teleora.site/ph/lf/globe?key=eyJ0aW1lc3RhbXAiOiIxNjY3MjEzOTEyIiwiaGFzaCI6Ijk1YTEzY2RlZGNlY2FkNDA3NzE1YmM3ZjMyZmQ3YzYzMTFlOWYxZjEifQ==&ccc=US&ppp=PropellerAds:+Push+Notifications&tdom=www.mediacdnc.com&bemobdata=c=5a9ec01d-b6cc-4672-a6ae-767d67a16d56..l=91d6ef8e-437b-428f-a0d9-50f887765dce..a=0..b=0..r=www.mediacdnc.com
301 Moved Permanently 552 B URL HTTP/1.1 teleora.site/ph/lf/globe?key=eyJ0aW1lc3RhbXAiOiIxNjY3MjEzOTEyIiwiaGFzaCI6Ijk1YTEzY2RlZGNlY2FkNDA3NzE1YmM3ZjMyZmQ3YzYzMTFlOWYxZjEifQ==&ccc=US&ppp=PropellerAds:+Push+Notifications&tdom=www.mediacdnc.com&bemobdata=c=5a9ec01d-b6cc-4672-a6ae-767d67a16d56..l=91d6ef8e-437b-428f-a0d9-50f887765dce..a=0..b=0..r=www.mediacdnc.com
IP
ASN #212531 UAB Interneto vizija
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (394)
Hash bef1e8587e3590246a7d376830c0940e
9c6969fc6151fc3ec9e2f793a6a8e27b8e7384aa
2ab3ac12b3e374e1c6a6729d9b3b79a80f6a51bab4eff965b75c13f89311098f
GET /ph/lf/globe?key=eyJ0aW1lc3RhbXAiOiIxNjY3MjEzOTEyIiwiaGFzaCI6Ijk1YTEzY2RlZGNlY2FkNDA3NzE1YmM3ZjMyZmQ3YzYzMTFlOWYxZjEifQ==&ccc=US&ppp=PropellerAds:+Push+Notifications&tdom=www.mediacdnc.com&bemobdata=c=5a9ec01d-b6cc-4672-a6ae-767d67a16d56..l=91d6ef8e-437b-428f-a0d9-50f887765dce..a=0..b=0..r=www.mediacdnc.com HTTP/1.1
Host: teleora.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 11 Mar 2023 20:26:38 GMT
Server: Apache
Location: http://teleora.site/ph/lf/globe/?key=eyJ0aW1lc3RhbXAiOiIxNjY3MjEzOTEyIiwiaGFzaCI6Ijk1YTEzY2RlZGNlY2FkNDA3NzE1YmM3ZjMyZmQ3YzYzMTFlOWYxZjEifQ==&ccc=US&ppp=PropellerAds:+Push+Notifications&tdom=www.mediacdnc.com&bemobdata=c=5a9ec01d-b6cc-4672-a6ae-767d67a16d56..l=91d6ef8e-437b-428f-a0d9-50f887765dce..a=0..b=0..r=www.mediacdnc.com
Content-Length: 552
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 88c2e33504e05b0bc2b7a3502d6a79bb
23881a1edb8d8ff3dc2192d25792a59fa2c96088
dfbfefeab7d314e54f5e5f2e48ba645817da6dee3ee2bc5abdbaac81b8dc66e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DFBFEFEAB7D314E54F5E5F2E48BA645817DA6DEE3EE2BC5ABDBAAC81B8DC66E7"
Last-Modified: Thu, 09 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7367
Expires: Sat, 11 Mar 2023 22:29:25 GMT
Date: Sat, 11 Mar 2023 20:26:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9ce33c47154f4826255fe9bbe54d72be
e10a363c007a6d15ed43eb35b4e5c246d85c5eed
cf423db1a8ad1dce1b5c25f6025d14411b4a46e95a6001288949f046e244bc24
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CF423DB1A8AD1DCE1B5C25F6025D14411B4A46E95A6001288949F046E244BC24"
Last-Modified: Fri, 10 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7861
Expires: Sat, 11 Mar 2023 22:37:39 GMT
Date: Sat, 11 Mar 2023 20:26:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 11 Mar 2023 20:13:52 GMT
content-type: application/json
age: 766
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1a564ae484daef6a82bb08116ad794eb
f75350abf28a42c16324901035889a1f3af700a1
225214187df3f50835a8aafcc4555fe47cf0b78938b71d34fb422942292b153b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "225214187DF3F50835A8AAFCC4555FE47CF0B78938B71D34FB422942292B153B"
Last-Modified: Fri, 10 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7817
Expires: Sat, 11 Mar 2023 22:36:55 GMT
Date: Sat, 11 Mar 2023 20:26:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 0za1+JCDV04bP0Z6nkoHNuMs5Cb5RtRx/VONArfKULaWN8y3crAvG1FDmKfSS0quulksPPBSYGc=
x-amz-request-id: 856ANBYGCYHQC0C0
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 11 Mar 2023 19:45:40 GMT
age: 2458
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
teleora.site/ph/lf/globe/?key=eyJ0aW1lc3RhbXAiOiIxNjY3MjEzOTEyIiwiaGFzaCI6Ijk1YTEzY2RlZGNlY2FkNDA3NzE1YmM3ZjMyZmQ3YzYzMTFlOWYxZjEifQ==&ccc=US&ppp=PropellerAds:+Push+Notifications&tdom=www.mediacdnc.com&bemobdata=c=5a9ec01d-b6cc-4672-a6ae-767d67a16d56..l=91d6ef8e-437b-428f-a0d9-50f887765dce..a=0..b=0..r=www.mediacdnc.com
302 Found 0 B URL HTTP/1.1 teleora.site/ph/lf/globe/?key=eyJ0aW1lc3RhbXAiOiIxNjY3MjEzOTEyIiwiaGFzaCI6Ijk1YTEzY2RlZGNlY2FkNDA3NzE1YmM3ZjMyZmQ3YzYzMTFlOWYxZjEifQ==&ccc=US&ppp=PropellerAds:+Push+Notifications&tdom=www.mediacdnc.com&bemobdata=c=5a9ec01d-b6cc-4672-a6ae-767d67a16d56..l=91d6ef8e-437b-428f-a0d9-50f887765dce..a=0..b=0..r=www.mediacdnc.com
IP
ASN #212531 UAB Interneto vizija
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ph/lf/globe/?key=eyJ0aW1lc3RhbXAiOiIxNjY3MjEzOTEyIiwiaGFzaCI6Ijk1YTEzY2RlZGNlY2FkNDA3NzE1YmM3ZjMyZmQ3YzYzMTFlOWYxZjEifQ==&ccc=US&ppp=PropellerAds:+Push+Notifications&tdom=www.mediacdnc.com&bemobdata=c=5a9ec01d-b6cc-4672-a6ae-767d67a16d56..l=91d6ef8e-437b-428f-a0d9-50f887765dce..a=0..b=0..r=www.mediacdnc.com HTTP/1.1
Host: teleora.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 11 Mar 2023 20:26:38 GMT
Server: Apache
Location: //whampamp.com/4/5087048?var=ed2
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 11 Mar 2023 20:26:38 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
whampamp.com/4/5087048?var=ed2
200 OK 9.2 kB URL HTTP/1.1 whampamp.com/4/5087048?var=ed2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12966)
Hash 2c7cf2a77b46b91a0b98369421454ccb
3a38a45e452f59b5e147658b7a40c36b726e1116
3beb0d539e9d727a421ae1490c4d20a7dc11b21745b29a1e73b870d13aeef7a4
GET /4/5087048?var=ed2 HTTP/1.1
Host: whampamp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 11 Mar 2023 20:26:38 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 34084881d692d6cdff6d605313e42af4
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=4bac14c320384ca19b5d01f065fcfbd1; expires=Sun, 10 Mar 2024 20:26:38 GMT; path=/
oaidts=1678566398; expires=Sun, 10 Mar 2024 20:26:38 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 852a32464bcfceec2b113d4bcafa4fa6
a3875f2a62cb0af49edc026762ca07eee321910f
c533a348806cc888c263a9c3454120b5d0ea29d7e97839e8166b2c22af94b52e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C533A348806CC888C263A9C3454120B5D0EA29D7E97839E8166B2C22AF94B52E"
Last-Modified: Thu, 09 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8120
Expires: Sat, 11 Mar 2023 22:41:58 GMT
Date: Sat, 11 Mar 2023 20:26:38 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=4bac14c320384ca19b5d01f065fcfbd1
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=4bac14c320384ca19b5d01f065fcfbd1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=4bac14c320384ca19b5d01f065fcfbd1 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://whampamp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 11 Mar 2023 20:26:38 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=4bac14c320384ca19b5d01f065fcfbd1; expires=Sun, 10 Mar 2024 20:26:38 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
whampamp.com/?z=5087048&syncedCookie=true&rhd=false
302 Found 0 B URL HTTP/1.1 whampamp.com/?z=5087048&syncedCookie=true&rhd=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ET ADWARE_PUP Win32/Adware.Agent.NSU CnC Activity M2
POST /?z=5087048&syncedCookie=true&rhd=false HTTP/1.1
Host: whampamp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 451
Origin: http://whampamp.com
Connection: keep-alive
Referer: http://whampamp.com/afu.php?zoneid=5087048&var=5087048&rid=BPTR34PbLD67mf1dYD5JaA%3D%3D&rhd=false
Cookie: OAID=4bac14c320384ca19b5d01f065fcfbd1; oaidts=1678566398
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 11 Mar 2023 20:26:38 GMT
Content-Length: 0
Connection: keep-alive
X-Trace-Id: bf00c6168407c5081067f50c5e0d991a
Link: <https://nexters.g2afse.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Referrer-Policy: no-referrer
Location: https://nexters.g2afse.com/click?pid=5&offer_id=7&sub1=5087048&sub8=658517806928892396&rdk=rk3
Access-Control-Allow-Origin: http://whampamp.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=4bac14c320384ca19b5d01f065fcfbd1; expires=Sun, 10 Mar 2024 20:26:38 GMT; path=/
oaidts=1678566398; expires=Sun, 10 Mar 2024 20:26:38 GMT; path=/
syncedCookie=true; expires=Sat, 18 Mar 2023 20:26:38 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, ETag, Backoff, Expires, Alert, Pragma, Cache-Control, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 11 Mar 2023 20:06:46 GMT
age: 1192
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 06ac93db0c891ae9d68efa202d5774d4
2e8708aa88080a7ee5976a54aaf5d0cde137bffd
5363465d8a92eb58b5dffa724acedd70bc793a978b128626d0cd6e8471d52b04
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1766
Cache-Control: max-age=100345
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 20:26:38 GMT
Etag: "640bc211-139"
Expires: Mon, 13 Mar 2023 00:19:03 GMT
Last-Modified: Fri, 10 Mar 2023 23:49:37 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 313
ocsp.sectigo.com/
200 OK 471 B IP
Hash b3b5dc2c47fd2aca051bb1417b50a184
8b358062aafa238468086e0885042e05294b7f6c
8ecb60fa3949a0ae7d582ccc8d0b5e79bebea8180493099eb83fb5fbeb308a70
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 11 Mar 2023 20:26:39 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 09 Mar 2023 14:07:09 GMT
Expires: Thu, 16 Mar 2023 14:07:08 GMT
Etag: "8b358062aafa238468086e0885042e05294b7f6c"
Cache-Control: max-age=408629,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7a6688988acfb4f3-OSL
nexters.g2afse.com/click?pid=5&offer_id=7&sub1=5087048&sub8=658517806928892396&rdk=rk3
302 Found 0 B URL HTTP/2 nexters.g2afse.com/click?pid=5&offer_id=7&sub1=5087048&sub8=658517806928892396&rdk=rk3
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=5&offer_id=7&sub1=5087048&sub8=658517806928892396&rdk=rk3 HTTP/1.1
Host: nexters.g2afse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 11 Mar 2023 20:26:39 GMT
content-length: 0
location: https://www.hero-wars.com/?l=loot12&m=registration&nx_source=adx_PropellerAds.Hero+Wars+Web+PropellerAds.pt-5087048.cid-Hero+Wars+Web+PropellerAds&aff_click=640ce3ff14a17e000121491f&pid=5&custom2=PropellerAds&custom3=Hero+Wars+Web+PropellerAds&custom4=5087048
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=640ce3ff14a17e000121491f; expires=Sun, 10 Mar 2024 20:26:39 GMT; secure; SameSite=None
afoffers={"7":1678566399}; expires=Sun, 10 Mar 2024 20:26:39 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d960a8d21b339ab0d7987e3b1eb16fdc
08d4430c549151295ee4e1dc8f24dbd3d9456b0b
522b75aa714f87a716a9a693a7c3ed1cab6e5b1725f20a67df46dec2967b5960
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "522B75AA714F87A716A9A693A7C3ED1CAB6E5B1725F20A67DF46DEC2967B5960"
Last-Modified: Thu, 09 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5673
Expires: Sat, 11 Mar 2023 22:01:12 GMT
Date: Sat, 11 Mar 2023 20:26:39 GMT
Connection: keep-alive
www.hero-wars.com/?l=loot12&m=registration&nx_source=adx_PropellerAds.Hero+Wars+Web+PropellerAds.pt-5087048.cid-Hero+Wars+Web+PropellerAds&aff_click=640ce3ff14a17e000121491f&pid=5&custom2=PropellerAds&custom3=Hero+Wars+Web+PropellerAds&custom4=5087048
200 OK 4.2 kB URL HTTP/2 www.hero-wars.com/?l=loot12&m=registration&nx_source=adx_PropellerAds.Hero+Wars+Web+PropellerAds.pt-5087048.cid-Hero+Wars+Web+PropellerAds&aff_click=640ce3ff14a17e000121491f&pid=5&custom2=PropellerAds&custom3=Hero+Wars+Web+PropellerAds&custom4=5087048
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4267)
Hash cb9ec1a4f170c469ea723386f8824fcb
a56be6499098b67b72e5e814f123477d882e5eee
2656f10506524d4e2be605eb95d5ed8d6a9a0468e3a5b345fe3f2732d30d032b
GET /?l=loot12&m=registration&nx_source=adx_PropellerAds.Hero+Wars+Web+PropellerAds.pt-5087048.cid-Hero+Wars+Web+PropellerAds&aff_click=640ce3ff14a17e000121491f&pid=5&custom2=PropellerAds&custom3=Hero+Wars+Web+PropellerAds&custom4=5087048 HTTP/1.1
Host: www.hero-wars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-methods: GET,POST,OPTIONS,DELETE,PUT
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range,x-auth-application-id,x-auth-network-ident,x-auth-player-id,x-auth-session-id,x-auth-session-init,x-auth-session-key,x-auth-signature,x-auth-token,x-auth-user-id,x-env-referrer,x-request-id,x-requested-with,x-server-time,x-env-library-version,x-auth-network-sign,authorization
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-akamai-transformed: 9 - 0 pmb=mRUM,2
content-encoding: gzip
expires: Sat, 11 Mar 2023 20:26:39 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 11 Mar 2023 20:26:39 GMT
content-length: 4202
set-cookie: XSRF-TOKEN=eyJpdiI6Im9YeGp3OVpNT1FLNG1EZjVtNXJIaXc9PSIsInZhbHVlIjoib0FFc004QXU4bFhVdGovZXJzb05KOS9xM0FxUEZSaFIwajhWS2pzYmM4eWpxM3RGWnlTVS9QbnBQZDJWQUpGbiIsIm1hYyI6IjM0Zjg4ZWQ2ZTM5M2NlNjFjODg4Yjk4ZWYzNDY5NmU1NzBhY2Y4YzZiM2E2MGE3YmM3NmYzMWRkYzlkZjRlYTAiLCJ0YWciOiIifQ%3D%3D; expires=Wed, 10-May-2023 20:26:39 GMT; Max-Age=5184000; path=/; samesite=lax
hero_wars_session=eyJpdiI6Ilhja2FpRWdwT29BU0RvNzZFNG44bGc9PSIsInZhbHVlIjoiTkRJSzkyNHNHTjhvTGhVNTZjOXI0UGNCa0xqT2hJbm5ibmQzRTlsYnRiNW1acEprMlVPdE1yMUswOUF3eG5qQiIsIm1hYyI6IjY0OTQ3MmMzNGNkNzcxMWQ2Nzc2M2RiMDcyYTJlNDBmNDIwMGYzM2Q5ZmRlZmIwMmU0ZDliMTBhMTgyZmE3ZjAiLCJ0YWciOiIifQ%3D%3D; expires=Wed, 10-May-2023 20:26:39 GMT; Max-Age=5184000; path=/; httponly; samesite=lax
hw_session_cookie=eyJpdiI6IlpHcktDbHNKK1JLVVRzYkhPRGVnRXc9PSIsInZhbHVlIjoiSUNPWHF5bEN5UlhOSjBlcTF1TFgrZVVta0pjWmF5bXZ1OEhsNTRZcUgvdHFQQjhZZmlSR2xEQ2NQR0NrSVRCeHIrYm4vSExBTDV2ZlFSU09lTjZqS1E9PSIsIm1hYyI6ImVjMDYxNzhiNjk4MWMxZmQ0NWNjNzE4ZThmNTVjZWIxMDk4NmUzZGUxMjVkYTkxZTBiMGE1OWI4Nzk5YjU1NjYiLCJ0YWciOiIifQ%3D%3D; path=/; httponly; samesite=lax
XSRF-TOKEN=eyJpdiI6Ijl1QmJ6ZHd4YUM0bXBIYWx6bWVCbkE9PSIsInZhbHVlIjoiQksybVNNSzc1QU5CcFZkWk5aQlVSQT09IiwibWFjIjoiYWVlMWM0M2MxN2M3NGIwMWU3YzM1ZGMwY2M5MGUzYmE2NjgzZjkzMmI5ZGQ1MWQwMzlhMzQ3NDNiMDFjMTA5MSIsInRhZyI6IiJ9; expires=Mon, 12-Mar-2018 20:26:39 GMT; Max-Age=0; path=/; domain=.hero-wars.com; httponly; samesite=lax
AKA_A2=A; expires=Sat, 11-Mar-2023 21:26:39 GMT; path=/; domain=hero-wars.com; secure; HttpOnly
ak_bmsc=0A425CB7D54CF7346EA0C543CF14A20E~000000000000000000000000000000~YAAQVAFJF86b2JuGAQAAYZ1a0hN4sz+2meJYQ75V/U0SXRulFqBHwHsoTKkCDX/ZP2kwfGiWzsUtFBe5bt1tXBjuv8OXdBvOCSVf4wCH36IAH5jkloWFy72hWXCxelYQiQkSUz95Kr/c+PjSPJDE6v2mPhEP1W3VgiyU5rtas3zKYxDqprXZfaHDiFyXA9ykLt0XUYNqHjvobzYV+YhS762YSMTuiRDOBzknGyAbmc+J7zVvpii6eIFfHOKC6J6t6ud5ydD1C0AbwVt39WhedB7ItF1cOOPyrS43Tiff31nii8+LBz/zGAy+s/J3PBbgB8VzlGQSGaGsjtmBLeEMbzBEK6nufAEaPDU/CObbhgYABTCoN5LNkBEMYFMy/5sgFT68EIf7HUMooA1A; Domain=.hero-wars.com; Path=/; Expires=Sat, 11 Mar 2023 22:26:39 GMT; Max-Age=7200; HttpOnly
server-timing: edge; dur=1, origin; dur=112, cdn-cache; desc=MISS, ak_p; desc="466268_390660436_62396320_11324_7675_8_0";dur=1
link: <https://heroesweb-a.akamaihd.net>;rel="preconnect",<https://heroesru-a.akamaihd.net>;rel="preconnect",<https://fonts.gstatic.com>;rel="preconnect",<https://cdn.onesignal.com>;rel="preconnect",<https://www.googletagmanager.com>;rel="preconnect",<https://connect.facebook.net>;rel="preconnect",<https://cdn.gsght.com>;rel="preconnect",<https://cdn.taboola.com>;rel="preconnect"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ljUem46FhSE5BWrD9LOTPg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Z+0UBXa5jiR4/ucFeAKO87+3mQI=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f400ce71f7bcba5802fd1f9382ea6645
0abb4a603c84d51aa6825854717b99d7f4e7fe17
1f694fda1949c4f68e042dec8b3e688c97473e805668b206574954ed1439450a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 20:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-NZL7Z2L
200 OK 91 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NZL7Z2L
IP
File type ASCII text, with very long lines (60353)
Hash dac6c127b5df120018ccfb5ef3632436
f2762e954658a2d40a8d36991fc355b907a07b48
db22c60067e01ca3139706a018f27143e0313d04251d087b6d381ea5da8c24b2
GET /gtm.js?id=GTM-NZL7Z2L HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 11 Mar 2023 20:26:39 GMT
expires: Sat, 11 Mar 2023 20:26:39 GMT
cache-control: private, max-age=900
last-modified: Sat, 11 Mar 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91293
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f400ce71f7bcba5802fd1f9382ea6645
0abb4a603c84d51aa6825854717b99d7f4e7fe17
1f694fda1949c4f68e042dec8b3e688c97473e805668b206574954ed1439450a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 20:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/css/landings.css
200 OK 34 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/css/landings.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (30394)
Hash c28ae5ff656ecfc5b4093c66823a6be8
315d35d08bfee82b26f14d24943cbe64c39090d6
6829044d1be4d0475d33f650264dd1fb2abc48efebec2b74e98675659bc43444
GET /i/hw-web/v2/362587/css/landings.css HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/css
Last-Modified: Fri, 10 Mar 2023 15:14:22 GMT
ETag: W/"640b494e-47980"
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 33733
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/js/libs/get_browser.lib.js
200 OK 1.3 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/js/libs/get_browser.lib.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (5580)
Hash 241b34c9666fd7ec55e55633a7517b7d
70fe7d9dee0f2a730d560df126d7b27b459f9ee7
08f803ff75e113c9d112b4c7d65da6d5d9c094ac5f59dcca3c37a3a17190317a
GET /i/hw-web/v2/362587/js/libs/get_browser.lib.js HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript; charset=utf-8
Last-Modified: Fri, 10 Mar 2023 15:14:34 GMT
ETag: W/"640b495a-15cd"
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 1338
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/js/locale/en/autoGenerateTranslate.js
200 OK 8.8 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/js/locale/en/autoGenerateTranslate.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21928), with no line terminators
Hash 6ac6038e3230cf43ee650cb48cb3a5aa
679f889b20b7ddd067356f5e2d189560d7654b87
ed4b34a84b40bd9cbaa9581d1fcae0fefd9a7462d3155ea5c3a4fffc8c56d639
GET /i/hw-web/v2/362587/js/locale/en/autoGenerateTranslate.js HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript; charset=utf-8
Last-Modified: Fri, 10 Mar 2023 15:14:34 GMT
ETag: W/"640b495a-55a8"
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 8803
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/style.css
200 OK 5.0 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/style.css
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (15115), with no line terminators
Hash 6b3c2706aee89a09f383e11e4dd96131
8d691c3fec665a4c2a643530a88781ed24b70aef
32d51560b156052513512d19d00f21d3adacf3969e55c8aeb8141d3eba8f33db
GET /i/hw-web/v2/362587/external_landings/loot12/style.css HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/css
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: W/"640b4957-3b0b"
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 5031
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/main.js
200 OK 79 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/main.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (63804), with no line terminators
Hash 3d79d575312eef94761ef98ad491781d
6ab7c1be0590a2d5a698d85fc3e0ee24880416ec
045c7ec2964c7128303df9da633f953520effdaf6d5a03c0c05b325e2d9a4e10
GET /i/hw-web/v2/362587/external_landings/loot12/main.js HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript; charset=utf-8
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: W/"640b4957-2e780"
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Content-Length: 79020
Connection: keep-alive
Vary: Accept-Encoding
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c5612c5131d59819b60bcd3123fbe1e
86f82bfa3a20987ac256d2efd06dc95c0df285e8
00fc14cc05fb85329d10ee97f1c959244f274c67d56a37f4eb8006acd0e867bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 20:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c5612c5131d59819b60bcd3123fbe1e
86f82bfa3a20987ac256d2efd06dc95c0df285e8
00fc14cc05fb85329d10ee97f1c959244f274c67d56a37f4eb8006acd0e867bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 20:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 289c60b957a8a6a09989af100a31de56
52b989681cdbccaa618d4bb7feb2e60aca1878d7
585ec9af69793a53b60877a618cc42a26ea2eb96df03883a17d03f21611f82b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 20:26:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleoptimize.com/optimize.js?id=GTM-NHMFT83
200 OK 45 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=GTM-NHMFT83
IP
File type ASCII text, with very long lines (2206)
Hash 9e48025e10f380af4a3e36fecbf41139
3fead5dfe82f1728f3736d3d6d570689306ad68c
e7eaadc5274d3c4bb3b067600d42b3fce4591d905b328ffa89df0a130835da22
GET /optimize.js?id=GTM-NHMFT83 HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 11 Mar 2023 20:26:39 GMT
expires: Sat, 11 Mar 2023 20:26:39 GMT
cache-control: private, max-age=900
last-modified: Sat, 11 Mar 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45002
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s.go-mpulse.net/boomerang/9FGZW-YWK8B-M3WQS-BV3DJ-4WMX2
200 OK 50 kB URL HTTP/2 s.go-mpulse.net/boomerang/9FGZW-YWK8B-M3WQS-BV3DJ-4WMX2
IP
File type C source, ASCII text, with very long lines (65103)
Hash 8991c3ec80ec8fbc41382a55679e3911
8cc8cee91d671038acd9e3ae611517d6801b0909
f55bacd4a20fef96f5c736a912d1947be85c268df18003395e511c1e860e8800
GET /boomerang/9FGZW-YWK8B-M3WQS-BV3DJ-4WMX2 HTTP/1.1
Host: s.go-mpulse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cache-control: max-age=604800
content-encoding: br
last-modified: Thu, 23 Feb 2023 12:28:31 GMT
timing-allow-origin: *
vary: Accept-Encoding
x-n: S
content-length: 50393
date: Sat, 11 Mar 2023 20:26:39 GMT
X-Firefox-Spdy: h2
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/roboto_condensed_regular-3f8f20.woff
200 OK 25 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/roboto_condensed_regular-3f8f20.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 24952, version 1.1\012- data
Hash e23c7d2768415430d64e7a06dc02a185
13677bc658eee394213bab72c0bff752f4f97036
0c4b058b31abf3088ecb3e40be509613a0f7139ce503c5cfbb4c62379e65f63f
GET /i/hw-web/v2/362587/external_landings/loot12/assets/roboto_condensed_regular-3f8f20.woff HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff
Content-Length: 24952
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: "640b4957-6178"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Connection: keep-alive
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/images/pwa/favicon-16x16.png
200 OK 246 B URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/images/pwa/favicon-16x16.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 092dd0cc004db08ff98265037350b81a
bbbdf08c3f279ea318fe308202ca65a74bc1c001
c0723f5312022bead9fff56a976c8be0915470be2ea0f441d785de1632ceec73
GET /i/hw-web/v2/362587/images/pwa/favicon-16x16.png HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 246
Last-Modified: Fri, 10 Mar 2023 15:14:34 GMT
ETag: "640b495a-f6"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Connection: keep-alive
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/images/pwa/apple-touch-icon-180x180.png
200 OK 56 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/images/pwa/apple-touch-icon-180x180.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 3fe4985b592380ae38f1c893b38e2313
8360179cf29132c4e7546efb2f73f395d7229add
d07470888d14cfcd84ae639fb9edbb0573a7f5558f963ec381a10acd4e7a838f
GET /i/hw-web/v2/362587/images/pwa/apple-touch-icon-180x180.png HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 55646
Last-Modified: Fri, 10 Mar 2023 15:14:34 GMT
ETag: "640b495a-d95e"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Connection: keep-alive
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/logo-7d56fa8.webp
200 OK 11 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/logo-7d56fa8.webp
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7793d407d927d53de9fe0950f736ec1f
c91ccf4d88c6f497b40fc11811b7260e6170aa5b
3c74c17a2d54a70b1411f25d149476011ce8bb8b634ce64ea248290760b75b68
GET /i/hw-web/v2/362587/external_landings/loot12/assets/logo-7d56fa8.webp HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/webp
Content-Length: 10800
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: "640b4957-2a30"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Connection: keep-alive
cdn.taboola.com/libtrc/unip/1171685/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1171685/tfa.js
IP
File type ASCII text, with very long lines (59032)
Hash ec167c0ee08fa33a7a6161aa7f7c6c70
87a17ddbd4cbef4851315da5e11d9089f55b8502
dea345875146e50eb1a2ffe608b3a272793815f1ab744cd92cd2604d251504d4
GET /libtrc/unip/1171685/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 5ZHfD7W5VcgCAJtsXtIGNEj7lL64+ENF12gwkqWmiabomkSFutJOeGE/R6+HT3DZDA32MIioizs=
x-amz-request-id: ZAMM8KPFPVNHQFCZ
x-amz-replication-status: COMPLETED
last-modified: Sun, 05 Mar 2023 11:11:21 GMT
etag: "e750890d0e914de9b68710480bc1c9e8"
x-amz-server-side-encryption: AES256
x-amz-version-id: 1KYKVmI1HthhomzrHITQ6p5dD4k7ywYZ
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 11 Mar 2023 20:26:39 GMT
via: 1.1 varnish
age: 26
x-served-by: cache-bma1667-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1678566400.916234,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 2
access-control-allow-origin: *
content-length: 18171
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b61032468a516115ba65d181952db420
40fe36b5cccce0cc31b7a61f57a58ac00e702e9c
9bda57d5c579bf6d973cbbffbd05714f7b5d0338c334a5f356f43ba2d4a2ab27
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4656
Cache-Control: max-age=159376
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 20:26:39 GMT
Etag: "640c9d5f-1d7"
Expires: Mon, 13 Mar 2023 16:42:55 GMT
Last-Modified: Sat, 11 Mar 2023 15:25:19 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash b61032468a516115ba65d181952db420
40fe36b5cccce0cc31b7a61f57a58ac00e702e9c
9bda57d5c579bf6d973cbbffbd05714f7b5d0338c334a5f356f43ba2d4a2ab27
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5002
Cache-Control: max-age=159722
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 20:26:39 GMT
Etag: "640c9d5f-1d7"
Expires: Mon, 13 Mar 2023 16:48:41 GMT
Last-Modified: Sat, 11 Mar 2023 15:25:19 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 43d943c7499b27a8ef3972fa070f6756
59303c79335aa0a9f529c0f6166f99c3e650088c
96ab29f531694f1b8e5d2f031e16581fe1052636fb32c5cd96d55b824d6539b2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: +7YNar/4uFRQViDOCSbQClPoAMSLHBImjfIynkl9o34Gi1gD/3WcVh4xh0j7oHrgWQcJ/WIiXzaX7IKf+uOMIw==
content-length: 27907
x-fb-trip-id: 1679558926
date: Sat, 11 Mar 2023 20:26:39 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash b0d68acecdc35cf1d890c96590fe1d9f
284e89c73e3be433d63a15a2b8047c7420da0564
e93e8d650065153e5155f5097864644f62c52f5774df59d8798623a67b2e2c62
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 89989245aa7e6b1fd98ca8cd1c9773c3
etag: "e9a9ad092d11b44ce8a08c2fa038b277"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 11 Mar 2023 20:28:54 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: sNaKzs3DXPHYkMllkP4dnw==
x-fb-debug: 7pdg4PAv0uGneSDhxcAydSpMSLzTPVG3c8mPmae5Pyl56RHkUUxw52k4TUWh/jnKht50Y3KfjnRysrbGYNJ4Bw==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Sat, 11 Mar 2023 20:26:39 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 11 Mar 2023 19:53:25 GMT
expires: Sat, 11 Mar 2023 21:53:25 GMT
cache-control: public, max-age=7200
age: 1994
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b61032468a516115ba65d181952db420
40fe36b5cccce0cc31b7a61f57a58ac00e702e9c
9bda57d5c579bf6d973cbbffbd05714f7b5d0338c334a5f356f43ba2d4a2ab27
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5003
Cache-Control: max-age=159722
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 20:26:40 GMT
Etag: "640c9d5f-1d7"
Expires: Mon, 13 Mar 2023 16:48:42 GMT
Last-Modified: Sat, 11 Mar 2023 15:25:19 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js?hash=d1a372da6dee9759f05e6a4bb3906c83
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=d1a372da6dee9759f05e6a4bb3906c83
IP
File type ASCII text, with very long lines (12492)
Hash 603ae2eab5cc326f7484729cb4a3767f
6820e92602b8d1d5fded68b78cd62650dcd26012
3916a0d6a70f786d3f83b0e7fc2d7c83fedbb951b940668c9ea4ce6f7ea452a9
GET /en_US/sdk.js?hash=d1a372da6dee9759f05e6a4bb3906c83 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 6fd8f47c2299edc4b10d0bb79423a909
etag: "0f0e1676e798aa8f1e537b04ffc28234"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 10 Mar 2024 19:03:20 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: YDri6rXMMm90hHKctKN2fw==
x-fb-debug: mbBiKsUw0529A5Y1nYiQHTJGwUMJd6bd3R05Jaaeg8RHSY6Ks6/rnik6VMX/T8sruTjBV4Sx9qFNXGOQ7LJqKQ==
content-length: 87103
x-fb-trip-id: 1679558926
date: Sat, 11 Mar 2023 20:26:40 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c.go-mpulse.net/api/config.json?key=9FGZW-YWK8B-M3WQS-BV3DJ-4WMX2&d=www.hero-wars.com&t=5595221&v=1.720.0&sl=0&si=12df190f-b02d-46ce-9670-7e5c322eae24-rrdi4g&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=786156
200 OK 51 B URL HTTP/1.1 c.go-mpulse.net/api/config.json?key=9FGZW-YWK8B-M3WQS-BV3DJ-4WMX2&d=www.hero-wars.com&t=5595221&v=1.720.0&sl=0&si=12df190f-b02d-46ce-9670-7e5c322eae24-rrdi4g&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=786156
IP
File type JSON data\012- , ASCII text
Hash e7c2e0dcc2eed5518d03ef149af84d23
25a693bc8980fa9d9db9de7b0d354d1f3f7da183
d9e526b111d9cdd231ec8f33deee5de4f7c9df282e680638ae1aae480a7c6942
GET /api/config.json?key=9FGZW-YWK8B-M3WQS-BV3DJ-4WMX2&d=www.hero-wars.com&t=5595221&v=1.720.0&sl=0&si=12df190f-b02d-46ce-9670-7e5c322eae24-rrdi4g&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=786156 HTTP/1.1
Host: c.go-mpulse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: private, max-age=120, stale-while-revalidate=60, stale-if-error=120
Timing-Allow-Origin: *
Content-Length: 51
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
Content-Type: application/json
trc.taboola.com/1171685/log/3/unip?en=view_content&tim=1678566400652&vi=1678566400639&ri=60850e6c98dedffef8a2c77afaf0fa71&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048&tos=142&ssd=1&scd=0
204 No Content 0 B URL HTTP/2 trc.taboola.com/1171685/log/3/unip?en=view_content&tim=1678566400652&vi=1678566400639&ri=60850e6c98dedffef8a2c77afaf0fa71&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048&tos=142&ssd=1&scd=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1171685/log/3/unip?en=view_content&tim=1678566400652&vi=1678566400639&ri=60850e6c98dedffef8a2c77afaf0fa71&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048&tos=142&ssd=1&scd=0 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.hero-wars.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 11 Mar 2023 20:26:40 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1678566400.114386,VS0,VE88
x-vcl-time-ms: 88
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1867293949991560&ev=PageView&dl=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048&rl=&if=false&ts=1678566400842&sw=1280&sh=1024&v=2.9.98&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1678566400842.1745929742&it=1678566400677&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1867293949991560&ev=PageView&dl=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048&rl=&if=false&ts=1678566400842&sw=1280&sh=1024&v=2.9.98&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1678566400842.1745929742&it=1678566400677&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1867293949991560&ev=PageView&dl=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048&rl=&if=false&ts=1678566400842&sw=1280&sh=1024&v=2.9.98&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1678566400842.1745929742&it=1678566400677&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 11 Mar 2023 20:26:40 GMT
X-Firefox-Spdy: h2
trc.taboola.com/1123625/trc/3/json?tim=1678566400784&data=%7B%22id%22%3A277%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1678566400639%2C%22cv%22%3A%2220230302-10-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.hero-wars.com%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnextersglobal-herowarsweb-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1678566400652%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22tos%22%3A11%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 1.4 kB URL HTTP/2 trc.taboola.com/1123625/trc/3/json?tim=1678566400784&data=%7B%22id%22%3A277%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1678566400639%2C%22cv%22%3A%2220230302-10-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.hero-wars.com%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnextersglobal-herowarsweb-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1678566400652%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22tos%22%3A11%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
File type ASCII text, with very long lines (2583), with no line terminators
Hash 28a16696c2ccf6e9b5b87259ef116200
b99d56c02c74955d479270ed50d0830d1669a55b
162adfe72a6dd90dff3df69554b864b69b768503c750aba6f40535b77277efda
GET /1123625/trc/3/json?tim=1678566400784&data=%7B%22id%22%3A277%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1678566400639%2C%22cv%22%3A%2220230302-10-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.hero-wars.com%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback1%22%2C%22qs%22%3A%22%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnextersglobal-herowarsweb-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1678566400652%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22tos%22%3A11%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 11 Mar 2023 20:26:40 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1678566400.120541,VS0,VE96
vary: Accept-Encoding
x-vcl-time-ms: 96
X-Firefox-Spdy: h2
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/bg-82ada9e.webp
200 OK 94 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/bg-82ada9e.webp
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5e01b6d96f820dcb9d020161d7b11301
10d9bceb738145a0516267146d37d1d726eadb39
7210a3b417519430aa48ac7442b9110d21b6f1ac1be12fcae1f3dbf8bf54820c
GET /i/hw-web/v2/362587/external_landings/loot12/assets/bg-82ada9e.webp HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/webp
Content-Length: 94048
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: "640b4957-16f60"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/logo-265449.png
200 OK 21 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/logo-265449.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 138 x 98, 8-bit/color RGBA, non-interlaced\012- data
Hash 4602852b041aaf1c4074b12c068e7e49
88ff677c03819753cf4ab25d482ab6e2b5849b4b
cb779bffbb7a0af2c273eaab74e089713873efd019500a02df5297396d264228
GET /i/hw-web/v2/362587/external_landings/loot12/assets/logo-265449.png HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 20637
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: "640b4957-509d"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/button-8d46f8f.webp
200 OK 11 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/button-8d46f8f.webp
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1115e37ff374aeb3684da9c2ae051919
ab8fc7fb033cd789f2a1da0093bb11579249458f
a4c90e84d40c35794489a7c3968685484c9f171e38b6469cfe7ce68d7f471d11
GET /i/hw-web/v2/362587/external_landings/loot12/assets/button-8d46f8f.webp HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/webp
Content-Length: 11126
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: "640b4957-2b76"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/ribbon-top-2b1e9d7.webp
200 OK 20 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/ribbon-top-2b1e9d7.webp
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash f7140679756da62039bead7bfc33c11a
fa55243982f1a7fc9e1c42b50dbcd858aa84f881
31f479c3315f7258b0f646303b777f482e1d9847766cf960e7aea31dc5a54341
GET /i/hw-web/v2/362587/external_landings/loot12/assets/ribbon-top-2b1e9d7.webp HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/webp
Content-Length: 19738
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: "640b4957-4d1a"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/tobigreekcyrillic-regular-22b3c9.woff
200 OK 43 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/tobigreekcyrillic-regular-22b3c9.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 43388, version 0.0\012- data
Hash b2c886bff572133b9f178fb222929c40
de0310b87cdd61e62372759c10b8777edd54ad27
b77c1c713aea9145f5910eba28580904cc7d5a3eb3480738bf7b76adcdb88588
GET /i/hw-web/v2/362587/external_landings/loot12/assets/tobigreekcyrillic-regular-22b3c9.woff HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff
Content-Length: 43388
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: "640b4957-a97c"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/gal_with_lutohata-9712d65.webp
200 OK 178 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/gal_with_lutohata-9712d65.webp
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Size 178 kB (178038 bytes)
Hash 6c198a37e02eb9037043da187e6fae10
5cf51fd25a5ceb40f489339bfe4fa68a194521ed
7f6c05c86e601a0e7bcdaa20337328e59cd6d69d5ccf3a0c26eeb8561c45c4c7
GET /i/hw-web/v2/362587/external_landings/loot12/assets/gal_with_lutohata-9712d65.webp HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/webp
Content-Length: 178038
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: "640b4957-2b776"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/roboto_condensed_bold-945157.woff
200 OK 26 kB URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/external_landings/loot12/assets/roboto_condensed_bold-945157.woff
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 25492, version 1.1\012- data
Hash c8c3e82a72908913a24a8a833d25ae22
e4124905dffb268af81824b752460e17dcde57bf
5b74f9ae1a7694d6be867b6ba837f1b60dc5c245b605dfcc8070cf3880dff2e8
GET /i/hw-web/v2/362587/external_landings/loot12/assets/roboto_condensed_bold-945157.woff HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff
Content-Length: 25492
Last-Modified: Fri, 10 Mar 2023 15:14:31 GMT
ETag: "640b4957-6394"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
www.hero-wars.com/landing_loaded
200 OK 44 B URL HTTP/2 www.hero-wars.com/landing_loaded
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 0abe67293af335f2189a2ba8fd737da5
08d0e71b7625d4364e9f01eb583343ca1c6d0f8f
fd2f79eac6a346cf9255f3c8ac7157ef0d70686332a0d07881f4a58c79a8dfa6
POST /landing_loaded HTTP/1.1
Host: www.hero-wars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.hero-wars.com/?l=loot12&m=registration&nx_source=adx_PropellerAds.Hero+Wars+Web+PropellerAds.pt-5087048.cid-Hero+Wars+Web+PropellerAds&aff_click=640ce3ff14a17e000121491f&pid=5&custom2=PropellerAds&custom3=Hero+Wars+Web+PropellerAds&custom4=5087048
Content-Type: application/json
X-CSRF-Token: NujpPP2DZLsFxDjTNMOnhpPdYcXzJ3zuRLr7loAN
Origin: https://www.hero-wars.com
Content-Length: 297
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Im9YeGp3OVpNT1FLNG1EZjVtNXJIaXc9PSIsInZhbHVlIjoib0FFc004QXU4bFhVdGovZXJzb05KOS9xM0FxUEZSaFIwajhWS2pzYmM4eWpxM3RGWnlTVS9QbnBQZDJWQUpGbiIsIm1hYyI6IjM0Zjg4ZWQ2ZTM5M2NlNjFjODg4Yjk4ZWYzNDY5NmU1NzBhY2Y4YzZiM2E2MGE3YmM3NmYzMWRkYzlkZjRlYTAiLCJ0YWciOiIifQ%3D%3D; hero_wars_session=eyJpdiI6Ilhja2FpRWdwT29BU0RvNzZFNG44bGc9PSIsInZhbHVlIjoiTkRJSzkyNHNHTjhvTGhVNTZjOXI0UGNCa0xqT2hJbm5ibmQzRTlsYnRiNW1acEprMlVPdE1yMUswOUF3eG5qQiIsIm1hYyI6IjY0OTQ3MmMzNGNkNzcxMWQ2Nzc2M2RiMDcyYTJlNDBmNDIwMGYzM2Q5ZmRlZmIwMmU0ZDliMTBhMTgyZmE3ZjAiLCJ0YWciOiIifQ%3D%3D; hw_session_cookie=eyJpdiI6IlpHcktDbHNKK1JLVVRzYkhPRGVnRXc9PSIsInZhbHVlIjoiSUNPWHF5bEN5UlhOSjBlcTF1TFgrZVVta0pjWmF5bXZ1OEhsNTRZcUgvdHFQQjhZZmlSR2xEQ2NQR0NrSVRCeHIrYm4vSExBTDV2ZlFSU09lTjZqS1E9PSIsIm1hYyI6ImVjMDYxNzhiNjk4MWMxZmQ0NWNjNzE4ZThmNTVjZWIxMDk4NmUzZGUxMjVkYTkxZTBiMGE1OWI4Nzk5YjU1NjYiLCJ0YWciOiIifQ%3D%3D; AKA_A2=A; ak_bmsc=0A425CB7D54CF7346EA0C543CF14A20E~000000000000000000000000000000~YAAQVAFJF86b2JuGAQAAYZ1a0hN4sz+2meJYQ75V/U0SXRulFqBHwHsoTKkCDX/ZP2kwfGiWzsUtFBe5bt1tXBjuv8OXdBvOCSVf4wCH36IAH5jkloWFy72hWXCxelYQiQkSUz95Kr/c+PjSPJDE6v2mPhEP1W3VgiyU5rtas3zKYxDqprXZfaHDiFyXA9ykLt0XUYNqHjvobzYV+YhS762YSMTuiRDOBzknGyAbmc+J7zVvpii6eIFfHOKC6J6t6ud5ydD1C0AbwVt39WhedB7ItF1cOOPyrS43Tiff31nii8+LBz/zGAy+s/J3PBbgB8VzlGQSGaGsjtmBLeEMbzBEK6nufAEaPDU/CObbhgYABTCoN5LNkBEMYFMy/5sgFT68EIf7HUMooA1A; _gcl_au=1.1.193362951.1678566400; _fbp=fb.1.1678566400842.1745929742; RT="z=1&dm=www.hero-wars.com&si=12df190f-b02d-46ce-9670-7e5c322eae24&ss=lf4f3f2r&sl=0&tt=0"
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: https://www.hero-wars.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST,OPTIONS,DELETE,PUT
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range,x-auth-application-id,x-auth-network-ident,x-auth-player-id,x-auth-session-id,x-auth-session-init,x-auth-session-key,x-auth-signature,x-auth-token,x-auth-user-id,x-env-referrer,x-request-id,x-requested-with,x-server-time,x-env-library-version,x-auth-network-sign,authorization
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
expires: Sat, 11 Mar 2023 20:26:40 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 11 Mar 2023 20:26:40 GMT
content-length: 44
set-cookie: XSRF-TOKEN=eyJpdiI6IlMrOHhXMU5ZNWJNVVp1bjlwZ2tUemc9PSIsInZhbHVlIjoiYkFHeEsxVDYzelM5K2tYOVVIcUFEVG43M1gvdW9yRWQ1MW8vdXdsUSt3dGI4aXJpQ3VUN2VoZlhsbk4yTlhMSyIsIm1hYyI6ImE3YzM5MmUxZTY1NTk1MDU1N2I2N2RhYTQyN2ZlOGYxMTIxZGY0OGQxNDkyNDAyMjE1Yjk2NTQ3MDQzYjZmZTYiLCJ0YWciOiIifQ%3D%3D; expires=Wed, 10-May-2023 20:26:40 GMT; Max-Age=5184000; path=/; samesite=lax
hero_wars_session=eyJpdiI6ImZEbjZ3RmtLUWZKQTBxdlBma1JPUHc9PSIsInZhbHVlIjoiRHdKZ2poeHlSZDk5aUQ4Nm52K3lRS2lwUWRqZnVhV0E0YSs5VjFjZ1ZqTzVMMFVSLzRpRnRCSk9XdEY3Z1EvdyIsIm1hYyI6IjE1NzAwMzg4NTE1OTAwMmVjZjk5YzU0N2NmNjllODA0NzVlYjkyZjgwZjQ5N2FlNDJkYmEzYmM1NTkzNDcxOTgiLCJ0YWciOiIifQ%3D%3D; expires=Wed, 10-May-2023 20:26:40 GMT; Max-Age=5184000; path=/; httponly; samesite=lax
hw_session_cookie=eyJpdiI6Ing0TmEwTG5HWkcxY0pWejR4eWdOT1E9PSIsInZhbHVlIjoiaG9kYXptc2gyaTg2Vk11NnNya1FBQT09IiwibWFjIjoiNTY0Yjk1YTU3OGJlYzJkODFhNGJjZjQ3ZTY2ODljYTZjMjg4YzNmOGRlNGE1NjI2MmRiZmE5MDNlYzNiMjMzZCIsInRhZyI6IiJ9; expires=Mon, 12-Mar-2018 20:26:40 GMT; Max-Age=0; path=/; httponly; samesite=lax
bm_sv=48D817CAEDD5F30C334CF78DE30648FD~YAAQVAFJF8+b2JuGAQAAp6Fa0hNdbpVdz0z//ds0M2reXE+7dpin01kIfqxdr7hz97k5qe6CDMAJZIfT3yToGhfBufyd8jfa9RnZM+chPEr6JMMn4CD+cSKmjRYx0oj4kox3guSlVIsGMTBVrh5rP6uaA60k0f7D/Qjy9Z118PSmAj0tnwo9b7AjXl7HVCKRMxjsV38jtu4xCh+9FvjmAwZpA1aPBFMeW/5ZPQiLlLUxYV2mfCNB4X14849hVAy0giRz~1; Domain=.hero-wars.com; Path=/; Expires=Sat, 11 Mar 2023 22:26:40 GMT; Max-Age=7200; Secure
server-timing: edge; dur=4, origin; dur=61, cdn-cache; desc=MISS, ak_p; desc="466268_390660436_62396431_6608_3743_13_0";dur=1
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1cb274086a7fc07be41dfeb65ec1dbf
c6339993814eda4b9629ef179222b060d1f5143b
b3fbd505775ab4d16c1a8b22e367b9d3b2698bd920d0c4578659b6c63e3d3f6f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B3FBD505775AB4D16C1A8B22E367B9D3B2698BD920D0C4578659B6C63E3D3F6F"
Last-Modified: Sat, 11 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13054
Expires: Sun, 12 Mar 2023 00:04:14 GMT
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1cb274086a7fc07be41dfeb65ec1dbf
c6339993814eda4b9629ef179222b060d1f5143b
b3fbd505775ab4d16c1a8b22e367b9d3b2698bd920d0c4578659b6c63e3d3f6f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B3FBD505775AB4D16C1A8B22E367B9D3B2698BD920D0C4578659B6C63E3D3F6F"
Last-Modified: Sat, 11 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13054
Expires: Sun, 12 Mar 2023 00:04:14 GMT
Date: Sat, 11 Mar 2023 20:26:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76ea6f1d-d65b-4550-b727-09d6d7e7fab3.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76ea6f1d-d65b-4550-b727-09d6d7e7fab3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4d9295781f434de5c7731590c186d0c
c19364899056b4283f99b30df0074ad57e367be5
d35e5d7597d510f3de4b5d84ed5e3cbe22f54e5760a4f88e6e806b7a0386d973
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76ea6f1d-d65b-4550-b727-09d6d7e7fab3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7383
x-amzn-requestid: 8ea3fffc-3018-4b8f-8286-e4bd6f8757e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BjbaIGzOoAMF1Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ad90d-7c56ff1d305ea8cb3c2d8cdd;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 07:15:25 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: N_3qH36AsdQCYUle5th8sIU4rdDtsk9tEuxR8C2fRLBGcAZuXaBgVw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Sat, 11 Mar 2023 13:34:35 GMT
age: 24725
etag: "c19364899056b4283f99b30df0074ad57e367be5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af6ca30-ca1c-47f5-b5d3-50da9648b6c5.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af6ca30-ca1c-47f5-b5d3-50da9648b6c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c23372c93f0515a6133f5adc26c1712
3c8388cf727cb7007308ee0b42da57f5f0db489a
e24a8f21c65c6bc26698c85adb81f3712f4df9ab2dbe8075a77ea947640f8be6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af6ca30-ca1c-47f5-b5d3-50da9648b6c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5512
x-amzn-requestid: db69d563-a267-49fd-a63a-9de5282ac108
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BlZKRGW-IAMFmuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ba241-69cb4960369f1da8583e36db;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 4ig8opVHxFZw80nWtOo-qVgyLCIIzyP5zokOMJjsDFNnsdAgYNyJNA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 5292c0d5844327feadb38f1efe42ebc6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 10 Mar 2023 21:49:27 GMT
age: 81433
etag: "3c8388cf727cb7007308ee0b42da57f5f0db489a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1d9563-2bb7-4a5d-bd0d-a3950608df7a.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1d9563-2bb7-4a5d-bd0d-a3950608df7a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad3d235a450782752b4d698aed69f5e5
dbe55775ec1fb59c27102c6d83a5aace982118bf
47e2d3149bda22636f5fea2b41123665c29148732152fad9cefcb3e5cc97dfba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1d9563-2bb7-4a5d-bd0d-a3950608df7a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6547
x-amzn-requestid: dccbf3d1-7f72-4c37-adbb-0e8fe5e7e736
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BjCuAG8boAMFj9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ab18c-270f92d8069f4a1b118a958a;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 04:26:52 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: jfX7K5Og-Alzp9a8AoRd24C0qiP-mpRYCX6gZ-_Y2NjG8n75FzB6iQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google
date: Sat, 11 Mar 2023 06:53:43 GMT
age: 48777
etag: "dbe55775ec1fb59c27102c6d83a5aace982118bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0af9826-fade-456f-baa4-11909578478d.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0af9826-fade-456f-baa4-11909578478d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e828c35d1a85eabbe81b801d6b1ad33
040b83c5c73a4b02c65e44408b8f2385e0002791
5c27268f33fc448dc3824ae0ad3ed411a204fbc076a3356b3381b2495036c6a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0af9826-fade-456f-baa4-11909578478d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7384
x-amzn-requestid: d70a1ba5-1bc7-427b-b1cf-cc93b97c2b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BlZLmGTmoAMF7lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ba249-05a5a68e7d2e2b343b802da1;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 21:34:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: cSoCUuc34dJLGP6iCAQ2C28mIoPDJ3lq4Hef798WETQSiLoCqF8RDg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Fri, 10 Mar 2023 21:51:53 GMT
age: 81287
etag: "040b83c5c73a4b02c65e44408b8f2385e0002791"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4074a978-99d0-47aa-8c85-466557c98632.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4074a978-99d0-47aa-8c85-466557c98632.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57a25c00fa7cdf85ee8a0c2c7747ec92
47f208a0c9379c760d2cd7bb3d825dcff10ecaf1
91398352ace48027b953778032d734318460d3a1c80ee674586bd2e8df241946
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4074a978-99d0-47aa-8c85-466557c98632.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6461
x-amzn-requestid: 9a3e415b-c4d0-4160-941e-7cd26795e573
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BlZKREojIAMFTtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ba241-16c54b003338f3c90bd958fc;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: q142gKfUusbLoY5V61hXuDpCm2g1tyiv10UkHHzjHuL7_eQb7kXqCw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Fri, 10 Mar 2023 21:49:35 GMT
age: 81425
etag: "47f208a0c9379c760d2cd7bb3d825dcff10ecaf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a3e2fcb-dbf5-4fe9-a56c-b36d9c8bdd3b.gif
200 OK 510 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a3e2fcb-dbf5-4fe9-a56c-b36d9c8bdd3b.gif
IP
File type GIF image data, version 89a, 296 x 148\012- data
Size 510 kB (509554 bytes)
Hash 8aaaf2f10ef3b4bdba0a3e87363f431a
2395f71c326974fad24daac2eae607dda08a2c26
2612bdecbf6dc5e349d69c92bd557d35b41b3672d361f343d19123d0ce72de9c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a3e2fcb-dbf5-4fe9-a56c-b36d9c8bdd3b.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 509554
x-amzn-requestid: 358fb422-72a7-4e2a-b173-2f57ec2b5f51
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BfjO0HCGoAMFrrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64094bf8-2ac79d011c36a5ee28c36d64;Sampled=0
x-amzn-remapped-date: Thu, 09 Mar 2023 03:01:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: zLT96BrXwF1sZAxojd9GWpDdKkDj741TruR6scOYhSZK2HljA_6fZA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Sat, 11 Mar 2023 05:57:14 GMT
age: 52166
etag: "2395f71c326974fad24daac2eae607dda08a2c26"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-LFE4ZMGDNX>m=45je3360&_p=1239774532&gcs=G100&cid=1629994243.1678566401&ul=en-us&sr=1280x1024&_s=1&sid=1678566400&sct=1&seg=0&dl=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048&dt=Hero%20Wars%20%7C%20Online%20action%20game%20%7C%20RPG&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-LFE4ZMGDNX>m=45je3360&_p=1239774532&gcs=G100&cid=1629994243.1678566401&ul=en-us&sr=1280x1024&_s=1&sid=1678566400&sct=1&seg=0&dl=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048&dt=Hero%20Wars%20%7C%20Online%20action%20game%20%7C%20RPG&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-LFE4ZMGDNX>m=45je3360&_p=1239774532&gcs=G100&cid=1629994243.1678566401&ul=en-us&sr=1280x1024&_s=1&sid=1678566400&sct=1&seg=0&dl=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048&dt=Hero%20Wars%20%7C%20Online%20action%20game%20%7C%20RPG&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.hero-wars.com
date: Sat, 11 Mar 2023 20:26:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
trc-events.taboola.com/1123625/log/3/unip?en=pre_d_eng_tb&tos=1559&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1678566402200&vi=1678566400639&ri=0e9cfcd7138fb9850f243ce38c888fab&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1123625/log/3/unip?en=pre_d_eng_tb&tos=1559&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1678566402200&vi=1678566400639&ri=0e9cfcd7138fb9850f243ce38c888fab&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1123625/log/3/unip?en=pre_d_eng_tb&tos=1559&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1678566402200&vi=1678566400639&ri=0e9cfcd7138fb9850f243ce38c888fab&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 11 Mar 2023 20:26:41 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.hero-wars.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1171685/log/3/unip?en=pre_d_eng_tb&tos=1560&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1678566402201&vi=1678566400639&ri=60850e6c98dedffef8a2c77afaf0fa71&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1171685/log/3/unip?en=pre_d_eng_tb&tos=1560&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1678566402201&vi=1678566400639&ri=60850e6c98dedffef8a2c77afaf0fa71&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1171685/log/3/unip?en=pre_d_eng_tb&tos=1560&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1678566402201&vi=1678566400639&ri=60850e6c98dedffef8a2c77afaf0fa71&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 11 Mar 2023 20:26:41 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.hero-wars.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1123625/log/3/unip?en=pre_d_eng_tb&tos=4562&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1678566405203&vi=1678566400639&ri=0e9cfcd7138fb9850f243ce38c888fab&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1123625/log/3/unip?en=pre_d_eng_tb&tos=4562&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1678566405203&vi=1678566400639&ri=0e9cfcd7138fb9850f243ce38c888fab&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1123625/log/3/unip?en=pre_d_eng_tb&tos=4562&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1678566405203&vi=1678566400639&ri=0e9cfcd7138fb9850f243ce38c888fab&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 11 Mar 2023 20:26:44 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.hero-wars.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1171685/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1678566405205&vi=1678566400639&ri=60850e6c98dedffef8a2c77afaf0fa71&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1171685/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1678566405205&vi=1678566400639&ri=60850e6c98dedffef8a2c77afaf0fa71&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1171685/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=0&ssd=1&est=1678566400640&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1678566405205&vi=1678566400639&ri=60850e6c98dedffef8a2c77afaf0fa71&ref=null&cv=20230302-10-RELEASE&item-url=https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hero-wars.com
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 11 Mar 2023 20:26:44 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.hero-wars.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
heroesweb-a.akamaihd.net/i/hw-web/v2/362587/js/landingSocials.js
200 OK 0 B URL HTTP/1.1 heroesweb-a.akamaihd.net/i/hw-web/v2/362587/js/landingSocials.js
IP
ASN #20940 Akamai International B.V.
GET /i/hw-web/v2/362587/js/landingSocials.js HTTP/1.1
Host: heroesweb-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript; charset=utf-8
Last-Modified: Fri, 10 Mar 2023 15:14:34 GMT
ETag: W/"640b495a-4c41e"
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Cache-Control: max-age=2592000
Date: Sat, 11 Mar 2023 20:26:39 GMT
Content-Length: 112334
Connection: keep-alive
Vary: Accept-Encoding
fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap
IP
GET /css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 11 Mar 2023 20:26:39 GMT
date: Sat, 11 Mar 2023 20:26:39 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Noto+Sans+SC:wght@400;500&family=Noto+Sans:ital@0;1&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Noto+Sans+SC:wght@400;500&family=Noto+Sans:ital@0;1&display=swap
IP
GET /css2?family=Noto+Sans+SC:wght@400;500&family=Noto+Sans:ital@0;1&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://heroesweb-a.akamaihd.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 11 Mar 2023 20:26:39 GMT
date: Sat, 11 Mar 2023 20:26:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
trc.taboola.com/1171685/trc/3/json?tim=1678566400643&data=%7B%22id%22%3A476%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1678566400639%2C%22cv%22%3A%2220230302-10-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.hero-wars.com%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnextersglobal-herowarsweb-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1678566400642%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1171685/trc/3/json?tim=1678566400643&data=%7B%22id%22%3A476%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1678566400639%2C%22cv%22%3A%2220230302-10-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.hero-wars.com%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnextersglobal-herowarsweb-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1678566400642%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1171685/trc/3/json?tim=1678566400643&data=%7B%22id%22%3A476%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1678566400639%2C%22cv%22%3A%2220230302-10-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.hero-wars.com%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dnextersglobal-herowarsweb-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1678566400642%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.hero-wars.com%2F%3Fl%3Dloot12%26m%3Dregistration%26nx_source%3Dadx_PropellerAds.Hero%2BWars%2BWeb%2BPropellerAds.pt-5087048.cid-Hero%2BWars%2BWeb%2BPropellerAds%26aff_click%3D640ce3ff14a17e000121491f%26pid%3D5%26custom2%3DPropellerAds%26custom3%3DHero%2BWars%2BWeb%2BPropellerAds%26custom4%3D5087048%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hero-wars.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 11 Mar 2023 20:26:40 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1678566400.994642,VS0,VE102
vary: Accept-Encoding
x-vcl-time-ms: 102
X-Firefox-Spdy: h2
109.235.66.99
52.35.158.214
34.147.7.70
23.73.2.84
139.45.195.8
104.18.32.68
157.240.205.11
23.36.76.226