Overview

URLcamersoftware.com/
IP 82.165.73.164 (Germany)
ASN#8560 IONOS SE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-02 01:12:14 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (39)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
camersoftware.com (48) 0 2019-04-02 09:13:08 UTC 2022-12-02 00:11:59 UTC 82.165.73.164 Unknown ranking
r3.o.lencr.org (16) 344 No data No data 23.36.77.32
cdn.cookielaw.org (11) 502 2014-05-20 23:23:17 UTC 2022-12-01 18:34:45 UTC 104.16.148.64
www.google.no (2) 25607 2016-04-05 19:50:59 UTC 2022-12-01 20:43:35 UTC 142.250.74.163
ocsp.pki.goog (19) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.131
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-12-01 18:48:44 UTC 142.250.74.168
s.yimg.jp (1) 11015 2012-10-25 03:38:43 UTC 2020-03-16 19:41:51 UTC 182.22.31.124
s.adroll.com (6) 2553 2012-06-27 18:27:26 UTC 2020-04-25 20:03:51 UTC 143.204.55.31
cdn.jsdelivr.net (1) 439 2012-09-30 00:15:09 UTC 2020-08-10 12:12:39 UTC 151.101.129.229
b92.yahoo.co.jp (1) 15866 2012-10-07 00:06:28 UTC 2020-02-16 18:22:01 UTC 182.22.31.124
promo.worldofwarships.eu (2) 327898 2020-11-03 06:59:01 UTC 2022-02-07 18:17:34 UTC 92.223.97.97
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-12-01 17:14:08 UTC 34.102.187.140
files.findtrustclicks.com (1) 0 2022-11-25 16:54:45 UTC 2022-12-01 18:13:25 UTC 89.22.228.250 Unknown ranking
trck.wargaming.net (1) 0 2022-11-18 14:07:19 UTC 2022-12-01 20:44:22 UTC 92.223.23.231 Domain (wargaming.net) ranked at: 12915
q.quora.com (1) 3239 2018-08-31 02:53:50 UTC 2022-12-01 18:16:09 UTC 52.72.186.224
ocsp.digicert.com (8) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-01 17:12:49 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 34.215.56.181
thirawogla.com (1) 0 2022-05-25 22:03:02 UTC 2022-12-01 17:28:10 UTC 88.85.94.246 Unknown ranking
adservice.google.no (1) 96969 2018-06-19 23:38:38 UTC 2020-05-14 07:59:11 UTC 142.250.74.34
mc.yandex.ru (8) 2672 2012-05-21 09:38:30 UTC 2022-12-01 17:45:12 UTC 87.250.251.119
fonts.googleapis.com (3) 8877 2013-06-10 20:14:26 UTC 2022-12-01 17:28:41 UTC 142.250.74.74
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
ocsp.godaddy.com (1) 698 2012-05-20 19:28:57 UTC 2020-05-02 20:58:10 UTC 192.124.249.36
promo-cdn.worldofwarships.com (14) 355412 No data No data 92.223.97.97
ocsp.globalsign.com (3) 2075 2012-07-20 17:46:16 UTC 2020-05-02 20:58:10 UTC 104.18.20.226
10697551.fls.doubleclick.net (1) 157761 No data No data 142.250.74.70
translate.google.com (1) 1156 2012-05-30 01:30:32 UTC 2020-04-26 20:04:42 UTC 142.250.74.110
js.interestmoments.com (1) 0 2022-11-25 06:47:30 UTC 2022-12-01 16:31:57 UTC 193.169.194.63 Unknown ranking
long.interestmoments.com (2) 0 2022-11-25 08:09:45 UTC 2022-12-01 16:44:07 UTC 193.169.194.63 Unknown ranking
googleads.g.doubleclick.net (2) 42 2021-02-20 15:43:32 UTC 2022-12-01 20:58:36 UTC 142.250.74.130
www.redditstatic.com (1) 1440 2012-06-30 12:33:28 UTC 2020-04-27 13:44:50 UTC 151.101.193.140
adservice.google.com (1) 76 2021-02-20 16:10:48 UTC 2022-12-01 22:09:28 UTC 142.250.74.130
www.google.com (1) 7 2016-03-22 03:56:07 UTC 2022-12-01 18:17:59 UTC 142.250.74.132
d.adroll.com (15) 1530 2014-10-06 14:16:35 UTC 2020-01-24 16:56:58 UTC 54.229.94.163
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
fonts.gstatic.com (5) 0 2014-09-09 00:40:21 UTC 2022-12-01 22:08:56 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
track.wg-aff.com (1) 124015 2022-06-30 08:56:18 UTC 2022-06-30 12:02:25 UTC 35.204.130.99
tenor.wargaming.net (2) 102366 2018-10-25 23:02:12 UTC 2022-12-01 16:18:22 UTC 92.223.21.16

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-02 2 js.interestmoments.com/scripts/dest.js Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 82.165.73.164
Date UQ / IDS / BL URL IP
2023-01-31 15:14:29 +0000 0 - 0 - 2 store.camersoftware.com/ 82.165.73.164
2023-01-31 08:15:00 +0000 0 - 0 - 12 staging.camersoftware.com/ 82.165.73.164
2023-01-29 00:18:05 +0000 0 - 0 - 4 buyqualityfirst.com/ 82.165.73.164
2023-01-28 02:13:30 +0000 0 - 0 - 3 svr01.camersoftware.com/ 82.165.73.164
2023-01-27 16:13:31 +0000 0 - 0 - 1 svr01.camersoftware.com/ 82.165.73.164


Last 5 reports on ASN: IONOS SE
Date UQ / IDS / BL URL IP
2023-02-03 12:09:29 +0000 0 - 0 - 2 girokonto-dkb.de-banking.hpls.de/de/a1b2c3/21 (...) 217.160.0.126
2023-02-03 11:26:53 +0000 18 - 0 - 2 kaangamarket.com/wp-content/plugins/DHL/card.php 217.160.0.108
2023-02-03 11:16:15 +0000 0 - 0 - 19 beta.medi-buy.de/mailster/1722/1463d631a7602e (...) 217.160.0.82
2023-02-03 11:16:13 +0000 0 - 0 - 19 beta.medi-buy.de/mailster/1547/1463d631a7602e (...) 217.160.0.82
2023-02-03 11:16:10 +0000 0 - 0 - 19 beta.medi-buy.de/mailster/1647/1463d631a7602e (...) 217.160.0.82


Last 5 reports on domain: camersoftware.com
Date UQ / IDS / BL URL IP
2023-01-31 15:14:29 +0000 0 - 0 - 2 store.camersoftware.com/ 82.165.73.164
2023-01-31 08:15:00 +0000 0 - 0 - 12 staging.camersoftware.com/ 82.165.73.164
2023-01-28 02:13:30 +0000 0 - 0 - 3 svr01.camersoftware.com/ 82.165.73.164
2023-01-27 16:13:31 +0000 0 - 0 - 1 svr01.camersoftware.com/ 82.165.73.164
2023-01-27 13:15:15 +0000 0 - 1 - 0 edir.camersoftware.com/ 82.165.73.164


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-28 17:29:18 +0000 0 - 0 - 9 www.homenomnom.fr/x882tejt/what-is-bpsk-modul (...) 213.186.33.19
2023-01-22 01:16:36 +0000 4 - 0 - 6 yourpc411.com/ork/i/22aap39wp.zip 192.124.249.164
2023-01-20 05:21:50 +0000 0 - 0 - 32 florishsoiltv.com/apm/gk/vZ/6wLbMO5R.zip 148.251.13.147
2023-01-18 11:10:36 +0000 0 - 0 - 3 ulekmayang.com/ 172.67.220.69
2023-01-17 04:33:28 +0000 0 - 0 - 34 fenix-corp.com/ 92.53.114.27

JavaScript

Executed Scripts (76)

Executed Evals (6)
#1 JavaScript::Eval (size: 3306) - SHA256: a4da04e17f828f3d72fb11601de6c35a82a3f9a855b5344731d658c403c6afa4
(function() {
    var a = "secureurl.fwdcdn.com poczta.wp.pl poczta.onet.pl 10minutemail.com poczta.interia.pl deref-gmx.net poczta.o2.pl deref-web-02.de 10minutemail.info wot.gcdn.co 10minutemail.net nowapoczta.wp.pl 10minutemail.org 24mail.chacuo.net account.mail.ru mail-pda.rambler.ru m.poczta.onet.pl amail.centrum.cz api-mail.walla.co.il appmail.mail.10086.cn bmail.uol.com.br btmail.bt.com citromail.hu correio.portugalmail.pt deref-mail.com dropmail.me e.mail.ru email.1and1.fr email.bws-school.org.uk nm20.abv.bg nm50.abv.bg email.excite.co.jp orange.fr email.mweb.co.za mail3.nate.com email.mynet.com email.seznam.cz nm80.abv.bg email. nm40.abv.bg email.ukrgas.com.ua eowebmail.eonet.jp euwebmail.mail.126.com nm60.abv.bg nm.abv.bg exchangemail.aquinas.wa.edu.au freemail.net.hr poczta.gazeta.pl freemail.services.in.gr crazymailing.com gmail.hu go.mail.ru guerrillamail.com html5.mail.10086.cn nm70.abv.bg hushmail.com imonmail.com indamail.hu accounts.youtube.com nm30.abv.bg fakemailgenerator.com ipad.mail.tiscali.it m.gmail.hu m.mail. mail2.daum.net m.mail.sohu.com m.my.mail.cz m.abv.bg m.yopmail.com m0.mail.sina.cn m0.mail.sina.com.cn m1.mail.sina.cn m1.mail.sina.com.cn login.live.com oauth.vk.com outlook.live.com emailfake.com nowapoczta.interklasa.pl poczta.pl poczta.int.pl poczta.nazwa.pl webmaila.juno.com pc.tim.it tempr.email 10minut.xyz mailnesia.com account.microsoft.com en.generator.email mail2.oiinternet.com.br mailto.space webmaila.netzero.net webmailb.juno.com emailtemporal.org webmailb.netzero.net webmailrc.nordnet.com account.live.com accounts.login.idm.telekom.com b0x7.want.host:2096 connect.emailsrvr.com email01.godaddy.com email14.godaddy.com email17.godaddy.com emailondeck.com emailsrvr.com generator.email hometel.mymailsrvr.com webmail.virgilio.it mail34b.webmail.libero.it manilamail.iopex.com mbox.webmail.teletu.it m-email.t-online.de migmail.pl mps.kpnmail.nl mtsmail.ca my.mail. my10minutemail.com myemail.cox.net myemail.delta.com nymail.spray.se otvet.mail.ru pdamail.meta.ua pmail.centrum.sk post.mail.kz posti.mail.ee primamail.net rediffmail.com regamail.ru sg2003.webmail.hinet.net sibmail.com spoofmail.de sso.kabelmail.de temp-mail.org t-freemail.net.hr t-mail. tnrc.mail.edu.tw mail01.tcsbank.ru mail1.ammsusa.com mail10.online.ua mail14.cp247.net mail2.online.ua mail2.spectrum.net mail2web.com mail3.online.ua mail4.online.ua mail5.online.ua mail5009.smarterasp.net mail9.online.ua mailbj.xdf.cn mailbox.gr maildrop.cc mailserver.polifarbe.hu mailserver.yoncu.com touch.mail.ru t-pmail.centrum.sk trashcanmail.com trash-mail.com poczta.cal.pl poczta.farutex.pl poczta.su.krakow.pl poczta.zenbox.pl ud-mail.de url.qmail.com uswebmail.mail.126.com vipmail.cnnb.com.cn web.mail.comcast.net webtop.webmail.optimum.net wegwerfemail.de webmail-seguro.com.br webmail-srv2.servage.net wm.cloud-mail.jp webmail04.register.com webmail1. webmail2. webmail30.189.cn webmail4-hki2.hosting.fi webmailcpr04n.ono.com email.it wegwerfemailadresse.com wmail.mediacat.ne.jp wmail.wedos.net yopmail.com zmail.zoznam.sk accounts.google. webmail. mail.".split(" "),
        b = /https?:\/\/([^/:]+)/.exec(google_tag_manager["GTM-58Z37MT"].macro(2));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + ".*")).test(b[1])) return null;
    return google_tag_manager["GTM-58Z37MT"].macro(3)
})();
#2 JavaScript::Eval (size: 80) - SHA256: 3b2caab2860bf867e6eeb62bd3bb5c1508bc8e756fb4565c686c0f9a69df6087
(function() {
    return google_tag_manager["GTM-58Z37MT"].macro(4).split("?")[0]
})();
#3 JavaScript::Eval (size: 3308) - SHA256: 7c95a461231f2ca6823c21fb5c6380724a0b828e7212823083698811eeabe89b
(function() {
    var a = "secureurl.fwdcdn.com poczta.wp.pl poczta.onet.pl 10minutemail.com poczta.interia.pl deref-gmx.net poczta.o2.pl deref-web-02.de 10minutemail.info wot.gcdn.co 10minutemail.net nowapoczta.wp.pl 10minutemail.org 24mail.chacuo.net account.mail.ru mail-pda.rambler.ru m.poczta.onet.pl amail.centrum.cz api-mail.walla.co.il appmail.mail.10086.cn bmail.uol.com.br btmail.bt.com citromail.hu correio.portugalmail.pt deref-mail.com dropmail.me e.mail.ru email.1and1.fr email.bws-school.org.uk nm20.abv.bg nm50.abv.bg email.excite.co.jp orange.fr email.mweb.co.za mail3.nate.com email.mynet.com email.seznam.cz nm80.abv.bg email. nm40.abv.bg email.ukrgas.com.ua eowebmail.eonet.jp euwebmail.mail.126.com nm60.abv.bg nm.abv.bg exchangemail.aquinas.wa.edu.au freemail.net.hr poczta.gazeta.pl freemail.services.in.gr crazymailing.com gmail.hu go.mail.ru guerrillamail.com html5.mail.10086.cn nm70.abv.bg hushmail.com imonmail.com indamail.hu accounts.youtube.com nm30.abv.bg fakemailgenerator.com ipad.mail.tiscali.it m.gmail.hu m.mail. mail2.daum.net m.mail.sohu.com m.my.mail.cz m.abv.bg m.yopmail.com m0.mail.sina.cn m0.mail.sina.com.cn m1.mail.sina.cn m1.mail.sina.com.cn login.live.com oauth.vk.com outlook.live.com emailfake.com nowapoczta.interklasa.pl poczta.pl poczta.int.pl poczta.nazwa.pl webmaila.juno.com pc.tim.it tempr.email 10minut.xyz mailnesia.com account.microsoft.com en.generator.email mail2.oiinternet.com.br mailto.space webmaila.netzero.net webmailb.juno.com emailtemporal.org webmailb.netzero.net webmailrc.nordnet.com account.live.com accounts.login.idm.telekom.com b0x7.want.host:2096 connect.emailsrvr.com email01.godaddy.com email14.godaddy.com email17.godaddy.com emailondeck.com emailsrvr.com generator.email hometel.mymailsrvr.com webmail.virgilio.it mail34b.webmail.libero.it manilamail.iopex.com mbox.webmail.teletu.it m-email.t-online.de migmail.pl mps.kpnmail.nl mtsmail.ca my.mail. my10minutemail.com myemail.cox.net myemail.delta.com nymail.spray.se otvet.mail.ru pdamail.meta.ua pmail.centrum.sk post.mail.kz posti.mail.ee primamail.net rediffmail.com regamail.ru sg2003.webmail.hinet.net sibmail.com spoofmail.de sso.kabelmail.de temp-mail.org t-freemail.net.hr t-mail. tnrc.mail.edu.tw mail01.tcsbank.ru mail1.ammsusa.com mail10.online.ua mail14.cp247.net mail2.online.ua mail2.spectrum.net mail2web.com mail3.online.ua mail4.online.ua mail5.online.ua mail5009.smarterasp.net mail9.online.ua mailbj.xdf.cn mailbox.gr maildrop.cc mailserver.polifarbe.hu mailserver.yoncu.com touch.mail.ru t-pmail.centrum.sk trashcanmail.com trash-mail.com poczta.cal.pl poczta.farutex.pl poczta.su.krakow.pl poczta.zenbox.pl ud-mail.de url.qmail.com uswebmail.mail.126.com vipmail.cnnb.com.cn web.mail.comcast.net webtop.webmail.optimum.net wegwerfemail.de webmail-seguro.com.br webmail-srv2.servage.net wm.cloud-mail.jp webmail04.register.com webmail1. webmail2. webmail30.189.cn webmail4-hki2.hosting.fi webmailcpr04n.ono.com email.it wegwerfemailadresse.com wmail.mediacat.ne.jp wmail.wedos.net yopmail.com zmail.zoznam.sk accounts.google. webmail. mail.".split(" "),
        b = /https?:\/\/([^/:]+)/.exec(google_tag_manager["GTM-58Z37MT"].macro(11));
    if (b)
        for (var c = a.length; c--;)
            if ((new RegExp(a[c] + ".*")).test(b[1])) return null;
    return google_tag_manager["GTM-58Z37MT"].macro(12)
})();
#4 JavaScript::Eval (size: 81) - SHA256: bed6d5a9e64eff6b2353c54d94e8d540746c00e7bc4bde27d11323060df11507
(function() {
    return google_tag_manager["GTM-58Z37MT"].macro(13).split("?")[0]
})();
#5 JavaScript::Eval (size: 81) - SHA256: 99c9a85f7c698e32a27a6fa573277176af703973d8cade7b20541081abe1c17e
(function() {
    return google_tag_manager["GTM-58Z37MT"].macro(16).split("?")[0]
})();
#6 JavaScript::Eval (size: 83) - SHA256: db67f3a811c17993a0388ea2c4679e41f29d21c3a74de4b873ff862df1dfdb07
(function() {
    var b = 2;
    return function(a) {
        a.set("dimension" + b, a.get("clientId"))
    }
})();

Executed Writes (0)


HTTP Transactions (195)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         82.165.73.164
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 02 Dec 2022 01:12:02 GMT
Content-Length: 162
Connection: keep-alive
Location: https://camersoftware.com/


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2999
Cache-Control: max-age=122949
Date: Fri, 02 Dec 2022 01:12:02 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:21:11 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6403
Expires: Fri, 02 Dec 2022 02:58:45 GMT
Date: Fri, 02 Dec 2022 01:12:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2501
Expires: Fri, 02 Dec 2022 01:53:43 GMT
Date: Fri, 02 Dec 2022 01:12:02 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 00:19:50 GMT
cache-control: public,max-age=3600
age: 3132
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: PU/q0j41GzbqH02guvkhs2pn+2yflcXAVRuBl26TRhvDlxH8GvzauewNxYSg1f8QOOlide3fh+Q=
x-amz-request-id: WC8RD08FXQQYBZNZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 00:45:52 GMT
age: 1570
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:02 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:02 GMT
content-length: 17365
vary: Accept-Encoding,Cookie
cache-control: max-age=3, must-revalidate
content-encoding: gzip
x-powered-by: PHP/7.4.16, PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Size:   17365
Md5:    9f4a33e063918b18cc9957ff4a1f1346
Sha1:   61176845c7e01df9efba62fa97603184dd8325ff
Sha256: 31800ea2a88a514736197ed510ed68cde73cb835b6c32cf76d12400cc7d885eb
                                        
                                            GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=5.9.5 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:02 GMT
content-length: 299
x-accel-version: 0.01
last-modified: Wed, 23 Nov 2022 01:09:23 GMT
etag: "2b5-5ee18f06a4b52-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   299
Md5:    1e34ceaa9a4c96c3499483f5fe818671
Sha1:   55a92f1196d0155e2bf0632f0905b5b8000f5ad7
Sha256: 9738e8e5222b5802082be7a77e56ad9fdee06718da410f356504184fd08b56bf
                                        
                                            GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.9 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:02 GMT
content-length: 323
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 20:31:05 GMT
etag: "308-5d850c30dd440-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   323
Md5:    b24c24b7da3ffeed6ae8ade102a4d317
Sha1:   c4445b3977ce704b927508108e100213eea67a3c
Sha256: 5421ad49b70f379553eaceec744d753e74d4b065966c08aa7c7dd949553ca9a8
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/rttheme19/style.css?ver=5.9.5 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
content-length: 303
x-accel-version: 0.01
last-modified: Fri, 18 Feb 2022 18:32:43 GMT
etag: "1c7-5d84f1bbde8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF, CR, LF line terminators
Size:   303
Md5:    21865ca952f5b75cc4c0727d55450717
Sha1:   92536a0099989bebf4c7938708f5c38dc337b20f
Sha256: 7d66dfc5bf0f4ac0534c888528680c5b06c5b00ea08c37b7361b87183ef85033
                                        
                                            GET /wp-content/uploads/2016/09/Camer-Software-logo-Black-Background.png HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
content-length: 11392
last-modified: Fri, 18 Feb 2022 18:33:07 GMT
etag: "620fe663-2c80"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 600 x 492, 8-bit/color RGBA, non-interlaced\012- data
Size:   11392
Md5:    04b27f548ecddbc174345161f6aa10d9
Sha1:   8038b4be0eeb46294b616526e4af53f70c3f77cf
Sha256: c4075a0787f0a388ad49854db5fb813ba1b98d0a17919fa449f5882169f4b66a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2018/04/programmer-1653351_1280.png HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
content-length: 420176
last-modified: Fri, 18 Feb 2022 18:33:10 GMT
etag: "620fe666-66950"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1280 x 889, 8-bit/color RGBA, non-interlaced\012- data
Size:   420176
Md5:    d7c0f69cc054384ef42efb1244f89607
Sha1:   39a4bc95b85e7c04f095c1ce126742e438bc6fa0
Sha256: 442551e58a1e13335282519f7ddccdb7902c88f6ffd40e86e2b4dee875c9cb21
                                        
                                            GET /wp-content/plugins/gtranslate/flags/16/en.png HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
content-length: 707
x-accel-version: 0.01
last-modified: Wed, 23 Nov 2022 01:09:23 GMT
etag: "2c3-5ee18f06912d2"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   707
Md5:    e4896565595fc22e344fd619c0ed15bb
Sha1:   43d4481a4cc3e60b406b2467b5f7e576fcbae260
Sha256: c3a4cb8f32ef0cd89e6429d40d1faebd359e02e34d69764052c8402a391e9a00
                                        
                                            GET /wp-content/uploads/2018/02/industry-2496192_1920-1310x873.jpg HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
content-length: 113082
last-modified: Fri, 18 Feb 2022 18:33:08 GMT
etag: "620fe664-1b9ba"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1310x873, components 3\012- data
Size:   113082
Md5:    25bbc2b99a6c56edbc78af87724a69e1
Sha1:   4fdae695a768d58622a4ad11d34df0d3704cef55
Sha256: bf65528b5a6c220d9cbfd701f13d092f8884f40e3d20c382d5dc5dbabddc2569
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3014
Cache-Control: max-age=117900
Date: Fri, 02 Dec 2022 01:12:03 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:57:03 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/rttheme19/js/owl.carousel.min.js?ver=2.9.2 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
last-modified: Fri, 18 Feb 2022 18:32:41 GMT
etag: W/"620fe649-a1cb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32045)
Size:   89264
Md5:    a2b9476d27787bbdff1c9f23c59703eb
Sha1:   1be271bc5662e7d08ffaf964ff3746cd9de5c50c
Sha256: 64ae57f232852955950d506115e61b83befeb2c855226d4675ac28929a029177
                                        
                                            GET /wp-content/plugins/wp-whatsapp-chat/assets/frontend/js/frontend.js?ver=021fa4de1c6ea4db860e85f702082b24 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
last-modified: Fri, 18 Feb 2022 20:34:00 GMT
etag: W/"621002b8-1d8b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7563), with no line terminators
Size:   2818
Md5:    e2c13f2c51b7a22eda3e7a14e8ae8097
Sha1:   7046101ab8ee480ed6c1cb268c7af99c76d5a290
Sha256: 830b9602ba9783d1f2ed731fc59b07852579176ac92d1eba1b9310bc4cd2090f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/rttheme19/js/isotope.pkgd.min.js?ver=2.9.2 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
last-modified: Fri, 18 Feb 2022 18:32:41 GMT
etag: W/"620fe649-bc15"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32015)
Size:   29498
Md5:    a7b2eb6adf271a35b157d6abbb00b78c
Sha1:   9b2ced337a8cebe0bc1815c3b7159feeb57f4ec5
Sha256: 9bf178a5e035b68e7f64be9ddb6b44c50c7e7611a446708ec115160349945f07
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/rttheme19/js/customselect.min.js?ver=2.9.2 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
last-modified: Fri, 18 Feb 2022 18:32:41 GMT
etag: W/"620fe649-9f0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2270)
Size:   913389
Md5:    57915880112301855e48a8b08ed78fa2
Sha1:   6d0ea9512ab504ce1baa2a670b9dc8c388f47c9d
Sha256: 6c14ecb97dc50834044124cbf47c66420a96abb7fe6c615dc9734ee60ea6957b
                                        
                                            GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
content-length: 208
x-accel-version: 0.01
last-modified: Wed, 23 Nov 2022 01:09:23 GMT
etag: "d0-5ee18f068f392"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 5 x 3, 8-bit/color RGBA, non-interlaced\012- data
Size:   208
Md5:    20a650477130c7c2c62c5647131f545b
Sha1:   4615101fcc5df1fab3e7dd516d058e1052a8fcb2
Sha256: 068f35dd132804c7effcbca65f9398d34351339ed2fa7b20ef5e9a6221e76516
                                        
                                            GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
content-length: 207
x-accel-version: 0.01
last-modified: Wed, 23 Nov 2022 01:09:23 GMT
etag: "cf-5ee18f068e3f2"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 10 x 19, 8-bit/color RGBA, non-interlaced\012- data
Size:   207
Md5:    d6ae4f341752017ab0e603e3bb9260b7
Sha1:   c84c11d3bc69c7e14b2f75e7dea6e0ac93dee1e2
Sha256: 8c2ad9254589a597b65dae284a6da49dbfe1e3c8e628b03b80883d980fb6435e
                                        
                                            GET /s/cabin/v26/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkV2EH7alxw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://camersoftware.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15476
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 20:54:32 GMT
expires: Thu, 30 Nov 2023 20:54:32 GMT
cache-control: public, max-age=31536000
age: 101851
last-modified: Fri, 24 Jun 2022 18:41:33 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15476, version 1.0\012- data
Size:   15476
Md5:    083f5cafe748b8ac91823b36986d7fda
Sha1:   0d763699e5bce633aa6adc03370b8630b87c1b31
Sha256: a3d8afcbc68d3ae65312e50ce252f5eb4cb817d3fe39452bd37a76f896ab5921
                                        
                                            GET /wp-content/themes/rttheme19/js/lightgallery-all.min.js?ver=2.9.2 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
last-modified: Fri, 18 Feb 2022 18:32:41 GMT
etag: W/"620fe649-a6d0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32047)
Size:   84980
Md5:    4a7530c38a5601b8b7d5990be5e83c56
Sha1:   ac76c6b5b1430d4b0dc0152e583fed34b420d270
Sha256: 8d13a495e556ed190210307c4cd024182ea66998a19c10f9c90da1d0c45cff6a
                                        
                                            GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://camersoftware.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 15:42:33 GMT
expires: Wed, 29 Nov 2023 15:42:33 GMT
cache-control: public, max-age=31536000
age: 206970
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Size:   15700
Md5:    3d7f7413fca69bff4d231ebdc50aaab0
Sha1:   cb18e7943b6a8a0e3672d7242197c19a226b92e8
Sha256: 6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E79E1DDEC79253B5CAB74915849B7421126D22A32DF6C681902A8D28278551C6"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12584
Expires: Fri, 02 Dec 2022 04:41:47 GMT
Date: Fri, 02 Dec 2022 01:12:03 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PurbGg56Yn5xdDfQA0xdkA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.215.56.181
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: v++WH4zymE0SA0LVHnnjjTEjQpo=

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 01:11:15 GMT
cache-control: public,max-age=3600
age: 48
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /scripts/stock.js HTTP/1.1 
Host: files.findtrustclicks.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         89.22.228.250
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Fri, 02 Dec 2022 01:12:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Mon, 28 Nov 2022 18:03:08 GMT
ETag: W/"172b-5ee8baf0c78f5"
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (5931), with no line terminators
Size:   2019
Md5:    3fffd72b609d5dd79e722619ff70a54a
Sha1:   7e9240c7aa941841ec2cd943fc76afb84d906cfd
Sha256: 4f3f7466127e6b7a55f6e107ed33786045ff49f068298e2ebda0656bc90ad119
                                        
                                            GET /wp-content/uploads/2016/09/cropped-Camer-Software-Icon-1-192x192.png HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
content-length: 9751
last-modified: Fri, 18 Feb 2022 18:33:07 GMT
etag: "620fe663-2617"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   9751
Md5:    01994bde90c44216495e10fe47418391
Sha1:   a2bd2e17fb089f9467f51721e07c1dd8b3b9f23d
Sha256: 60aab21e1ff1d974fe7ef0bf62fa6551b045dbf012d33d2b85eed144d68617a5
                                        
                                            GET /wp-content/uploads/elementor/css/post-3387.css?ver=1637112371 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:02 GMT
last-modified: Fri, 18 Feb 2022 18:33:23 GMT
etag: W/"620fe673-443"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1091), with no line terminators
Size:   1432
Md5:    46f764090022b3afe225be07f6590753
Sha1:   03d9bb08b1bd0a5d794d2c46c3ef7f81986ac02d
Sha256: d931e17fc251c565e032f9fe022430f59cc0e2880ca8bc8da45eec9ac3a13115
                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Dec 2022 01:12:03 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+015; expires=Sun, 01-Dec-2024 01:12:03 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (560)
Size:   27562
Md5:    6ee6878adfde0af4e6d45cd692aeac6b
Sha1:   d18ace42c84bdafcc37fc5fe1e7bb68f5226677b
Sha256: e52c5ab42768dc359ad9eb65d43e8128a3f93cf7009f044033a761feec3f7a78
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "943B7FD843FE74342758D0A86ED3BB76E69716583F499394D8C54D1356B6BD98"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5709
Expires: Fri, 02 Dec 2022 02:47:13 GMT
Date: Fri, 02 Dec 2022 01:12:04 GMT
Connection: keep-alive

                                        
                                            GET /scripts/dest.js HTTP/1.1 
Host: js.interestmoments.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         193.169.194.63
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Fri, 02 Dec 2022 01:12:04 GMT
Last-Modified: Mon, 28 Nov 2022 17:58:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6384f6ca-11c6"
Expires: Mon, 12 Dec 2022 01:12:04 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (4550), with no line terminators
Size:   1680
Md5:    c31ed78fb5f94214f5197644807af000
Sha1:   df1d895f27fa283083e19fbf333242c437918461
Sha256: 40022c3717acf3a2a9ee41d9c1639b794e08427edfdba7619adcbee5363a88bc

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DD5093DF74668B8B9E62206FEB908BA9C73747A06B3B786A82B0153296A62CDF"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12050
Expires: Fri, 02 Dec 2022 04:32:55 GMT
Date: Fri, 02 Dec 2022 01:12:05 GMT
Connection: keep-alive

                                        
                                            GET /go/diana-way.php?id=670954-3455-834536&pid=2467457&qid=473 HTTP/1.1 
Host: long.interestmoments.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         193.169.194.63
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 02 Dec 2022 01:12:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://long.interestmoments.com/go/diana-way.php?id=94563420-24-456345&pid=7944&lid=07882367658&jid=67852&from=Superjack
Access-Control-Allow-Origin: *

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20829
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 01:12:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20829
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 01:12:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20829
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 01:12:05 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:49:56 GMT
age: 12129
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2942
Md5:    b47431190f34eccf0a6efb98e2a32b7d
Sha1:   9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:20:09 GMT
age: 64316
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6174
Md5:    b986f9fcbeca91ed5c8d58fbfaf47d19
Sha1:   6e6c8bd2bce144cc4da1cd7be375b046b60dca79
Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4834
x-amzn-requestid: 63a0b8b5-5cb3-4a1f-aa46-47c84abe726f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQrjEeAIAMF3sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7e3-0032799009f893ba79f314db;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5jKfLFWhSvvsiO5WxWbizQhKZdCj1IKR4ijCCZKjUCtni5qQcK5-Zw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 03:29:45 GMT
age: 78140
etag: "0de97f3a4964038222bd751e043e413113e6db9d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4834
Md5:    cd8ad22c2eb1eb91c76970fa449f1bc4
Sha1:   0de97f3a4964038222bd751e043e413113e6db9d
Sha256: 668f805815aede3bc04f8564bd6aefd56029362bb0aa8a794673eb78ab2d4643
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11402
x-amzn-requestid: 20c2c359-1e43-40c0-885d-1c90e76ea12b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGzJHu-IAMFbYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e7a-1d89722e767daa014b174a39;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJBnbjJB_kvPuJcePGnno3zI0CTWAzV-Osb2L1hPZZhlNYhFHWmLsA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:51:33 GMT
age: 12032
etag: "aa944d10fe4a44b790b01ef62edc0f85a6d558e3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11402
Md5:    1c80b8025242ddfcc816ec612456b99e
Sha1:   aa944d10fe4a44b790b01ef62edc0f85a6d558e3
Sha256: a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:43:11 GMT
age: 62934
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8863
Md5:    156e9ea97b774cbd8361072e4041b6c8
Sha1:   fc71ae3cae92ed6011904bb2367f23bf4e69fab4
Sha256: 58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FhCtGsjgnq83-zRNBH-y9BHUh2IRaN0ahO-BCUw7bTWU8jAanBqdlA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:53:35 GMT
age: 11910
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7732
Md5:    379a4a1b95d3aa3c5a4f8e7f9abb030f
Sha1:   d45dceb3dc58a07197aa5077582b5b1cd2ff791a
Sha256: 1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151
                                        
                                            GET /go/diana-way.php?id=94563420-24-456345&pid=7944&lid=07882367658&jid=67852&from=Superjack HTTP/1.1 
Host: long.interestmoments.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://camersoftware.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         193.169.194.63
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 02 Dec 2022 01:12:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   440
Md5:    d973d5cd6773cdffb4fc4631e2d1a108
Sha1:   2c6a7b26f258284aa04c290156222e263146d632
Sha256: 99ef560c512565f212af8aa4255e113e46aed9c6f7d6db22604036afd1363f3b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.36
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 01:12:05 GMT
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 21:46:11 GMT
Expires: Fri, 02 Dec 2022 21:46:11 GMT
ETag: "e6150004bfa9d7d3b762410d9ac5d425652f9507"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1778
Md5:    b55dad3e5216df22e42fc6f5fa9a8b60
Sha1:   e6150004bfa9d7d3b762410d9ac5d425652f9507
Sha256: e20d137d5544a2bae30082059747e6d80adaa45cad78584adcace72957dccd8b
                                        
                                            GET /click?pid=1287&offer_id=67&ref_id=i3t725wchbed37rew16p&sub1=E0HHEGBJ6R HTTP/1.1 
Host: track.wg-aff.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         35.204.130.99
HTTP/2 302 Found
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 0
location: https://trck.wargaming.net/e2ncihl0/?t=1&pub_id=1287&xid=638950e660a757000109b3b6&xid_param1=E0HHEGBJ6R&xid_param_2=
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=638950e660a757000109b3b6; expires=Sat, 02 Dec 2023 01:12:06 GMT; secure; SameSite=None afoffers={"67":1669943526}; expires=Sat, 02 Dec 2023 01:12:06 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6575
Cache-Control: max-age=123648
Date: Fri, 02 Dec 2022 01:12:06 GMT
Etag: "63887737-1d7"
Expires: Sat, 03 Dec 2022 11:32:54 GMT
Last-Modified: Thu, 01 Dec 2022 09:43:19 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /e2ncihl0/?t=1&pub_id=1287&xid=638950e660a757000109b3b6&xid_param1=E0HHEGBJ6R&xid_param_2= HTTP/1.1 
Host: trck.wargaming.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         92.223.23.231
HTTP/1.1 301 Moved Permanently
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Fri, 02 Dec 2022 01:12:06 GMT
Content-Length: 22
Connection: keep-alive
Location: https://promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=638950e660a757000109b3b6&xid_param1=E0HHEGBJ6R&xid_param_2=&sid=SID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx&enctid=coqxkp7cqirs&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1669943526316595221&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
Set-Cookie: STIDREFERRAL=SID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure enctid=coqxkp7cqirs; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure teclient=1669943526316595221; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   22
Md5:    0e0bf67572311f8a23814419ff24ee9a
Sha1:   78328dfc54708433cdfb3e7857e57f87ec443b08
Sha256: c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CB212C18E101602457E60A2C5A6E2169D9BC20411D3509821C5A38B25846CA91"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5574
Expires: Fri, 02 Dec 2022 02:45:00 GMT
Date: Fri, 02 Dec 2022 01:12:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CB212C18E101602457E60A2C5A6E2169D9BC20411D3509821C5A38B25846CA91"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5574
Expires: Fri, 02 Dec 2022 02:45:00 GMT
Date: Fri, 02 Dec 2022 01:12:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CB212C18E101602457E60A2C5A6E2169D9BC20411D3509821C5A38B25846CA91"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5574
Expires: Fri, 02 Dec 2022 02:45:00 GMT
Date: Fri, 02 Dec 2022 01:12:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CB212C18E101602457E60A2C5A6E2169D9BC20411D3509821C5A38B25846CA91"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5574
Expires: Fri, 02 Dec 2022 02:45:00 GMT
Date: Fri, 02 Dec 2022 01:12:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CB212C18E101602457E60A2C5A6E2169D9BC20411D3509821C5A38B25846CA91"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5574
Expires: Fri, 02 Dec 2022 02:45:00 GMT
Date: Fri, 02 Dec 2022 01:12:06 GMT
Connection: keep-alive

                                        
                                            GET /glows-37602/src/images/wowsl_logo.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 10514
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "4d9371a87a4f9a0d6a8792e0397aa303"
x-amz-request-id: tx0000000000000009e8d4b-0063767ad7-1bfc3e68-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-29T18:34:26+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 749 x 299, 8-bit colormap, non-interlaced\012- data
Size:   10514
Md5:    4d9371a87a4f9a0d6a8792e0397aa303
Sha1:   1308b49f8614f0ab05e81698daf5bfc4a2498bf0
Sha256: 68ddcc9fad945493001c241d8de6fb9acdd436bc82bff503302dbffa64f4f5ed
                                        
                                            GET /glows-37602/src/images/prem-ship.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 52609
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "24af85f4d83908010a8767dd766b20bd"
x-amz-request-id: tx000000000000000617861-0063767ad7-1cdf9313-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-29T18:34:26+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Size:   52609
Md5:    24af85f4d83908010a8767dd766b20bd
Sha1:   5d134c6da618d2462f30398290cdbb0125a55aa0
Sha256: 8b1e8ec476107a88e815452f885b3b0ceb380add0bf8fc324b88f78c53198649
                                        
                                            GET /glows-37602/src/images/prem-icon.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 62427
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "8782ba37be835d15f1baadc4a39e5506"
x-amz-request-id: tx000000000000003f506ee-0063767ad7-1c8e9cf0-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-29T18:34:26+00:00
x-id: sto5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Size:   62427
Md5:    8782ba37be835d15f1baadc4a39e5506
Sha1:   1a4e79d68766262525605e528f25cf77a9fe3229
Sha256: 5aa7576e1679ee8aab7fae60c8862b811466708bf8e281a33a2b9633ee583dd0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2944
Cache-Control: max-age=107781
Date: Fri, 02 Dec 2022 01:12:06 GMT
Etag: "6388476b-117"
Expires: Sat, 03 Dec 2022 07:08:27 GMT
Last-Modified: Thu, 01 Dec 2022 06:19:23 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2944
Cache-Control: max-age=107781
Date: Fri, 02 Dec 2022 01:12:06 GMT
Etag: "6388476b-117"
Expires: Sat, 03 Dec 2022 07:08:27 GMT
Last-Modified: Thu, 01 Dec 2022 06:19:23 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/OtAutoBlock.js HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.16.148.64
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 1931
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: sAuZJAbeAmdDnRNowPPyow==
last-modified: Fri, 25 Nov 2022 10:09:35 GMT
etag: 0x8DACECD27C13A68
x-ms-request-id: d93dc5c4-001e-00f7-5cb6-00fe0d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 53831
expires: Sat, 03 Dec 2022 01:12:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77303141cb40b511-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (835)
Size:   1931
Md5:    b00b992406de0267439d1368c0f3f2a3
Sha1:   82fca6bb4bb2c006415fdc311dad9681e73bda74
Sha256: 700beb542a377941732a2680ca40673c81c44667edbddf7b042190eb82a975ab
                                        
                                            GET /scripttemplates/otSDKStub.js HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.16.148.64
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 7151
content-encoding: gzip
content-md5: HNx4bdEmRgn5g09KulPi7w==
last-modified: Wed, 30 Nov 2022 07:37:12 GMT
etag: 0x8DAD2A5B1D42DFC
x-ms-request-id: d900466d-a01e-00f1-4719-050975000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 84154
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77303141db4cb511-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21747)
Size:   7151
Md5:    1cdc786dd1264609f9834f4aba53e2ef
Sha1:   fff15e833ab27c356e7723dce3441e194b6350bf
Sha256: 70768bac474def6b0ed3e517083dd9c2f1ae3f0fe714ea550c406ce89906adc9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.148.64
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 1898
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: I7SQMOQYw0Ck07PFEPZVjQ==
last-modified: Fri, 25 Nov 2022 10:09:39 GMT
etag: 0x8DACECD29F68FC0
x-ms-request-id: 22332b09-f01e-0147-73b6-0041d8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 53632
expires: Sat, 03 Dec 2022 01:12:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77303141fb6cb511-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (5875), with no line terminators
Size:   1898
Md5:    23b49030e418c340a4d3b3c510f6558d
Sha1:   fd7f8e05f97e7bf21c83782409f6972b172121f1
Sha256: 0f1e442050ca65df6cbaa0371a5097b75cb8bd93d0a7df66dfb88c249ed86b71
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2909
Cache-Control: max-age=128256
Date: Fri, 02 Dec 2022 01:12:06 GMT
Etag: "63889789-116"
Expires: Sat, 03 Dec 2022 12:49:42 GMT
Last-Modified: Thu, 01 Dec 2022 12:01:13 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /gtm.js?id=GTM-58Z37MT HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 01:12:06 GMT
expires: Fri, 02 Dec 2022 01:12:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 121514
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (39047)
Size:   121514
Md5:    43016791515f6ed650598d2e72d684d7
Sha1:   a6fcbc62d05e704ad0b423729d4db58f19771176
Sha256: b8942712018ac8cfe82ea5b6c0899eb50fe1efad4cf56a6f2632ee2702cbd4bb
                                        
                                            GET /glows-37602/src/images/Back.jpg HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-37602/src/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 554306
last-modified: Thu, 17 Nov 2022 17:40:58 GMT
etag: "5b1143e3f10fd52adf017a8c52710246"
x-amz-request-id: tx0000000000000007a6f17-0063767ad8-1cdd7ef6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-29T18:34:27+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size:   554306
Md5:    5b1143e3f10fd52adf017a8c52710246
Sha1:   0eb93a177d800fd1c5498ab56ab2c3dbeffb1604
Sha256: 3f79426bfdbb1b3dd81395847178e30ca89e488ab1a55d8c9385eda70e459536
                                        
                                            GET /b/3.Vs0/PW3-puvAbXmWVXJMZ-Dy0Y0FNTTKc_5/N/DtMRyjLxT/Qe1ZN/zbk/0/MPz/Ma HTTP/1.1 
Host: thirawogla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://long.interestmoments.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         88.85.94.246
HTTP/2 200 OK
content-type: text/html;charset=UTF-8
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:05 GMT
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
last-modified: Fri, 02 Dec 2022 01:12:05 GMT
x-frame-options: DENY
referrer-policy: no-referrer
p3p: CP="CUR ADM OUR NOR STA NID"
set-cookie: kadCCap=220335:1:1669620452;79610:1:1669272875;218693:1:1669515516;220790:1:1668460505;215297:1:1669786163;219047:1:1667194435;194136:1:1669413157;212269:1:1667199062;132751:1:1669884292;222582:1:1669887477;219652:1:1669330335;199455:1:1668245056;219484:1:1667715065;221398:1:1669672704; max-age=1701479525; path=/ kadACap=450649:1:1669712254;419299:1:1669735589;446531:1:1669270846;407100:1:1668246232;401659:1:1669888795;446013:1:1668228435;453831:1:1669942034;444748:1:1669841678;419303:1:1669864662;190964:1:1669272875;449523:1:1669886613;446714:1:1669805719;424441:1:1669620569;419295:1:1669929223;419301:1:1669646033;442019:1:1669930720;419297:1:1669887884;451139:1:1669898733;410252:1:1669943525;419291:1:1669705862;419323:1:1669718082;445735:1:1669286676;419321:1:1669463839;445788:1:1669918420;383700:1:1669898676;451724:1:1669565807;346327:2:1669923947;419293:1:1669526430;445506:1:1669286676; max-age=1701479525; path=/ kadCSCap=132751:1:1669884292;222582:1:1669887477; path=/ kadASCap=401659:1:1669888795;453831:1:1669942034;383700:1:1669898676;419303:1:1669864662;346327:2:1669923947;442019:1:1669930720;419295:1:1669929223;419297:1:1669887884;410252:1:1669943525;449523:1:1669886613;451139:1:1669898733;445788:1:1669918420; path=/ kadRPixJ=bnVsbA==; max-age=1701479525; path=/ kadUnP3=CBQQuZWgnAYaDQjVv5kBEAEY64iknAYaDQivp/4BEAMYuZWgnAYaDQiirJUCEAEY1N2jnAYaDQioiJcCEAQY9euhnAYaDQjowJcCEAgYhNOhnAYaDQishpgCEAIYpcSknAYiCggDEA8YhNOhnAYiCggBEAMYuZWgnAYqDAiDvRIQARjriKScBioMCOHXJxABGNTdo5wGKgwIpJMoEAQY9euhnAYqDAjzmigQCBiE06GcBioMCIukKBACGKXEpJwGKgwIw+kMEAMYuZWgnAY=; max-age=1701479525; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (357)
Size:   1033
Md5:    ec634f41903f846f3e60a3718f15f69a
Sha1:   9136b2e25876ce5f98b55231a569af267accf9ca
Sha256: 4e989212578c4cf4e336cfa21fd48b757fc909b099ad95d5175b778a78569427
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 15:42:33 GMT
expires: Wed, 29 Nov 2023 15:42:33 GMT
cache-control: public, max-age=31536000
age: 206973
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Size:   15700
Md5:    3d7f7413fca69bff4d231ebdc50aaab0
Sha1:   cb18e7943b6a8a0e3672d7242197c19a226b92e8
Sha256: 6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
                                        
                                            GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 22:14:50 GMT
expires: Wed, 29 Nov 2023 22:14:50 GMT
cache-control: public, max-age=31536000
age: 183436
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Size:   15660
Md5:    d7b0b953a50fddaa88089b5b787cf719
Sha1:   2f85bc568b27659a3d6452f58f9fd7678450326d
Sha256: e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 106692
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6575
Cache-Control: max-age=123648
Date: Fri, 02 Dec 2022 01:12:06 GMT
Etag: "63887737-1d7"
Expires: Sat, 03 Dec 2022 11:32:54 GMT
Last-Modified: Thu, 01 Dec 2022 09:43:19 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /assets/campaigns/static/campaign_data_gtm_sender.js HTTP/1.1 
Host: tenor.wargaming.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         92.223.21.16
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Fri, 02 Dec 2022 01:12:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Last-Modified: Wed, 09 Nov 2022 09:49:54 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"636b77c2-4ced"
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (7249)
Size:   6591
Md5:    51b44a9f232d5cec869a12623ae6dbfd
Sha1:   19305e6be93c7944f3e4cd68d778a73bf4a03031
Sha256: 32d957fdbd3debc51e0df55c6af4dbf747c501d19fafdd75731cb9a02cc68107
                                        
                                            GET /global_static/favicon/v2/apple-touch-icon-180x180.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 2326
last-modified: Mon, 05 Sep 2022 07:56:20 GMT
etag: "687168d21b7e78dfb6175de97ae3d045"
x-amz-request-id: tx0000000000000002a896d-00633fe0e6-1c4459fa-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-28T08:39:58+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   2326
Md5:    687168d21b7e78dfb6175de97ae3d045
Sha1:   78081e22c1ea9e51a6cac8910d7ce01c319132e1
Sha256: 49f69cf7e37fda7051cd440048ecd5b2ab0973f106dc6e669959ee453b03e5d1
                                        
                                            GET /global_static/favicon/v2/favicon-64x64.png HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:06 GMT
content-length: 1198
last-modified: Mon, 05 Sep 2022 07:56:21 GMT
etag: "de30b29e8bbc72b7828734d5d781b9eb"
x-amz-request-id: tx00000000000000080ac6e-00633fe0d1-1c4c0c09-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-28T08:23:04+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size:   1198
Md5:    de30b29e8bbc72b7828734d5d781b9eb
Sha1:   9d5fb51148291180b45d9481b756eb7fc2d4a352
Sha256: e47efd1c616db1a5564776f4be806183ee085c80d2d3722d3f8d5a06115e46ee
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1 
Host: camersoftware.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://camersoftware.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         82.165.73.164
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:03 GMT
last-modified: Fri, 18 Feb 2022 18:33:42 GMT
etag: W/"620fe686-15fd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5477)
Size:   2199
Md5:    609a784e497a9e38df60117076bd65c1
Sha1:   7cd6f27a2289cfd12d8fa380e0ca29bb3995fca2
Sha256: 044395e7aab82abc23d39dbb6d4ed2d2649716f6dffdcb084cf352ceb1c4e278
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/1006839708/?random=1669943525370&cv=11&fst=1669943525370&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&auid=365728831.1669943525&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.130
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 01:12:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1282
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 01:27:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3223), with no line terminators
Size:   1282
Md5:    1457b8ac268ef8008a90f4c7a10bcf44
Sha1:   7c9f0ffdc9b222f1255ad006a3b0ea82c0690df5
Sha256: 2a8e327e6429bc850ad807a5ca70404c1ea028a9638009e344a39737229b1dd2
                                        
                                            GET /pagead/viewthroughconversion/1006839708/?random=1669943525374&cv=11&fst=1669943525374&fmt=3&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&auid=365728831.1669943525&data=ads_data_redaction%3Dtrue&gcp=1&ct_cookie_present=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.130
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 01:12:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 01:27:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /activityi;src=10697551;type=pagev0;cat=allvi0;ord=1951014348108;gtm=2wgbu0;gcs=G111;auiddc=365728831.1669943525;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287? HTTP/1.1 
Host: 10697551.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.70
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 01:12:07 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 579
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 01:27:07 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1473), with no line terminators
Size:   579
Md5:    a2d6c4241a00f4ecafcfdc79c0057d99
Sha1:   c6099d9817e351162cfc199c7b2996018596e0a3
Sha256: a3940e76da1ea8152b3f1d530833db558ae64ae4c2a8bc47fcf921316c11ba54
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39CA06A2EA5E757825C87BAC54588E8949A900D4BEB8E05788EC58C942E106A7"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17833
Expires: Fri, 02 Dec 2022 06:09:20 GMT
Date: Fri, 02 Dec 2022 01:12:07 GMT
Connection: keep-alive

                                        
                                            GET /ads/pixel.js HTTP/1.1 
Host: www.redditstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.140
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:12:07 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25224)
Size:   7722
Md5:    3528fd00b652f61a266eb584d96f4fcc
Sha1:   d89e16aa1323c6c4f1ed3941122020684a599361
Sha256: 77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
                                        
                                            GET /scripttemplates/202211.1.0/otBannerSdk.js HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.148.64
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 02 Dec 2022 01:12:07 GMT
content-length: 93485
content-encoding: gzip
content-md5: 9qSRvp3H9roScfT6qXUxeQ==
last-modified: Wed, 30 Nov 2022 07:37:09 GMT
etag: 0x8DAD2A5B0177E6D
x-ms-request-id: 7cacc22c-c01e-014f-273e-055aab000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 59652
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 773031448dcbb511-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   93485
Md5:    f6a491be9dc7f6ba1271f4faa9753179
Sha1:   e11e8e291ca6548f4933103088b8acd15af84191
Sha256: 6cf04708cbb25e9b7144e865deebd75bd4b2d42fa703299ba303a084d457b081
                                        
                                            GET /npm/yandex-metrica-watch/tag.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.129.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.250.0
x-jsd-version-type: version
etag: W/"346dd-nsZLR4YN/Jfyl2nmrii/8cxDozY"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 02 Dec 2022 01:12:07 GMT
age: 24457
x-served-by: cache-fra-eddf8230060-FRA, cache-bma1631-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 85055
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Size:   85055
Md5:    38bcc0f8505c69e2c6fe7f07747a688d
Sha1:   0f67a6ec36f89ac04a363efeec43ef2840508691
Sha256: e499aad948729045fb029421fdc1dba4aa4cd0f4f1476d0aa74bdb8b8d48a06c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39CA06A2EA5E757825C87BAC54588E8949A900D4BEB8E05788EC58C942E106A7"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17833
Expires: Fri, 02 Dec 2022 06:09:20 GMT
Date: Fri, 02 Dec 2022 01:12:07 GMT
Connection: keep-alive

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "1EA5261AFBC78E71F7C4D0A0DCF71EB84DDFC75F"
Expires: Fri, 02 Dec 2022 12:00:00 GMT
Last-Modified: Fri, 02 Dec 2022 00:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3521
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77303144efe7b503-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    2b9b27e63ff2088c475bdc1ba94d124f
Sha1:   5ba7470fb51240f3119d115c7c2a07df41398c3a
Sha256: fcabdd074488ac5524b96c5eae04313bfab33eaac09ea06bb1a678cedee54128
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.148.64
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Fri, 02 Dec 2022 01:12:07 GMT
content-length: 11485
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: tCMBfS7MwFy145IdNu61NQ==
last-modified: Fri, 25 Nov 2022 10:09:21 GMT
etag: 0x8DACECD1F1475FC
x-ms-request-id: ba3e27e9-f01e-00e9-15b6-0024e0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 53631
expires: Sat, 03 Dec 2022 01:12:07 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 773031450e40b511-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (48198), with no line terminators
Size:   11485
Md5:    b423017d2eccc05cb5e3921d36eeb535
Sha1:   b989dd503a71fa6a448860a5d59c28bbceee910b
Sha256: b8aab8ba299a063e0e5faacea59d7cc56da466c0fd3b91a8d03480184eaf7495
                                        
                                            GET /sid?include=campaign&filter[sid]=SID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx HTTP/1.1 
Host: tenor.wargaming.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         92.223.21.16
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Server: openresty
Date: Fri, 02 Dec 2022 01:12:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Vary: Accept-Encoding
Access-Control-Expose-Headers: Server,Content-Length,Date
Access-Control-Allow-Origin: https://promo.worldofwarships.eu
Access-Control-Allow-Credentials: true
Content-Encoding: gzip


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (937), with no line terminators
Size:   479
Md5:    a45973c661b6bb70052523ee647de815
Sha1:   6da116765a4b9750ccebb37d6aa03de761e79142
Sha256: 9d3ee59f0b1ecc99302b5a80477502ce9b9c684a403458f60721712c0b626656
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=1951014348108;gtm=2wgbu0;gcs=G111;auiddc=365728831.1669943525;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287 HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10697551.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.130
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 01:12:07 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1472), with no line terminators
Size:   582
Md5:    2cc6b75afcf29b32f5b127d60ed3fbb1
Sha1:   1040750f1f143ce1e5cbbcc345006a40b51cff45
Sha256: 10cf1c80e8063ac73b8594fa857ea334b607b499a56e63b63f3a28b69d8646e0
                                        
                                            GET /global_static/age_ratings/v2/pegi_rating.svg HTTP/1.1 
Host: promo-cdn.worldofwarships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.223.97.97
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Fri, 02 Dec 2022 01:12:06 GMT
last-modified: Mon, 14 Feb 2022 22:01:21 GMT
etag: W/"207ef7e145ba483b342b96f8c2fbf72a"
x-amz-request-id: tx0000000000000002a85f1-00633fe0c3-1c4459fa-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-28T08:23:03+00:00
x-id: sto5-up-gc13
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   16502
Md5:    46f5c52201cecbdef79a36cf09672e24
Sha1:   ffacec289bc21692c5647a420ce35b62d2708f1c
Sha256: 262db3b2089a4312b7f7bf76c337293ab58fabbb1e6e33d36a594c365b17c1c0
                                        
                                            GET /scripttemplates/202211.1.0/assets/otCenterRounded.json HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.148.64
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 02 Dec 2022 01:12:07 GMT
content-length: 2639
content-encoding: gzip
content-md5: aI9a75SaiYK9oHcYk8xn0w==
last-modified: Wed, 30 Nov 2022 07:37:01 GMT
etag: 0x8DAD2A5AB6C83EE
x-ms-request-id: 448de741-101e-008e-32c9-049747000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 53631
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 773031465f5ab511-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (7753)
Size:   2639
Md5:    688f5aef949a8982bda0771893cc67d3
Sha1:   c50441dea985350ab305848e2d87d6286adfda3c
Sha256: da30c398b0e6646c44fc5a53e44371004a33267d6cd07404775ab6380979b058
                                        
                                            GET /scripttemplates/202211.1.0/assets/v2/otPcCenter.json HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.148.64
HTTP/2 200 OK
content-type: application/json
                                        
date: Fri, 02 Dec 2022 01:12:07 GMT
content-length: 12540
content-encoding: gzip
content-md5: DNL7D9cwlU7yFZUg2W8ZNA==
last-modified: Wed, 30 Nov 2022 07:37:02 GMT
etag: 0x8DAD2A5AC58BC53
x-ms-request-id: fbcd2477-d01e-00ba-40c9-0438ef000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 53631
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 773031465f61b511-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (50353)
Size:   12540
Md5:    0cd2fb0fd730954ef2159520d96f1934
Sha1:   d2656260dfdac230479c8e7dc44444e9d5c8faf2
Sha256: b821093423791675ca31c2d688b528b329737cca90ef62bc44f5c5b39423c8f6
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 05 Dec 2022 21:16:15 GMT
ETag: "67be0c305289a37da8014f99ec254bd9d0035d5d"
Last-Modified: Thu, 01 Dec 2022 21:16:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3580
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7730314688c0b503-OSL

                                        
                                            GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=1951014348108;gtm=2wgbu0;gcs=G111;auiddc=365728831.1669943525;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287 HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.34
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 01:12:07 GMT
expires: Fri, 02 Dec 2022 01:12:07 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   85
Md5:    4a3b3637744caa4a0b08fabbd76cc830
Sha1:   755e5626762ecf38f55012da892a227bf50f15f1
Sha256: 6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ADACC6027B15AD506496E1CE6FB170802B29AEE53C713A83541C47B8E9883924"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2607
Expires: Fri, 02 Dec 2022 01:55:34 GMT
Date: Fri, 02 Dec 2022 01:12:07 GMT
Connection: keep-alive

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Content-Length: 939
Connection: keep-alive
Expires: Mon, 05 Dec 2022 21:16:15 GMT
ETag: "67be0c305289a37da8014f99ec254bd9d0035d5d"
Last-Modified: Thu, 01 Dec 2022 21:16:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3580
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7730314698c7b503-OSL

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A2b7w95bdqfdb0kzrg7tcl8%3Afp%3A975%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A3%3Adp%3A0%3Als%3A1173257177674%3Ahid%3A851078896%3Az%3A0%3Ai%3A20221202011205%3Aet%3A1669943526%3Ac%3A1%3Arn%3A1028200234%3Arqn%3A1%3Au%3A1669943526313518089%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A52%2C22%2C9%2C0%2C541%2C0%2C%2C212%2C2%2C%2C%2C%2C970%3Aco%3A0%3Ans%3A1669943524189%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669943526%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 419
date: Fri, 02 Dec 2022 01:12:07 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 02-Dec-2022 01:12:07 GMT
last-modified: Fri, 02-Dec-2022 01:12:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    493ad7f4a45fe9c77136859f701db9a1
Sha1:   11650223d3287f727351fc3d71d7c8584e4ddcc4
Sha256: 736e63a1eede554853be6b9a8d7c33b3c165fd5cd91e220af166e730665417bd
                                        
                                            GET /logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png HTTP/1.1 
Host: cdn.cookielaw.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.148.64
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 02 Dec 2022 01:12:07 GMT
content-length: 13003
content-md5: yQR1hy2JddzEte19tsxeKA==
last-modified: Fri, 02 Oct 2020 14:20:55 GMT
etag: 0x8D866DE604098C2
x-ms-request-id: c476ff8b-c01e-00c3-3c6c-c451a5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 3257
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 773031473812b511-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1000 x 320, 8-bit/color RGBA, non-interlaced\012- data
Size:   13003
Md5:    c90475872d8975dcc4b5ed7db6cc5e28
Sha1:   1e5a413845f5d501c174ae4940e1329a2575067f
Sha256: e79eb16948cca42e0f7884fad7637fa6ec69117a07dbc04cc8b3ea7ebeaef719
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A2b7w95bdqfdb0kzrg7tcl8%3Afp%3A975%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A2%3Adp%3A0%3Als%3A1485510615580%3Ahid%3A851078896%3Az%3A0%3Ai%3A20221202011205%3Aet%3A1669943526%3Ac%3A1%3Arn%3A419852742%3Arqn%3A1%3Au%3A1669943526313518089%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A52%2C22%2C9%2C0%2C541%2C0%2C%2C212%2C2%2C%2C%2C%2C970%3Aco%3A0%3Ans%3A1669943524189%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669943526%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         87.250.251.119
HTTP/2 302 Found
                                        
location: /watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A2b7w95bdqfdb0kzrg7tcl8%3Afp%3A975%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A2%3Adp%3A0%3Als%3A1485510615580%3Ahid%3A851078896%3Az%3A0%3Ai%3A20221202011205%3Aet%3A1669943526%3Ac%3A1%3Arn%3A419852742%3Arqn%3A1%3Au%3A1669943526313518089%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A52%2C22%2C9%2C0%2C541%2C0%2C%2C212%2C2%2C%2C%2C%2C970%3Aco%3A0%3Ans%3A1669943524189%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669943526%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 02 Dec 2022 01:12:07 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=1691210221669943527; Path=/; SameSite=None; Secure i=vqxvfBMLcGP4d2mhrtD73U7SZG6V1tDQGAnuPfIK5MVzyOmrMarCfGKevdXXlCIMvF1FiPmbVF8qXDlbE854b5yHk4U=; Expires=Mon, 29-Nov-2032 01:12:05 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=3655399221669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=3655399221669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1701479527.yc.1669943527#1701479527.yrts.1669943527#1701479527.yrtsi.1669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 02-Dec-2022 01:12:07 GMT
last-modified: Fri, 02-Dec-2022 01:12:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Size:   400
Md5:    5a88f7ffe3dd24ac7dafb57064a4e4a9
Sha1:   c0b012f530232df3e9e9f2f2ae485abc1db6f7d7
Sha256: fdc1d39b48a7364cb8d9423000a94547894280322398687c9d92a7207e7aa27f
                                        
                                            GET /watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A2b7w95bdqfdb0kzrg7tcl8%3Afp%3A975%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1530264767059%3Ahid%3A851078896%3Az%3A0%3Ai%3A20221202011205%3Aet%3A1669943526%3Ac%3A1%3Arn%3A213907450%3Arqn%3A1%3Au%3A1669943526313518089%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A52%2C22%2C9%2C0%2C541%2C0%2C%2C212%2C2%2C%2C%2C%2C970%3Aco%3A0%3Ans%3A1669943524189%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669943526%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         87.250.251.119
HTTP/2 302 Found
                                        
location: /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A2b7w95bdqfdb0kzrg7tcl8%3Afp%3A975%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1530264767059%3Ahid%3A851078896%3Az%3A0%3Ai%3A20221202011205%3Aet%3A1669943526%3Ac%3A1%3Arn%3A213907450%3Arqn%3A1%3Au%3A1669943526313518089%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A52%2C22%2C9%2C0%2C541%2C0%2C%2C212%2C2%2C%2C%2C%2C970%3Aco%3A0%3Ans%3A1669943524189%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669943526%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 02 Dec 2022 01:12:07 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=2013694771669943527; Path=/; SameSite=None; Secure i=lMHiaoMJPI32zE62L3tdPa0kiqwF6vhON+BFe52oNrrCGDFtfj8uG8EhTQeqbhgxOwFUdXYk4km55oS0G7tr5kwP7BQ=; Expires=Mon, 29-Nov-2032 01:11:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=7167357081669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=7167357081669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1701479527.yc.1669943527#1701479527.yrts.1669943527#1701479527.yrtsi.1669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 02-Dec-2022 01:12:07 GMT
last-modified: Fri, 02-Dec-2022 01:12:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    dc2c309cfa87eb5d56965707a96ffe1d
Sha1:   5b4ab75001cbb883f25fed94506c02d6c93de708
Sha256: 70015b5c09b5ff6f1356d303e9d9e822e880130ef12aa0cce55a69351076494c
                                        
                                            POST /pagead/landing?gcs=G111&gcd=G111&rnd=2126069027.1669943525&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F&gtm=2wgbu058Z37MT&auid=365728831.1669943525 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         142.250.74.132
HTTP/2 302 Found
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 01:12:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=2126069027.1669943525&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F&gtm=2wgbu058Z37MT&auid=365728831.1669943525
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tag=ViewContent&ts=1669943525575 HTTP/1.1 
Host: q.quora.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         52.72.186.224
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 02 Dec 2022 01:12:07 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,264a369548048757d2cab7b7c194c77a,10.0.0.120,7772,91.90.42.154,,82854678998,1,1669943527.596,0.002,,.,0,0,0.004,0.004,-,0,0,197,181,90,10,34729,,,,,,-,
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1669943527_78c10181aba37a28f7dcc96a4fdac6d1f2267979fe4c3a6973d3408c5936abff&browser-info=ar%3A1%3Avf%3A2b7w95bdqfdb0kzrg7tcl8%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A2%3Adp%3A0%3Als%3A1485510615580%3Ahid%3A851078896%3Az%3A0%3Ai%3A20221202011206%3Aet%3A1669943526%3Ac%3A1%3Arn%3A872118566%3Arqn%3A2%3Au%3A1669943526313518089%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1669943524189%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669943526%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)ecs(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 302 Found
                                        
location: /watch/71343676/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1669943527_78c10181aba37a28f7dcc96a4fdac6d1f2267979fe4c3a6973d3408c5936abff&browser-info=ar%3A1%3Avf%3A2b7w95bdqfdb0kzrg7tcl8%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A2%3Adp%3A0%3Als%3A1485510615580%3Ahid%3A851078896%3Az%3A0%3Ai%3A20221202011206%3Aet%3A1669943526%3Ac%3A1%3Arn%3A872118566%3Arqn%3A2%3Au%3A1669943526313518089%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1669943524189%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669943526%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29ecs%281%29fip%281%29ti%282%29
date: Fri, 02 Dec 2022 01:12:07 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=2062761461669943527; Path=/; SameSite=None; Secure i=O7Wp/0b/sT9Dq2joRXuKDhrkL6mPCDk/NCs5Z8tBS//8D1w8dCr2ZsBvRFuWMUFWbPMf1C2cqr/mrar2X5SCfFGOlp0=; Expires=Mon, 29-Nov-2032 01:11:49 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=6825985881669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=6825985881669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1701479527.yc.1669943527#1701479527.yrts.1669943527#1701479527.yrtsi.1669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 02-Dec-2022 01:12:07 GMT
last-modified: Fri, 02-Dec-2022 01:12:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1669943527_305e628ca80843f767a43c03e3e00c0e5b4d1725eb471e605e3c43dd7de732be&browser-info=ar%3A1%3Avf%3A2b7w95bdqfdb0kzrg7tcl8%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1530264767059%3Ahid%3A851078896%3Az%3A0%3Ai%3A20221202011206%3Aet%3A1669943526%3Ac%3A1%3Arn%3A589675236%3Arqn%3A2%3Au%3A1669943526313518089%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1669943524189%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669943526%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)ecs(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 302 Found
                                        
location: /watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1669943527_305e628ca80843f767a43c03e3e00c0e5b4d1725eb471e605e3c43dd7de732be&browser-info=ar%3A1%3Avf%3A2b7w95bdqfdb0kzrg7tcl8%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1530264767059%3Ahid%3A851078896%3Az%3A0%3Ai%3A20221202011206%3Aet%3A1669943526%3Ac%3A1%3Arn%3A589675236%3Arqn%3A2%3Au%3A1669943526313518089%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1669943524189%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669943526%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29ecs%281%29fip%281%29ti%282%29
date: Fri, 02 Dec 2022 01:12:07 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=1648363541669943527; Path=/; SameSite=None; Secure i=VunOYzvIwvwAnwWHZfbWDBYPAMpTYOApI2oBQLhLNGpEwb6Vut4+fo3QcCy6qVrrBQCOdM7Ad6OEhSdOlvbM9i+0on4=; Expires=Mon, 29-Nov-2032 01:11:59 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=606500551669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=606500551669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1701479527.yc.1669943527#1701479527.yrts.1669943527#1701479527.yrtsi.1669943527; Expires=Sat, 02-Dec-2023 01:12:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 02-Dec-2022 01:12:07 GMT
last-modified: Fri, 02-Dec-2022 01:12:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /pagead/1p-user-list/1006839708/?random=1669943525370&cv=11&fst=1669942800000&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=100185767&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 01:12:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-conversion/1006839708/?random=1669943525374&cv=11&fst=1669943525374&bg=ffffff&guid=ON&async=1&gtm=2wgbu0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D638950e660a757000109b3b6%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID2nuhVxjH1z8bF-MLV8AKl2pHqX0cnxtaI0Vb0SD9dbxHLKsOdoniSZNVEv1fSHsXCXtP6vsUbprxtVNnYbXfyuVA7xe98GRumunJCNQhfaNWzvAv3mYLDqTNAxeHPmCN12UBl5hlTVBx%26enctid%3Dcoqxkp7cqirs%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1669943526316595221%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&auid=365728831.1669943525&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 01:12:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   63
Md5:    0339f8f57d1bf75003db591e28957e45
Sha1:   ae2286e497c9f76a02cb40c40a674b73bd293b76
Sha256: 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
                                        
                                            GET /metrika/tag.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 73266
date: Fri, 02 Dec 2022 01:12:08 GMT
access-control-allow-origin: *
etag: "6388ac0c-11e32"
expires: Fri, 02 Dec 2022 02:12:08 GMT
last-modified: Thu, 01 Dec 2022 16:28:44 GMT
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Size:   73266
Md5:    a4567a1e52f99c2b3870f58375ec8cac
Sha1:   dbfc795e71fc19f7e45e8637abc4ac770f639a48
Sha256: 2b13b5716855040bd9a08972b0e61369e50c6daa402ed937e18f6795f82429c8
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Fri, 02 Dec 2022 01:12:08 GMT
access-control-allow-origin: *
etag: "6388ac0c-2b"
expires: Fri, 02 Dec 2022 02:12:08 GMT
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 16:28:44 GMT
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /css2?family=Roboto:wght@400&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 01:12:06 GMT
date: Fri, 02 Dec 2022 01:12:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /images/listing/tool/cv/ytag.js HTTP/1.1 
Host: s.yimg.jp
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         182.22.31.124
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 02 Dec 2022 01:07:37 GMT
vary: Accept-Encoding
last-modified: Tue, 30 Aug 2022 04:48:29 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
age: 271
content-length: 9790
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32042), with no line terminators
Size:   9790
Md5:    756de2120f79f1aa501b0e0b490dca58
Sha1:   4a4b8d596749960af503ec1309b6bd821a7bdbf3
Sha256: 128c1c4b2018808bbe4ec25198b92ef894df5a131cf0ca647dbd3ada66ba939e