-Firefox-Spdy: h2
promo.worldofwarships.eu/glows-58322/eu-en/?t=1&pub_id=1287&xid=63997ee4660c68000161cfa1&xid_param1=E0HHDGBJ6R&xid_param_2=&sid=SIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g&enctid=cp1dfrgr8w06&lpsn=WOWS+Bismarck+with+bonuses+Code+BRAVO&foris=1&teclient=1671003876743102109&utm_source=wlap&utm_medium=affiliate&utm_campaign=713tw6jf&utm_content=1287
200 OK 0 B URL HTTP/2 promo.worldofwarships.eu/glows-58322/eu-en/?t=1&pub_id=1287&xid=63997ee4660c68000161cfa1&xid_param1=E0HHDGBJ6R&xid_param_2=&sid=SIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g&enctid=cp1dfrgr8w06&lpsn=WOWS+Bismarck+with+bonuses+Code+BRAVO&foris=1&teclient=1671003876743102109&utm_source=wlap&utm_medium=affiliate&utm_campaign=713tw6jf&utm_content=1287
IP
ASN #199524 G-Core Labs S.A.
GET /glows-58322/eu-en/?t=1&pub_id=1287&xid=63997ee4660c68000161cfa1&xid_param1=E0HHDGBJ6R&xid_param_2=&sid=SIDZv_9r7HtmG5lXCWeYJsrnGvBmuTLlMCGIg9QRPzj7gydfDnGt-zhQ3GXL_Vfxb9d7dVn4wlMq40IV1iymEr-cnUNTLb4uuKctCa-VU4cpemQJquHA17Pro0UJJSisO1F7sK0z5QdVfki4g&enctid=cp1dfrgr8w06&lpsn=WOWS+Bismarck+with+bonuses+Code+BRAVO&foris=1&teclient=1671003876743102109&utm_source=wlap&utm_medium=affiliate&utm_campaign=713tw6jf&utm_content=1287 HTTP/1.1
Host: promo.worldofwarships.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 07:44:36 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 09:51:38 GMT
etag: W/"ddb19ebdf1208fc762e18ebde4fec7ca"
x-amz-request-id: tx00000000000000186fc22-00636277bd-1c8fb11d-ed1
cache: HIT
x-cached-since: 2022-12-12T22:58:34+00:00
x-id: sto5-up-gc11
content-encoding: gzip
X-Firefox-Spdy: h2
108.167.172.179
89.22.228.250
35.204.100.195
93.158.134.119
104.16.149.64
183.79.249.124
159.69.234.10
92.223.84.84
23.36.77.32
93.184.220.29