theprint.in/category/india/
301 Moved Permanently 167 B URL HTTP/1.1 theprint.in/category/india/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /category/india/ HTTP/1.1
Host: theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 29 Nov 2022 10:34:36 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://theprint.in/category/india/
X-Cache: Redirect from cloudfront
Via: 1.1 463c61d5be9284ffc1eec85e247d041a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-C2
X-Amz-Cf-Id: NN_ulD2ds8vnjm6fy7KNYYzBUKgbEGZQ3AJmGbsQ75I8eOYKSdVNgg==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17287
Expires: Tue, 29 Nov 2022 15:22:44 GMT
Date: Tue, 29 Nov 2022 10:34:37 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5517
Cache-Control: max-age=91721
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:37 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 12:03:18 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 10:19:36 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 901
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3640
Expires: Tue, 29 Nov 2022 11:35:17 GMT
Date: Tue, 29 Nov 2022 10:34:37 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: FHUsY+7u2fzsMcuOtU2zGHK+fLObHuWMR/S6TXFvaNgV+yAcGncAdapAyxeTO5aOZdIid6GLL3I=
x-amz-request-id: C16WHMRRD5CWX6YJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 09:45:24 GMT
age: 2953
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:37 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/gumlet/assets/images/pixel.png
200 OK 72 B URL HTTP/2 static.theprint.in/wp-content/plugins/gumlet/assets/images/pixel.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 59338a10c701270c49393481e8663d70
c2893f2df88d1bde04a7d873b942e03cb7c6bac9
a401bf42b76acb849a8a0852f293b536d7b0fc6433aa5bf3c74afe1576203878
GET /wp-content/plugins/gumlet/assets/images/pixel.png HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 72
x-gumlet-reqid: 633343c3fdd0d35ed3014c8e
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.01, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
cache-control: public, max-age=8640000, s-maxage=8640000
etag: edd4b96b61451ef5
surrogate-key: static.theprint.in
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.259
date: Tue, 27 Sep 2022 18:41:07 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0S1hIbMmM_RCS_gCXxYYllaXYowe08Um76-jw3K9eMKVmdHpqc1TvA==
age: 5414010
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/gumlet.js@2.1/dist/gumlet.min.js?ver=5.8.3
200 OK 4.8 kB URL HTTP/2 cdn.jsdelivr.net/npm/gumlet.js@2.1/dist/gumlet.min.js?ver=5.8.3
IP
File type ASCII text, with very long lines (15624), with no line terminators
Hash 50184edf3fca6a5bb718b2847f7c8f76
56f96977f58c2e554a542fcff15516f1c94d5c57
2e86c28b7d4148a78d2763f5142ecdea3f66940ad7f584c512982a143b5af586
GET /npm/gumlet.js@2.1/dist/gumlet.min.js?ver=5.8.3 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 2.1.15
x-jsd-version-type: version
etag: W/"3d08-me9xKCj8xwUzSnUXa+8/iDhEifM"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 29 Nov 2022 10:34:37 GMT
age: 24090
x-served-by: cache-fra-eddf8230025-FRA, cache-bma1661-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4820
X-Firefox-Spdy: h2
code.jquery.com/jquery-2.1.4.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-2.1.4.min.js
IP
File type ASCII text, with very long lines (32025)
Hash a7f7dc66f5ba563bdbd4077fa667016e
c98fd169e356a997daf790dac6ead0c49e8c1eda
5315acee8e8c38e3fe62cff3b7a50cfb46a1130b0abb61bf119340e6b73934ac
GET /jquery-2.1.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:37 GMT
content-encoding: gzip
content-length: 29519
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-14979"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669718077.dop201.sk1.t,1669718077.cds230.sk1.hn,1669718077.cds217.sk1.c
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash bf30422764d45ee6dd59c57e6359a9ea
db02029bc0aedff362e0ad21642154575212685f
4729bac9b7799eee5c8f2473e799f96a3e686e549fd86011eba029254c5e9678
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3511
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:37 GMT
Last-Modified: Tue, 29 Nov 2022 09:36:06 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 3727dddbccabe22ce6126abb005dd273
9b39b056feb9c41bb43081cfbfd509886e24b81e
6d70d71fda5c088d9da36df00f500cfef21f509ce8018d55897d0adc0f3323aa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=162110
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:37 GMT
Etag: "6385b67b-116"
Expires: Thu, 01 Dec 2022 07:36:27 GMT
Last-Modified: Tue, 29 Nov 2022 07:36:27 GMT
Server: nginx
Content-Length: 278
static.theprint.in/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=5.8.3
200 OK 2.6 kB URL HTTP/2 static.theprint.in/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=5.8.3
IP
Hash 8b04c81eb812ab22024588695d3b1eb5
583d5020531e000d34b8d8e67f27754ae752656e
86761e4b3531b6075fd8de71c160cec1dc888c58a752575d328f2dcd9c45fca0
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=5.8.3 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 31 Oct 2022 06:30:50 GMT
last-modified: Mon, 25 Nov 2019 00:30:33 GMT
etag: W/"5ddb20a9-105a"
expires: Thu, 26 Oct 2023 06:30:50 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LpNjci7PKjnHmQzxGkKtWKCDfQyYtoaxKAn4fFxf-NYc6OOXzSHbHA==
age: 2520227
X-Firefox-Spdy: h2
go.automatad.com/geo/TRfI00/afihbs.js
200 OK 27 kB URL HTTP/2 go.automatad.com/geo/TRfI00/afihbs.js
IP
File type ASCII text, with very long lines (65491)
Hash eeb9ea840dc6d5d0412e4acfa3d586ce
a555035ba4b912fc4319655fb88d663246a3be3d
35f8d7ab52b00cd2086a7bd64ab7e0f78800ac3c184dc1444b04ab60e36f3190
GET /geo/TRfI00/afihbs.js HTTP/1.1
Host: go.automatad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:37 GMT
content-type: application/javascript
cf-ray: 771ab1206b0bb50c-OSL
age: 1305
cache-control: max-age=14400
last-modified: Mon, 21 Nov 2022 12:04:27 GMT
cf-cache-status: HIT
x-automatad-country: NO
x-automatad-device: W
x-iplb-instance: 45515
x-iplb-request-id: A29EDED0:F9D8_8E2CE366:0050_637B6EF8_4BD5DD1:01BD
x-object-meta-mtime: 1669032209.141693701
x-openstack-request-id: tx81ecd90f930b4e40a4710-00637b6ef8
x-timestamp: 1669032266.39483
x-trans-id: tx81ecd90f930b4e40a4710-00637b6ef8
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/wpsolr-search-engine/wpsolr/core/bower_components/jsurl/url.js?ver=20.1
200 OK 2.5 kB URL HTTP/2 static.theprint.in/wp-content/plugins/wpsolr-search-engine/wpsolr/core/bower_components/jsurl/url.js?ver=20.1
IP
Hash 6f3b5e0916dbe55b568c4d05804a2704
2c0e308d6d9b1af4a0c10797c425c3896476ec06
896c8300c6fa174f13c8b7744e19f93198e859f2b28600704cf674f8fc03cca1
GET /wp-content/plugins/wpsolr-search-engine/wpsolr/core/bower_components/jsurl/url.js?ver=20.1 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 05 Nov 2022 04:42:02 GMT
last-modified: Tue, 07 May 2019 12:36:20 GMT
etag: W/"5cd17bc4-14c2"
expires: Tue, 31 Oct 2023 04:42:02 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: R0ocs-Qwq5vRb-c4K5XYmywXjXHV9n0hGG854hTA3cfWYUSJGJ6aYA==
age: 2094755
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16
200 OK 98 kB URL HTTP/2 static.theprint.in/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16
IP
Hash 123b9fa88269bb174836e59accb6141e
40b553b630378f36f19347abdb18c00d042921a3
9ba0d150a0ae274427e72e97a53a321b324ba2e1aea587d8eeaf03afa9c2f89b
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 31 Oct 2022 05:49:23 GMT
last-modified: Wed, 16 Dec 2020 00:30:26 GMT
etag: W/"5fd95522-267aa"
expires: Thu, 26 Oct 2023 05:49:23 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4pGVfAkmx5leRruTznMoW_QDqroG6ddh_zvBOYu1rYOcAS6H5axc6g==
age: 2522714
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-54TFNVH
200 OK 69 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-54TFNVH
IP
File type ASCII text, with very long lines (7620)
Hash 4b19b714fdf0684c43affb565f1a4557
0ee206496d0fafc16c89803d004f4947d30502ca
c32c515f92a5621986e9aaf24983b1c9de714e42fada08d168ddee3b9824e19f
GET /gtm.js?id=GTM-54TFNVH HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 10:34:37 GMT
expires: Tue, 29 Nov 2022 10:34:37 GMT
cache-control: private, max-age=900
last-modified: Tue, 29 Nov 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69210
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/underscore.min.js?ver=1.13.1
200 OK 7.8 kB URL HTTP/2 static.theprint.in/wp-includes/js/underscore.min.js?ver=1.13.1
IP
Hash 41adc25289f6e0bb29872803ea21e370
592e3fcc175fd6657ba71f412a28b0f25bddb88d
95b6cc2dad484066d137e7c669c4e34fd8b1ae4a7aa679369caed2e673444d5f
GET /wp-includes/js/underscore.min.js?ver=1.13.1 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Tue, 27 Jul 2021 00:30:39 GMT
etag: W/"60ff53af-4a84"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sgI2hj20gH5w7h-3SC3ccDUYyiGLj_whLSndL1iOBOOn9DgQVA-jDw==
age: 5414010
X-Firefox-Spdy: h2
static.theprint.in/wp-content/themes/Newspaper/images/icons/newspaper.woff?20
200 OK 29 kB URL HTTP/2 static.theprint.in/wp-content/themes/Newspaper/images/icons/newspaper.woff?20
IP
File type Web Open Font Format, TrueType, length 28732, version 0.0\012- data
Hash 2192d5f834e8b672a73d67cad66e79f6
ddf3eb377defc2ca0a2a09d3f41da2d006303e13
c70da34747fb31860fa118ff5d6736f81661838a0f50f077aa29d63ad7b00e4a
GET /wp-content/themes/Newspaper/images/icons/newspaper.woff?20 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theprint.in
Connection: keep-alive
Referer: https://static.theprint.in/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 28732
last-modified: Thu, 12 May 2022 00:30:24 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
accept-ranges: bytes
date: Mon, 28 Nov 2022 21:38:50 GMT
etag: "627c5520-703c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ogSe82f84x-yL1DP5W_lqmsgihMPYRr18GjJfriq26EllOYYxS1iUg==
age: 46547
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 10:11:13 GMT
cache-control: public,max-age=3600
age: 1404
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/wp-embed.min.js?ver=5.8.3
200 OK 1.2 kB URL HTTP/2 static.theprint.in/wp-includes/js/wp-embed.min.js?ver=5.8.3
IP
Hash 6a2c102be2e93231b99b669f503a639a
059ff4f8f426e75d5114a6ae47509a4ba91f25b6
5197ca3648879097ebce71a0394e74d672399a0209420966445766953e050327
GET /wp-includes/js/wp-embed.min.js?ver=5.8.3 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Wed, 10 Mar 2021 00:30:27 GMT
etag: W/"60481323-592"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iwyHHr0w3eicDdG9HWU9PWWjK55512H1t5TnVd48k828k9-3QthU-Q==
age: 5414010
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 69 kB URL HTTP/2 static.theprint.in/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
Hash f7c7b7bf4fb775fec7d990e7e15c8844
bb244ebe47dd9d6dcffd09b280714a64fda4e1c7
cbb8b15dc9e0ac784832d61655bf6ce8009a03b81cdcf61591678d991a4b4ec4
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Wed, 16 Dec 2020 00:30:26 GMT
etag: W/"5fd95522-2bd8"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VQF7vbcTXRzwWFVP9lligRIy-54Hqi4TyHOtXcnjsl5qFH-1O3mOIQ==
age: 5414010
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theprint.in
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 05:42:51 GMT
expires: Fri, 24 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 449506
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.theprint.in/wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=bcb4f14ba9142ca1fd172c7d9de6043b
200 OK 21 kB URL HTTP/2 static.theprint.in/wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=bcb4f14ba9142ca1fd172c7d9de6043b
IP
Hash 887709e1318791e4bfa39a152f045290
b833e73bda185c2b9e515dc023b50e77e93c330f
d6b0c40a78c0873750d8aeb180ea97a3d55b4c4f9fcb8328cc9bf08d5f5a5813
GET /wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=bcb4f14ba9142ca1fd172c7d9de6043b HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Tue, 22 Feb 2022 00:34:41 GMT
etag: W/"62142fa1-92ec"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3ebHAqiNoXqy_ws8Xp9N2JbI3jASxIAFVeyD-2UwlTHNVaB_0wxh3A==
age: 5414010
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/armembermulticurrency/js/arm_multi_currency_admin.js?ver=1.0
200 OK 29 kB URL HTTP/2 static.theprint.in/wp-content/plugins/armembermulticurrency/js/arm_multi_currency_admin.js?ver=1.0
IP
Hash 76a4d786b70f9714eb7ce0c0832441b6
c04c7fe47e075a5863469e226faf8c934722041a
ec088410176161dcdf97a09539f81250bda6746e12039ac93fc5c964a79f737a
GET /wp-content/plugins/armembermulticurrency/js/arm_multi_currency_admin.js?ver=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Wed, 06 Apr 2022 00:34:49 GMT
etag: W/"624ce029-fa8"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WgL3EpZ2R5qKpqEt8z-6M9jeAXSqvPbI1N-72BC_i3kUaY6ktP5OmQ==
age: 5414010
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28a8010c74e6c41e6cdae8fd455210c3
d04a13d998e58ee255adf6b783b75f638d071edd
34a04a7cbae65fdb81fc16f9fa13e5e264f9e12875ae3780543582a6d24f7733
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A04A7CBAE65FDB81FC16F9FA13E5E264F9E12875AE3780543582A6D24F7733"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9892
Expires: Tue, 29 Nov 2022 13:19:29 GMT
Date: Tue, 29 Nov 2022 10:34:37 GMT
Connection: keep-alive
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theprint.in
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 488448
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28a8010c74e6c41e6cdae8fd455210c3
d04a13d998e58ee255adf6b783b75f638d071edd
34a04a7cbae65fdb81fc16f9fa13e5e264f9e12875ae3780543582a6d24f7733
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A04A7CBAE65FDB81FC16F9FA13E5E264F9E12875AE3780543582A6D24F7733"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9892
Expires: Tue, 29 Nov 2022 13:19:29 GMT
Date: Tue, 29 Nov 2022 10:34:37 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.theprint.in/wp-content/themes/Newspaper/style.css?ver=11.4.3
200 OK 97 kB URL HTTP/2 static.theprint.in/wp-content/themes/Newspaper/style.css?ver=11.4.3
IP
Hash 69bda4ae920834ad53be0b9e173c9e9c
00e3ee927d1ab15131ac80b170b9e7098101e009
c2a6fd9afce71be3ce603bdd904dbb7edab968dd493165425ae3381ab6a26319
GET /wp-content/themes/Newspaper/style.css?ver=11.4.3 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Thu, 12 May 2022 00:30:24 GMT
etag: W/"627c5520-24a56"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZKpsAHiCW3ad8OknYtlwvfH-lZQDCi6_Bi7jsCce-NMK49Hk0nJ8IA==
age: 5414010
X-Firefox-Spdy: h2
zeeker-script-library-prod.s3.amazonaws.com/app.bundle.js?id=9352eb35-7c39-4dc6-b55a-1d1b52c8af41&tagname=
200 OK 124 kB URL HTTP/1.1 zeeker-script-library-prod.s3.amazonaws.com/app.bundle.js?id=9352eb35-7c39-4dc6-b55a-1d1b52c8af41&tagname=
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 124 kB (123457 bytes)
Hash 9518d07b993713dcdf059ca97e81651c
542c8e6b1a049a337a859397d1d4944b87acd881
1e363b0856c5226374de0c891da9b2c9d8248bbda2fb0f7a57ad7ae9db5a3bb9
GET /app.bundle.js?id=9352eb35-7c39-4dc6-b55a-1d1b52c8af41&tagname= HTTP/1.1
Host: zeeker-script-library-prod.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: zdFDc2DjaiA16llVolWnsDZEEGVXJ3bJJN5KZB1hIz23v2f3c7V2PczjBME81iZYHE2PeMhkSpY=
x-amz-request-id: FHPW8KSDD2FSTHRJ
Date: Tue, 29 Nov 2022 10:34:38 GMT
Last-Modified: Sun, 27 Nov 2022 14:41:08 GMT
ETag: "9518d07b993713dcdf059ca97e81651c"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 123457
static.theprint.in/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 33 kB URL HTTP/2 static.theprint.in/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash d018bcdf31ddb28992eb2013e2258ca5
a65107bde785481b29702e65fb9bb83305432994
059e336ec78fe8573890751097cdec5310c74b7e57802ab3f863ab6fc02c1429
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Tue, 27 Jul 2021 00:30:39 GMT
etag: W/"60ff53af-15db1"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sUFthk4-a3h7GZgIg2S_mc8eeYAO2FK4jtRG5o8On2yDujGDEvwPkQ==
age: 5414010
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abd55ecd24d357a9f02612558f723a90
6a1e6963864f0b53ddc6205d35225e6cf0bcbeec
195fa531e0462be58d5c62ebbe6060e147c94bdb1d38ff46c341c74e0ab2671a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
youtu.be/8DdeReumeD0?_=1
303 See Other 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /8DdeReumeD0?_=1 HTTP/1.1
Host: youtu.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
content-type: application/binary
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 29 Nov 2022 10:34:38 GMT
location: https://www.youtube.com/watch?_=1&v=8DdeReumeD0&feature=youtu.be
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="SHORT_URL"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"SHORT_URL","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/SHORT_URL"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
server: ESF
content-length: 0
x-xss-protection: 0
set-cookie: YSC=vOvCUGzRC_U; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+829; expires=Thu, 28-Nov-2024 10:34:38 GMT; path=/; domain=.youtu.be; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abd55ecd24d357a9f02612558f723a90
6a1e6963864f0b53ddc6205d35225e6cf0bcbeec
195fa531e0462be58d5c62ebbe6060e147c94bdb1d38ff46c341c74e0ab2671a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.geotrust.com/
200 OK 471 B IP
Hash 7f5207357ba092496caa356b021e3dcc
6ceaf2b91fa7c6e0b096f72d97a53a91576fd13a
55ecec93b84d2fb4902fcb36a77071128f74f7898b5fa2b96d1db4a5f1bf3b91
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3873
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:38 GMT
Last-Modified: Tue, 29 Nov 2022 09:30:05 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 0a7a193b3750d36f0c7200b84287e68c
0deec385bbbae07281c65e6c292e5982dfeedd9b
8eb178c3fdb66956af186d436df4183cab05699565c15bb6eec4b50b90b4870b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3131
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:38 GMT
Last-Modified: Tue, 29 Nov 2022 09:42:27 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5fb3b5c08d1c05d3744a1bb58e17b1a0
853a1585210074d32d82e49431293814bb0acd05
9ad810d77102df088769ec4b4d791a1cb5f5f5ef5b8fa8608bd99b00fa4120b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AD810D77102DF088769EC4B4D791A1CB5F5F5EF5B8FA8608BD99B00FA4120B0"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6385
Expires: Tue, 29 Nov 2022 12:21:03 GMT
Date: Tue, 29 Nov 2022 10:34:38 GMT
Connection: keep-alive
automatad-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=ce7cc3f2-208d-4c0a-a761-b8e1b08de162%2Cad57f634-d407-4fa2-95ac-cbcac599b1df&nocache=1669718077897&schain=1.0%2C1!automatad.com%2C2311912253819084%2C1%2C%2C%2C&aus=300x250%7C728x90&divids=fi-ash-1636551883-6091_50238_40554%2Cfi-ash-1575546310-4231_94775_19492&aucs=%2C&auid=540743778%2C540743778
200 OK 79 B URL HTTP/2 automatad-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=ce7cc3f2-208d-4c0a-a761-b8e1b08de162%2Cad57f634-d407-4fa2-95ac-cbcac599b1df&nocache=1669718077897&schain=1.0%2C1!automatad.com%2C2311912253819084%2C1%2C%2C%2C&aus=300x250%7C728x90&divids=fi-ash-1636551883-6091_50238_40554%2Cfi-ash-1575546310-4231_94775_19492&aucs=%2C&auid=540743778%2C540743778
IP
File type JSON data\012- , ASCII text
Hash c5e38fbff46d032eb5b5366fcedb248a
62d7cb9c620dc2f3754457bfaf3bd699511a1b39
66680b9a3770c124de0180a0332298c128c979c303486143d3eae63edea891a0
GET /w/1.0/arj?ju=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=ce7cc3f2-208d-4c0a-a761-b8e1b08de162%2Cad57f634-d407-4fa2-95ac-cbcac599b1df&nocache=1669718077897&schain=1.0%2C1!automatad.com%2C2311912253819084%2C1%2C%2C%2C&aus=300x250%7C728x90&divids=fi-ash-1636551883-6091_50238_40554%2Cfi-ash-1575546310-4231_94775_19492&aucs=%2C&auid=540743778%2C540743778 HTTP/1.1
Host: automatad-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Tue, 29 Nov 2022 10:34:38 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://theprint.in
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
files.findtrustclicks.com/scripts/stock.js?v=0.8.8
200 OK 2.0 kB URL HTTP/1.1 files.findtrustclicks.com/scripts/stock.js?v=0.8.8
IP
File type ASCII text, with very long lines (5931), with no line terminators
Hash 3fffd72b609d5dd79e722619ff70a54a
7e9240c7aa941841ec2cd943fc76afb84d906cfd
4f3f7466127e6b7a55f6e107ed33786045ff49f068298e2ebda0656bc90ad119
GET /scripts/stock.js?v=0.8.8 HTTP/1.1
Host: files.findtrustclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 10:34:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Mon, 28 Nov 2022 18:03:08 GMT
ETag: W/"172b-5ee8baf0c78f5"
Content-Encoding: gzip
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 931
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://theprint.in
cache-control: no-cache, no-store, must-revalidate
date: Tue, 29 Nov 2022 10:34:38 GMT
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 7f5207357ba092496caa356b021e3dcc
6ceaf2b91fa7c6e0b096f72d97a53a91576fd13a
55ecec93b84d2fb4902fcb36a77071128f74f7898b5fa2b96d1db4a5f1bf3b91
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4717
Cache-Control: max-age=106727
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:38 GMT
Etag: "6384cbb8-1d7"
Expires: Wed, 30 Nov 2022 16:13:25 GMT
Last-Modified: Mon, 28 Nov 2022 14:54:48 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 986eaf3920982ba88bcfe9dda946a108
d85e46c981e863c5265468f7972f7a23e8d53b9d
26441f50768decab3a0b3392e1805507f84086350fe89aee71647bfd3961a4d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2956
Cache-Control: max-age=155013
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:38 GMT
Etag: "63858f37-1d7"
Expires: Thu, 01 Dec 2022 05:38:11 GMT
Last-Modified: Tue, 29 Nov 2022 04:48:55 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 986eaf3920982ba88bcfe9dda946a108
d85e46c981e863c5265468f7972f7a23e8d53b9d
26441f50768decab3a0b3392e1805507f84086350fe89aee71647bfd3961a4d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2956
Cache-Control: max-age=155013
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:38 GMT
Etag: "63858f37-1d7"
Expires: Thu, 01 Dec 2022 05:38:11 GMT
Last-Modified: Tue, 29 Nov 2022 04:48:55 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 986eaf3920982ba88bcfe9dda946a108
d85e46c981e863c5265468f7972f7a23e8d53b9d
26441f50768decab3a0b3392e1805507f84086350fe89aee71647bfd3961a4d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2956
Cache-Control: max-age=155013
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:38 GMT
Etag: "63858f37-1d7"
Expires: Thu, 01 Dec 2022 05:38:11 GMT
Last-Modified: Tue, 29 Nov 2022 04:48:55 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/ut/v3/prebid
200 OK 248 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7fba86a403d03fe964ddaee487120c49
cfc38005391cb04a00f8cbbb99737a0818d971b8
74681e94bfd486e70c03b1f54904a8d8f3fe9d180fed718f7c70e87f1d0bb0b9
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 803
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 29 Nov 2022 10:34:38 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 248
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://theprint.in
AN-X-Request-Uuid: a6e55f74-f894-4675-a390-bac5799f22ad
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
a.teads.tv/hb/bid-request
200 OK 42 B URL HTTP/2 a.teads.tv/hb/bid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f646cd677a5283a600e1ca73c499877
979e9d54fa7ac635da0fb855a8ba40a0f74fe76e
d6e5f108622c778ca6bc5d246637b9a73585a670d46e15493b89f2915806174a
POST /hb/bid-request HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 820
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://theprint.in
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64
content-encoding: gzip
content-length: 42
vary: Accept-Encoding
expires: Tue, 29 Nov 2022 10:34:38 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 29 Nov 2022 10:34:38 GMT
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2017/08/logo_800x149_transp-1.png?compress=true&quality=80&w=1280&dpr=1.0
200 OK 14 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2017/08/logo_800x149_transp-1.png?compress=true&quality=80&w=1280&dpr=1.0
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash da7362815ea481a02ba112ce9293a373
37598f9a620ed89d997006bfcb2a89b56b075b31
775346a0a8cc52788a5b57e56c3d25104b936cf21e55a4199c4c12754cc4eae1
GET /wp-content/uploads/2017/08/logo_800x149_transp-1.png?compress=true&quality=80&w=1280&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 14418
x-gumlet-reqid: 636753c8171a22420f5b1caa
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.01, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
cache-control: public, max-age=8640000, s-maxage=8640000
etag: ca6052607f8759e9
surrogate-key: static.theprint.in
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.114
date: Sun, 06 Nov 2022 06:27:20 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ix4O2xbF43-YQTG3qZctvctdg_CEnZiiM-ZVzzyfQFYxqnLvu2ikMw==
age: 2002038
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2020/05/Support-our-Journalism.png?compress=true&quality=80&w=200&dpr=1.0
200 OK 2.1 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2020/05/Support-our-Journalism.png?compress=true&quality=80&w=200&dpr=1.0
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a4a013941d9765c8d58e1dd664a47d56
94f65595198d4cd68ae1be50c996c000e9598133
7f5b8588b6f93fce74f20ef43db9b1e00330fdb522573661387057608a078bd7
GET /wp-content/uploads/2020/05/Support-our-Journalism.png?compress=true&quality=80&w=200&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 2116
x-gumlet-reqid: 6338e9f03c5c13e258320859
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.01, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
cache-control: public, max-age=8640000, s-maxage=8640000
etag: dd1734bb74aa5d
surrogate-key: static.theprint.in
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.134
date: Sun, 02 Oct 2022 01:31:28 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mb1adwwIEn9ZUpEn3hxMHeNqI0DSQs4GQbEh-af8OPujMqdevmFY4Q==
age: 5043790
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2017/08/logo_800x149_transp-1.png?compress=true&quality=80&w=320&dpr=1.0
200 OK 7.9 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2017/08/logo_800x149_transp-1.png?compress=true&quality=80&w=320&dpr=1.0
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 72344d9e9e4ff5dd759251ff768ab652
ef2801632b3fce1521e0d94037d66aa3783c313b
d753b2ee93b1abd94531654e79f320e192ba0400514e3ccc18606b001e917bdc
GET /wp-content/uploads/2017/08/logo_800x149_transp-1.png?compress=true&quality=80&w=320&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 7920
x-gumlet-reqid: 63334707fdd0d35ed301c987
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.01, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
cache-control: public, max-age=8640000, s-maxage=8640000
etag: 128a54826ac58571
surrogate-key: static.theprint.in
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.219
date: Tue, 27 Sep 2022 18:55:03 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fU-ABZlKkBgs7xn-_sRjLTvA2iVgu_ogfZJAGF-a-icrHBu4ZBMQ1w==
age: 5413175
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2020/09/subscribe_230920.png?compress=true&quality=80&w=1080&dpr=1.0
200 OK 5.5 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2020/09/subscribe_230920.png?compress=true&quality=80&w=1080&dpr=1.0
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2aee7178edb8aa1b7314170afc379bd5
92cbb211c23d251de0049168441b9979d223562d
d5efe9a5fb7ae040264418b274b394ce8b7627227b6ba4757acea96469d48dad
GET /wp-content/uploads/2020/09/subscribe_230920.png?compress=true&quality=80&w=1080&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5500
x-gumlet-reqid: 63334b8efdd0d35ed302256a
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.01, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
cache-control: public, max-age=8640000, s-maxage=8640000
etag: d8648fcc1693f5e7
surrogate-key: static.theprint.in
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.142
date: Tue, 27 Sep 2022 19:14:22 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6blr-9Xye8YsbdieAS95kR68Q9SMvSROarNtc4oLbLhV4JCGys_bpw==
age: 5412016
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://theprint.in/
Origin: https://theprint.in
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:38 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://theprint.in
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://theprint.in/
Origin: https://theprint.in
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:38 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://theprint.in
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2017/08/logo_400_transp.png?compress=true&quality=80&w=700&dpr=1.0
200 OK 19 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2017/08/logo_400_transp.png?compress=true&quality=80&w=700&dpr=1.0
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f54b244a8ed4510d1cc7c9ed2757fbc1
f1fca2669ef6b6432b5a2700d4ed61e0be54a886
acd1db285ae24554fba97fedfa1ae2775e323260cabb3d4ab55cb51644c82b72
GET /wp-content/uploads/2017/08/logo_400_transp.png?compress=true&quality=80&w=700&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 19234
x-gumlet-reqid: 633347072414c595053cc74e
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.01, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
cache-control: public, max-age=8640000, s-maxage=8640000
etag: 340a482f9541f3df
surrogate-key: static.theprint.in
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.134
date: Tue, 27 Sep 2022 18:55:03 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JqUjREtZA1Qv1llluN1AFrQrJFioPiE2m8-3Xk8b0KosJrHlCg_pYA==
age: 5413175
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c098cd55f4d3e85c43b1a9b04fb326d2
10fbfe85f1b3b5469d8b2935dc93af1c630ef1d7
61ad369a28035c43233ea65d84366ad99f299003fe93814c7ae5c6b3bf5e1d60
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61AD369A28035C43233EA65D84366AD99F299003FE93814C7AE5C6B3BF5E1D60"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6311
Expires: Tue, 29 Nov 2022 12:19:49 GMT
Date: Tue, 29 Nov 2022 10:34:38 GMT
Connection: keep-alive
static.theprint.in/wp-content/uploads/2021/05/YourTurn_20Sep21.jpg?compress=true&quality=80&w=330&dpr=1.0
200 OK 16 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2021/05/YourTurn_20Sep21.jpg?compress=true&quality=80&w=330&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash 9fc1eddc66a52c61f79c17699d795da3
fc5366d099c64daf733ab644b5a59bd5e01be7ac
6c37ab759b0e7385d3c6ba936390962418e9d4974d3f5086dff3d1e8c3b7a061
GET /wp-content/uploads/2021/05/YourTurn_20Sep21.jpg?compress=true&quality=80&w=330&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 16207
x-gumlet-reqid: 63715ac1fcba56a6f51144c4
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-10-25
cache-control: public, max-age=8640000, s-maxage=8640000
etag: 9b4c894636e597b5
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.351
date: Sun, 13 Nov 2022 20:59:45 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s1qY1ULVM3C9xejzQo52itj6UwTyWPPnKPmpqPOlLbsRSfU7at4GAw==
age: 1344893
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/Feature-Image-78-1.jpg?compress=true&quality=80&w=330&dpr=1.0
200 OK 19 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/Feature-Image-78-1.jpg?compress=true&quality=80&w=330&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash caa37e56779f09570f66b2c106e23c1d
28957b8c2f63694649584860de60197745f2779a
02ec75173dd68bdefebd3570bbd0fb7fbb9c624ab5a55d703d4df75b2f94b9fe
GET /wp-content/uploads/2022/11/Feature-Image-78-1.jpg?compress=true&quality=80&w=330&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 18595
x-gumlet-reqid: Y4WpXUAcx/LQE9Cz
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-29
cache-control: public, max-age=8640000, s-maxage=8640000
etag: dc104d74e1934f47
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.039
date: Tue, 29 Nov 2022 06:40:29 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U95Dxq9Gaz8IkY2NaRj3mE9ub29ssv_ayQCzXYlBHAGzZsaALjupiQ==
age: 14049
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2020/09/Babridemo.jpg?compress=true&quality=80&w=100&dpr=1.0
200 OK 3.1 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2020/09/Babridemo.jpg?compress=true&quality=80&w=100&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash 7390a38c53fe6014e36a592c68b91684
f35e82d469d8775d444e408650804151245f32f9
66bc87accc9a21878acbd6b0f03f76c15caefa8641c642292279bfa9b6e6c493
GET /wp-content/uploads/2020/09/Babridemo.jpg?compress=true&quality=80&w=100&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 3122
x-gumlet-reqid: Y4WP1KvpdQYr72e8
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-29
cache-control: public, max-age=8640000, s-maxage=8640000
etag: a88ba20cd9debb1a
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.548
date: Tue, 29 Nov 2022 04:51:33 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Q4eCIC2YH5fdhtGKRqrLOTgMdUIw0EqRHPtya-gKoEY0FWLY8is1xA==
age: 20585
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/no-thumb/td_696x0.png?compress=true&quality=80&w=360&dpr=1.0
200 OK 290 B URL HTTP/2 static.theprint.in/wp-content/plugins/td-composer/legacy/Newspaper/assets/images/no-thumb/td_696x0.png?compress=true&quality=80&w=360&dpr=1.0
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 360x226, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 22ab11cf781163242f14c86a402c0036
68c2629b2afe78ab2be5550cd8c7a5fe5fe9bb1e
e9c84ae8022de2db1d53ccd9ecd08a74d9b79af8ad9f80f8a647fb0bdd4f6e83
GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/images/no-thumb/td_696x0.png?compress=true&quality=80&w=360&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 290
x-gumlet-reqid: 6368ee406c12df55b2bde1ba
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
cache-control: public, max-age=8640000, s-maxage=8640000
etag: 5f72de1d371b82d6
surrogate-key: static.theprint.in 2022-10-03
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.117
date: Mon, 07 Nov 2022 11:38:40 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mwTw5pyzxD2kDl6krd66a4_ONs0xXBYIKpeSA5fbFHo4wH7hLza3YQ==
age: 1896958
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/AR-1.jpg?compress=true&quality=80&w=330&dpr=1.0
200 OK 28 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/AR-1.jpg?compress=true&quality=80&w=330&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash 8cb9536370dc77d64063c8cfc09c76c8
f16372151562b2c4e467e25542a763af80274f71
4f9786b162eaa4e06a0f266093080fea2a9d316611ee1c15689fc5903811be3d
GET /wp-content/uploads/2022/11/AR-1.jpg?compress=true&quality=80&w=330&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 27680
x-gumlet-reqid: Y4GqqZOPiKeLePma
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-26
cache-control: public, max-age=8640000, s-maxage=8640000
etag: 8216925671d6659
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.971
date: Sat, 26 Nov 2022 05:56:58 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pTcDVFy-rExLBLkPZdlYI8qz7LKrhsR2rQncNMiGCTNkL2CAz7iWDw==
age: 275860
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/NI-1.jpg?compress=true&quality=80&w=330&dpr=1.0
200 OK 38 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/NI-1.jpg?compress=true&quality=80&w=330&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash 1dcf75b0607c853ae077685a28f1a1e2
0a9f87dfd7f75fabddf4b721dba29743712f8a30
5cd862480cefe903420fd751a99d4f6bfda26d8abdbfeaf4b2ae49dd723d111e
GET /wp-content/uploads/2022/11/NI-1.jpg?compress=true&quality=80&w=330&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 37490
x-gumlet-reqid: Y4GPTFdfcsHI0x7X
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-26
cache-control: public, max-age=8640000, s-maxage=8640000
etag: 7036c5170e8b80d5
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.812
date: Sat, 26 Nov 2022 04:00:12 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DAc0KX3C_fWyB-5br_0f6ajwsnMs4VuPqrwwIts527vnFMVJt_gBmA==
age: 282866
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/Untitled-design-1-9.jpg?compress=true&quality=80&w=100&dpr=1.0
200 OK 2.6 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/Untitled-design-1-9.jpg?compress=true&quality=80&w=100&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash 3a616b21b33f704ffc7dfbfd739312e5
599744b8b4e4bc500298131cff9b6e3e53630a77
22f26d87edd39aebaba69d41736c5e018a0845ceef6e3e5c1518f1cf9eaf0870
GET /wp-content/uploads/2022/11/Untitled-design-1-9.jpg?compress=true&quality=80&w=100&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 2587
x-gumlet-reqid: Y4WcU6vpdQYr8X+/
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-29
cache-control: public, max-age=8640000, s-maxage=8640000
etag: dacda8e5a41ff57a
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.012
date: Tue, 29 Nov 2022 05:44:51 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dFtgXPdGPZjt_OHWwOK8KUB5sBrhV093vcTIRR_6iR0cbbyCZbQk8w==
age: 17387
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/ECONOMY.jpg?compress=true&quality=80&w=330&dpr=1.0
200 OK 15 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/ECONOMY.jpg?compress=true&quality=80&w=330&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash 08bf80c6975e8a7294e20eb49ba4b0ab
bd39cac7c621d80609d0dbfc8110b4d36c477ddd
848dd1a011fb581f72b2b32dad45539d42c2ee88c672faff8165682f1c558aff
GET /wp-content/uploads/2022/11/ECONOMY.jpg?compress=true&quality=80&w=330&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 15446
x-gumlet-reqid: Y4QqfRoqWC4v7hkR
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-28
cache-control: public, max-age=8640000, s-maxage=8640000
etag: e50f2affe835d078
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 1.198
date: Mon, 28 Nov 2022 03:26:54 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0qZ43aXf2uuTGeJNUXxyQYi4luaBr2srlHq-2hhIdRTi8murzv2wLA==
age: 112064
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/mediaelement/mejs-controls.svg
200 OK 1.9 kB URL HTTP/2 static.theprint.in/wp-includes/js/mediaelement/mejs-controls.svg
IP
Hash 05cdb5bd26dff62de5f103074edbed8b
9e72f7eb35b7594610a0c8b543b8513d6c1687c5
da62507f7279369eddd5e63bbdf2261d8d4915e72c388b8d8fcb0eb44fc3ce0f
GET /wp-includes/js/mediaelement/mejs-controls.svg HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.theprint.in/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 27 Sep 2022 18:50:12 GMT
last-modified: Tue, 07 May 2019 12:36:21 GMT
etag: W/"5cd17bc5-11f6"
expires: Fri, 22 Sep 2023 18:50:12 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 884HNeENHyir86My_p8xQA6iKO9XrR6ayYvJu3cc91WH-SwveQu9zA==
age: 5413466
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ed0be1d6a2fec67e2d5cd142fad6f999
2dca7abc2f13734be109c136fe64df614c035732
06f3e225de5605e19a2b883158ae4ce50f1cea5f9c0d32a5a39f4c323e6e01d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "06F3E225DE5605E19A2B883158AE4CE50F1CEA5F9C0D32A5A39F4C323E6E01D5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11298
Expires: Tue, 29 Nov 2022 13:42:57 GMT
Date: Tue, 29 Nov 2022 10:34:39 GMT
Connection: keep-alive
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 450123928bc8a0ecdc900b5f62c87da2
37a914263b2afd04082dbabf91596afe42c9f997
617d3c2e901aae22d93b8df57b1bec6332d5de5c764f15b42e19425c34c34a2a
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 923
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:39 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://theprint.in
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 1
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b5b59760232a88168462f31bed6ec173
859db4647db8c4f5634810170042d13c7e9022c4
e7cde5e448a6ce9dc9b6a15c9a3af6a282bf1d08ddea55ef2d51a915b572614b
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 923
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:39 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://theprint.in
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 1
X-Firefox-Spdy: h2
hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&CanonicalUrl=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&PublisherDomain=https%3A%2F%2Ftheprint.in
200 OK 359 B URL HTTP/2 hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&CanonicalUrl=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&PublisherDomain=https%3A%2F%2Ftheprint.in
IP
ASN #200271 Iguane Solutions SAS
File type JSON data\012- , ASCII text, with very long lines (358)
Hash 7e255623e6875fd4737117622d202dcf
5866dc7a9697a57a8c966533633aa8bc431c2224
67bf48619623f2788c1ff1ecf8b6ee8a6c858789e81af6c529ed26767f7c4877
POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&CanonicalUrl=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&PublisherDomain=https%3A%2F%2Ftheprint.in HTTP/1.1
Host: hb-api.omnitagjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 603
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Accept-Encoding, Content-Type
access-control-allow-methods: OPTIONS, POST
access-control-allow-origin: https://theprint.in
access-control-max-age: 3600
cache-control: no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=82233cdb752b0d4662ba61ad6ba8f53b; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Tue, 29 Nov 2022 10:34:38 GMT
content-length: 359
x-envoy-upstream-service-time: 10
server: ayl-lb-fra02
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/ANI-20221129034331.jpg?compress=true&quality=80&w=300&dpr=1.0
200 OK 10 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/ANI-20221129034331.jpg?compress=true&quality=80&w=300&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash d16635fd67c33d93eb2e653214ec1846
cb02193b3f7abca1a825b2074d331058f2915902
4cd4a4635f9d9b88ffbc88ba6beef7ff789b64ebba2680378e0ee59466a5ff5a
GET /wp-content/uploads/2022/11/ANI-20221129034331.jpg?compress=true&quality=80&w=300&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 10509
x-gumlet-reqid: Y4W/kSqZKzpw4Iv4
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-29
cache-control: public, max-age=8640000, s-maxage=8640000
etag: baa743696b9f7fa1
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.242
date: Tue, 29 Nov 2022 08:15:13 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vGdX4oHUfTU3ilk2FyCXtBCGqi6uH8XhKFHgOc7nRKG1ITHCJAsdNA==
age: 8366
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/hari-dev-singh.jpg?compress=true&quality=80&w=600&dpr=1.0
200 OK 70 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/hari-dev-singh.jpg?compress=true&quality=80&w=600&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash 36aaab1c9be1320eb35a398045278329
de4fea6663a2f4d8418207613b0cb2f09fb68c0f
d45983a935903b2d493bc5ac4512dff4cfd1c201c1d5b29e0828edc904f34768
GET /wp-content/uploads/2022/11/hari-dev-singh.jpg?compress=true&quality=80&w=600&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 70086
x-gumlet-reqid: Y4W7bavpdQYr9cZs
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-29
cache-control: public, max-age=8640000, s-maxage=8640000
etag: e2cc80eb31536f0a
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.253
date: Tue, 29 Nov 2022 07:57:33 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P_gJNpKg0ekl2tN-6jrVV9qs59C3RBkJcjEwPMPgRFvb6bR-QSRlyQ==
age: 9426
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/ANI-20221129033601.jpg?compress=true&quality=80&w=300&dpr=1.0
200 OK 16 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/ANI-20221129033601.jpg?compress=true&quality=80&w=300&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash 2659959dea083fda2b18f60f99933362
62643577d5fd6b816bd3bed74d5fff1ecea6b4f4
2a8a6c84dc408755d8a716084dee6e99ba58381da21d9d64808f06137117ca93
GET /wp-content/uploads/2022/11/ANI-20221129033601.jpg?compress=true&quality=80&w=300&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 16132
x-gumlet-reqid: Y4W/kZeDgBAwnvJT
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-29
cache-control: public, max-age=8640000, s-maxage=8640000
etag: 9c37b17e66728298
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.017
date: Tue, 29 Nov 2022 08:15:13 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: caMmsELArlZJu9gY3NP06Xc6GoYNkq9Wn9nKxqXey8DHoKIPa0KZBA==
age: 8366
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/ANI-20221129044051.jpg?compress=true&quality=80&w=360&dpr=1.0
200 OK 27 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/ANI-20221129044051.jpg?compress=true&quality=80&w=360&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash 1341c473196a474eb8df6246368f4791
0ff65aea4ec07e7668f6175a4b475af4da2deec2
0bdcfc97d1e03dd297a4234db3009e43a4ce2b90b4cbd1b86cee602677f20a18
GET /wp-content/uploads/2022/11/ANI-20221129044051.jpg?compress=true&quality=80&w=360&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 26638
x-gumlet-reqid: Y4W/kY/uHXpY36je
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-29
cache-control: public, max-age=8640000, s-maxage=8640000
etag: 66be2db03de689cb
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.04
date: Tue, 29 Nov 2022 08:15:13 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a-gZ-Oc6nCjxDnqVKSp76_O6FWBVCTEDIZSCTcPCDRQ0u8ypmyq9xw==
age: 8366
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-RY6PTZYBSH>m=2oeb90&_p=1884912257&cid=1167931669.1669718078&ul=en-us&sr=1280x1024&_s=1&sid=1669718077&sct=1&seg=0&dl=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&dt=India%20Archives%20%E2%80%93%20ThePrint&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page=%2Fcategory%2Findia%2F&ep.pageTitle=India%20Archives%20%26ndash%3B%20ThePrint
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-RY6PTZYBSH>m=2oeb90&_p=1884912257&cid=1167931669.1669718078&ul=en-us&sr=1280x1024&_s=1&sid=1669718077&sct=1&seg=0&dl=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&dt=India%20Archives%20%E2%80%93%20ThePrint&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page=%2Fcategory%2Findia%2F&ep.pageTitle=India%20Archives%20%26ndash%3B%20ThePrint
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-RY6PTZYBSH>m=2oeb90&_p=1884912257&cid=1167931669.1669718078&ul=en-us&sr=1280x1024&_s=1&sid=1669718077&sct=1&seg=0&dl=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&dt=India%20Archives%20%E2%80%93%20ThePrint&en=page_view&_fv=1&_nsi=1&_ss=1&ep.page=%2Fcategory%2Findia%2F&ep.pageTitle=India%20Archives%20%26ndash%3B%20ThePrint HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://theprint.in
date: Tue, 29 Nov 2022 10:34:39 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2022/11/ANI-20221129041426.jpg?compress=true&quality=80&w=600&dpr=1.0
200 OK 55 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2022/11/ANI-20221129041426.jpg?compress=true&quality=80&w=600&dpr=1.0
IP
File type ISO Media, AVIF Image\012- data
Hash cf4f19510e93581e87b23f2020495a84
e0746fe5ae8b406ac39671eacb5b845a99f91dcb
c72c8e9cfb44e58c2e70067beb8d48781be4fd57eaa32d472a92ab9e379b092d
GET /wp-content/uploads/2022/11/ANI-20221129041426.jpg?compress=true&quality=80&w=600&dpr=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
content-length: 55327
x-gumlet-reqid: Y4W/kdqG9hyzG+FT
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.005, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
surrogate-key: static.theprint.in 2022-11-29
cache-control: public, max-age=8640000, s-maxage=8640000
etag: d8e38e494eb3e680
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.289
date: Tue, 29 Nov 2022 08:15:13 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zq-_AFUVRPDNusH_e3t8E1W8YiwL7rcY8nWl7nG9A-P2uAzzvpEndQ==
age: 8366
X-Firefox-Spdy: h2
ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=&predirect=https%3A%2F%2Fus-east-pbs.automatad.com%2F%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26uid%3D
200 OK 5.5 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=&predirect=https%3A%2F%2Fus-east-pbs.automatad.com%2F%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26uid%3D
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15844), with no line terminators
Hash 7725e8e949141c8ded449d86975d4c04
8cd8c314a2002cc26f821d331ab9512f52a551a2
a0c49aacf6f552bce544eb8516404f696918253cd934a6404ebeafd71f8780ae
GET /AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=&predirect=https%3A%2F%2Fus-east-pbs.automatad.com%2F%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26uid%3D HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://b2cdn.automatad.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
last-modified: Tue, 01 Feb 2022 06:38:00 GMT
etag: "1300708-3de4-5d6ef246ef4cf"
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5549
content-type: text/html; charset=UTF-8
cache-control: max-age=71602
expires: Wed, 30 Nov 2022 06:28:01 GMT
date: Tue, 29 Nov 2022 10:34:39 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
bid.atmtd.com/request
204 No Content 0 B IP
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /request HTTP/1.1
Host: bid.atmtd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 433
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 29 Nov 2022 10:34:39 GMT
access-control-allow-origin: https://theprint.in
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,POST,OPTIONS
access-control-allow-headers: Content-Type, x-requested-with, set-cookie
access-control-max-age: 86400
cache-control: no-store, no-cache
set-cookie: _atmtdMeruCap=d52c98303094a61da3705364a335e8d0e43a8e820;Max-Age=3600;SameSite=None; Domain=.bid.atmtd.com;Secure
x-intt-response-codes: 20,20
x-intt-keyword-source:
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2018/07/cropped-512x512-192x192.png
200 OK 5.6 kB URL HTTP/2 static.theprint.in/wp-content/uploads/2018/07/cropped-512x512-192x192.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6cad32878a512fa38ef2b08411394c73
c2613e1b143f250bb2d5826e1a888e0a0084128e
e6a5fae423a089622bec691a964ba0c61b143b106f153a4e55d1ba10068f39e0
GET /wp-content/uploads/2018/07/cropped-512x512-192x192.png HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5600
x-gumlet-reqid: 633936bf1c2fea9e2e7c4828
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.01, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
cache-control: public, max-age=8640000, s-maxage=8640000
etag: b09e167d3c7a6799
surrogate-key: static.theprint.in
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.57
date: Sun, 02 Oct 2022 06:59:12 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WvIaF5uojjUlFVxgV9zryeYDf6qzY3fA_LhcrbGj2ea4qONDdY__Jw==
age: 5024127
X-Firefox-Spdy: h2
static.theprint.in/wp-content/uploads/2018/07/cropped-512x512-32x32.png
200 OK 834 B URL HTTP/2 static.theprint.in/wp-content/uploads/2018/07/cropped-512x512-32x32.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 93855227f9ed28835b0217efee9fd711
715cb8d35d39b8845ca7982906f03dc1c75b0529
ca6abe46a71b8fa92702959910fb78cee1274b58a4d1c0bf5be92f856f3224b2
GET /wp-content/uploads/2018/07/cropped-512x512-32x32.png HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Cookie: _ga_RY6PTZYBSH=GS1.1.1669718077.1.0.1669718077.0.0.0; _ga=GA1.1.1167931669.1669718078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 834
x-gumlet-reqid: 633343c4593661e86e716632
accept-ranges: bytes
report-to: {"group": "gumlet-nel", "max_age": 604800, "endpoints": [{"url": "https://nel.gumlytics.com/report"}]}
nel: {"report_to": "gumlet-nel", "max_age": 604800, "success_fraction": 0.01, "response_headers":["content-length"] }
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-gumlet-pc: HIT
cache-control: public, max-age=8640000, s-maxage=8640000
etag: effc43bf78b45244
surrogate-key: static.theprint.in
access-control-allow-origin: *
access-control-max-age: 1728000
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
x-gumlet-runtime: 0.135
date: Tue, 27 Sep 2022 18:41:08 GMT
vary: accept
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -7L-GjfCzY2-HiDjw-MHa-6CmP-_CQEkP-NAndlY8-u_UaR8doClCA==
age: 5414011
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
301 Moved Permanently 167 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 167
location: https://d3div1mtym39ic.cloudfront.net/aax2/apstag.js
server: CloudFront
date: Tue, 29 Nov 2022 00:09:40 GMT
via: 1.1 7a3193ebce69450274ae629ce856b09c.cloudfront.net (CloudFront), 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA2-C1, OSL50-C1
x-amz-cf-id: HqfOdzr5A0ecVZvwRlUXNsOWiP4xVAEgsUOpEf9dsaMCVDryOX1oCQ==
age: 37499
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 08:41:08 GMT
expires: Tue, 29 Nov 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 6811
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40310)
Hash 4ebbed2e7687edcd84d258ef7dd1aaf2
f2573046861bca6b89f490f83955c9270177da43
7fb78852e75a85dc60b4d1149666e4daa650740772ee2e3f1c323976f15ba664
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27211
date: Tue, 29 Nov 2022 10:34:39 GMT
expires: Tue, 29 Nov 2022 10:34:39 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1406 / 805 of 1000 / last-modified: 1669715139"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40310)
Hash 4ebbed2e7687edcd84d258ef7dd1aaf2
f2573046861bca6b89f490f83955c9270177da43
7fb78852e75a85dc60b4d1149666e4daa650740772ee2e3f1c323976f15ba664
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27211
date: Tue, 29 Nov 2022 10:34:39 GMT
expires: Tue, 29 Nov 2022 10:34:39 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1406 / 555 of 1000 / last-modified: 1669715139"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 3.4 kB IP
Hash 61ad6096b95acf8416df683715763dcf
678e5311ff25387b5d2dbe323790c6c3668899e8
6aebcf0557256f40ebd6d3f3e3eae20f5f41c9d6a82cfa392aec235095cdce7c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6112
Cache-Control: max-age=112432
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:39 GMT
Etag: "6384dc90-1d7"
Expires: Wed, 30 Nov 2022 17:48:31 GMT
Last-Modified: Mon, 28 Nov 2022 16:06:40 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4729
Expires: Tue, 29 Nov 2022 11:53:28 GMT
Date: Tue, 29 Nov 2022 10:34:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4729
Expires: Tue, 29 Nov 2022 11:53:28 GMT
Date: Tue, 29 Nov 2022 10:34:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4729
Expires: Tue, 29 Nov 2022 11:53:28 GMT
Date: Tue, 29 Nov 2022 10:34:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4729
Expires: Tue, 29 Nov 2022 11:53:28 GMT
Date: Tue, 29 Nov 2022 10:34:39 GMT
Connection: keep-alive
d3div1mtym39ic.cloudfront.net/aax2/apstag.js
200 OK 50 kB URL HTTP/2 d3div1mtym39ic.cloudfront.net/aax2/apstag.js
IP
Hash 3f278f5ca0e397e44af9243e8ca00cc5
e2f75449198f242906608c7b9ff84fcc28880b2b
1c58d567bc6eecef99606755a35db78e1273bb5c942684cef34119091c7e120d
GET /aax2/apstag.js HTTP/1.1
Host: d3div1mtym39ic.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theprint.in/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 09 Nov 2022 20:51:50 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Tue, 29 Nov 2022 10:04:47 GMT
cache-control: public, max-age=3600
etag: W/"fa24fe2b94a2fc864b1ec67f32e8db32"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TsAIqzBjy3r8XtsvMoW3cFH4Haq5ASJEk3r_V2CmHzbCB6foFC26Bw==
age: 1793
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4729
Expires: Tue, 29 Nov 2022 11:53:28 GMT
Date: Tue, 29 Nov 2022 10:34:39 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a4058fd62595d15c58b3d3266de9865a
d0dff35eb78f129b5da407043037bcf9c27e55c0
ab996c23d58871a2ad53f0c34688c87f0d7c0eac5d0c1d8265b86951248449fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4871
x-amzn-requestid: e2dfa7b8-ded7-4104-a913-1b84746a3c6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLDUUEy_oAMFgSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638118e8-0b229e0f60ff019d26800dd9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 19:35:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9BUuT9WFwAQMnl8JiTDKo-zHgDL0AdjAAAIh0Mx405zbGwhvRouebQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 12:30:42 GMT
age: 79437
etag: "d0dff35eb78f129b5da407043037bcf9c27e55c0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d574c4db20a68295dbd06cb08f5990b
433061bbb226048765a711deca3026ee3e52372f
8cc1a4d18e242f8bfc8ab94637f635b73554b903462c29b06d0ec67872542afb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9203
x-amzn-requestid: 8cba52d6-3c1c-495c-bb9d-3ba6f0adc7e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cHcHmGmQoAMF6dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fa6fd-73abfa592ff223061401af9a;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 17:16:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UmhWm03jrsV8dFagrzIA0E-8eL8dykoO5kw3cYOBd172dCGqNdAX-Q==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:05:38 GMT
age: 23341
etag: "433061bbb226048765a711deca3026ee3e52372f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:52:21 GMT
age: 20538
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 005e5ba3c9588cf389a58195001b64e3
238a7439d887fb3aa7f1302eeb43fce62f08441a
d75dd5b6f57d9c9290725c5be76cc7d7a39682ca569bea18eceb9bdc13d444f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10813
x-amzn-requestid: 5a3c9584-1389-45ac-968d-0a2301f82eda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KG00oAMFpig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-6ffc3ff67f7f7e75399834e8;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ir-Zzqt3ErueryuLgIxlgEtX-TQwpCC1brzCCzfURhjLnuUT8m03wQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 08:43:30 GMT
age: 6669
etag: "238a7439d887fb3aa7f1302eeb43fce62f08441a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f728a04-45b0-4726-b646-628601e2ebbc.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f728a04-45b0-4726-b646-628601e2ebbc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b7d3821d0bd11c196724846a7b9fe22
5b1700fa9cd4f1aaafda28ac28a0e2086fa8499c
b4f820555c4daf6e112c1a395bc57e22f0ef8e2e4299a0ffbb54e0bf18c87f47
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f728a04-45b0-4726-b646-628601e2ebbc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8578
x-amzn-requestid: 4f948bb9-74db-4a5d-927d-a6b893735531
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFxnWHq-IAMF4LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637efc95-2f9e98ca2dad65a80e2195c2;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 05:09:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: X2x9_hXC0JvEktFODEMuasu3QDg4ChtTLKJOmDVasT7IIsKlxkwXCQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:24:31 GMT
age: 22208
etag: "5b1700fa9cd4f1aaafda28ac28a0e2086fa8499c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Ftheprint.in&pubid=0cacadd5-7d2a-4f53-879f-72337dd1f3a2
204 No Content 0 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Ftheprint.in&pubid=0cacadd5-7d2a-4f53-879f-72337dd1f3a2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/prod/config?src=600&u=https%3A%2F%2Ftheprint.in&pubid=0cacadd5-7d2a-4f53-879f-72337dd1f3a2 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://theprint.in
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Tue, 29 Nov 2022 06:37:31 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WCN4hu2NPN0MY0cmFgvQgl4Z3cJ7jaEAiOVZxW8NvBDBAXpT1UJlPA==
age: 14227
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 12:31:58 GMT
expires: Sun, 26 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 252161
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 391703
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
us-east-pbs.automatad.com//setuid?bidder=pulsepoint&gdpr=0&gdpr_consent=&uid=YfYngXLrDIMV&ev=1&pid=561205
301 Moved Permanently 134 B URL HTTP/2 us-east-pbs.automatad.com//setuid?bidder=pulsepoint&gdpr=0&gdpr_consent=&uid=YfYngXLrDIMV&ev=1&pid=561205
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text
Hash 192d35debd0f1c581913ac3429bcefff
6fbaa319b1b2b99775f2c1fc8f357514d613c613
e552c62b3f2666c9a6b9cbd160906ca1aaca7505d940f1fd64c9ae2ad2f8eb84
GET //setuid?bidder=pulsepoint&gdpr=0&gdpr_consent=&uid=YfYngXLrDIMV&ev=1&pid=561205 HTTP/1.1
Host: us-east-pbs.automatad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://b2cdn.automatad.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 29 Nov 2022 10:34:39 GMT
content-type: text/html; charset=utf-8
content-length: 134
cache-control: no-cache, no-store, must-revalidate
expires: 0
location: /setuid?bidder=pulsepoint&gdpr=0&gdpr_consent=&uid=YfYngXLrDIMV&ev=1&pid=561205
pragma: no-cache
vary: Origin
x-envoy-upstream-service-time: 1
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&pid=4WIvEtAWP3fHT&cb=0&ws=1280x939&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22fi-ash-1636551883-6091_50238_40554%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%2221801000562%2FATD_ThePrint%2FATD_300x250_Section-Page_RHS%22%7D%2C%7B%22sd%22%3A%22fi-ash-1575546310-4231_94775_19492%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%2221801000562%2FATD_ThePrint%2FATD_728x90_SP_EOA%22%7D%5D&schain=1.0%2C1!automatad.com%2C2311912253819084%2C1%2C%2C%2C&pubid=0cacadd5-7d2a-4f53-879f-72337dd1f3a2&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 203 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&pid=4WIvEtAWP3fHT&cb=0&ws=1280x939&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22fi-ash-1636551883-6091_50238_40554%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%2221801000562%2FATD_ThePrint%2FATD_300x250_Section-Page_RHS%22%7D%2C%7B%22sd%22%3A%22fi-ash-1575546310-4231_94775_19492%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%2221801000562%2FATD_ThePrint%2FATD_728x90_SP_EOA%22%7D%5D&schain=1.0%2C1!automatad.com%2C2311912253819084%2C1%2C%2C%2C&pubid=0cacadd5-7d2a-4f53-879f-72337dd1f3a2&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash 0c49d2c442466c18f707ca33f99d5947
669d9171a800b6cdddfaddf22530d3301d88b24e
bfcc96821a77d64dd1f897a368eb4a2a36796152399ade18ff78c9c816ac7352
GET /e/dtb/bid?src=600&u=https%3A%2F%2Ftheprint.in%2Fcategory%2Findia%2F&pid=4WIvEtAWP3fHT&cb=0&ws=1280x939&v=22.1107.1609&t=2000&slots=%5B%7B%22sd%22%3A%22fi-ash-1636551883-6091_50238_40554%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%2221801000562%2FATD_ThePrint%2FATD_300x250_Section-Page_RHS%22%7D%2C%7B%22sd%22%3A%22fi-ash-1575546310-4231_94775_19492%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%2221801000562%2FATD_ThePrint%2FATD_728x90_SP_EOA%22%7D%5D&schain=1.0%2C1!automatad.com%2C2311912253819084%2C1%2C%2C%2C&pubid=0cacadd5-7d2a-4f53-879f-72337dd1f3a2&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 203
server: Server
date: Tue, 29 Nov 2022 10:34:39 GMT
x-amz-rid: W63Y24J6G93CHZS39QHW
access-control-allow-origin: https://theprint.in
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5I1wi-cunAGNt8w5I1UOZFboBY3Ys_zW-QQ7_od7F-6r25vKFWe_0g==
X-Firefox-Spdy: h2
us-east-pbs.automatad.com/setuid?bidder=pulsepoint&gdpr=0&gdpr_consent=&uid=YfYngXLrDIMV&ev=1&pid=561205
200 OK 0 B URL HTTP/2 us-east-pbs.automatad.com/setuid?bidder=pulsepoint&gdpr=0&gdpr_consent=&uid=YfYngXLrDIMV&ev=1&pid=561205
IP
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?bidder=pulsepoint&gdpr=0&gdpr_consent=&uid=YfYngXLrDIMV&ev=1&pid=561205 HTTP/1.1
Host: us-east-pbs.automatad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://b2cdn.automatad.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:39 GMT
content-length: 0
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJwdWxzZXBvaW50Ijp7InVpZCI6IllmWW5nWExyRElNViIsImV4cGlyZXMiOiIyMDIyLTEyLTEzVDEwOjM0OjM5Ljk4NTA5MjUzOVoifX0sImJkYXkiOiIyMDIyLTExLTI5VDEwOjM0OjM5Ljk4NTA4NjAzN1oifQ==; Path=/; Expires=Mon, 27 Feb 2023 10:34:39 GMT
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https%3A%2F%2Fus-east-pbs.automatad.com%2F%2Fsetuid%3Fbidder%3Dadnxs%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fus-east-pbs.automatad.com%2F%2Fsetuid%3Fbidder%3Dadnxs%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fus-east-pbs.automatad.com%2F%2Fsetuid%3Fbidder%3Dadnxs%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://b2cdn.automatad.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 29 Nov 2022 10:34:40 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fus-east-pbs.automatad.com%252F%252Fsetuid%253Fbidder%253Dadnxs%2526gdpr%253D0%2526gdpr_consent%253D%2526uid%253D%2524UID
AN-X-Request-Uuid: 9a75e0f6-e00a-4c39-8a1a-1c80d7e45074
Set-Cookie: uuid2=7277387243042434945; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 27-Feb-2023 10:34:40 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
www.clarity.ms/eus2/s/0.6.43/clarity.js
200 OK 18 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 315828eaca626b9bf5ef1aa797d851b8
d46462922165e22351fee9f0dc1e675c3b2ca1a0
d96eb6b361fffaa56bd5f783f8d406188ba32d55531787bc14de0bb25a462ffb
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d9026a431ead4c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: TCP_HIT
x-azure-ref-originshield: 0mhKFYwAAAABFQKccBdQZQLeRHjsDyBmIQU1TMDRFREdFMTkyMAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
x-azure-ref: 0P+CFYwAAAADGYHG/hsPbRZbmi+WVmIINT1NMMjMxMDUwMjAzMDI5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Tue, 29 Nov 2022 10:34:39 GMT
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fus-east-pbs.automatad.com%252F%252Fsetuid%253Fbidder%253Dadnxs%2526gdpr%253D0%2526gdpr_consent%253D%2526uid%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fus-east-pbs.automatad.com%252F%252Fsetuid%253Fbidder%253Dadnxs%2526gdpr%253D0%2526gdpr_consent%253D%2526uid%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fus-east-pbs.automatad.com%252F%252Fsetuid%253Fbidder%253Dadnxs%2526gdpr%253D0%2526gdpr_consent%253D%2526uid%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://b2cdn.automatad.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Tue, 29 Nov 2022 10:34:40 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://us-east-pbs.automatad.com//setuid?bidder=adnxs&gdpr=0&gdpr_consent=&uid=0
AN-X-Request-Uuid: fa79a74e-a4ac-4797-ab85-628cde48efd9
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash deb91f613fa96bcd754bdeca81afb962
8fbe12f636374568a3b0cd8e7cd9348837db7580
f4fbdcc1525d11c0357403fe59c47e1475780574eec85dd417616c36a02bffe3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4FBDCC1525D11C0357403FE59C47E1475780574EEC85DD417616C36A02BFFE3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18096
Expires: Tue, 29 Nov 2022 15:36:16 GMT
Date: Tue, 29 Nov 2022 10:34:40 GMT
Connection: keep-alive
bh.contextweb.com/rtset?pid=561205&ev=1&rurl=https%3A%2F%2Fus-east-pbs.automatad.com%2F%2Fsetuid%3Fbidder%3Dpulsepoint%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%25%25VGUID%25%25
302 Found 471 B URL HTTP/2 bh.contextweb.com/rtset?pid=561205&ev=1&rurl=https%3A%2F%2Fus-east-pbs.automatad.com%2F%2Fsetuid%3Fbidder%3Dpulsepoint%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%25%25VGUID%25%25
IP
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
GET /rtset?pid=561205&ev=1&rurl=https%3A%2F%2Fus-east-pbs.automatad.com%2F%2Fsetuid%3Fbidder%3Dpulsepoint%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%25%25VGUID%25%25 HTTP/1.1
Host: bh.contextweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://b2cdn.automatad.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
cw-server: bh-deployment-6794d6fb46-fc2h8
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
location: https://us-east-pbs.automatad.com//setuid?bidder=pulsepoint&gdpr=0&gdpr_consent=&uid=YfYngXLrDIMV&ev=1&pid=561205
server: Jetty(9.4.14.v20181114)
strict-transport-security: max-age=15768000
set-cookie: V=YfYngXLrDIMV;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 24-Nov-2023 10:34:39 GMT;Max-Age=31104000;SameSite=None
INGRESSCOOKIE=b162dfc88a174276; path=/; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=theprint.in
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=theprint.in
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=theprint.in HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 29 Nov 2022 10:34:40 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
us-east-pbs.automatad.com//setuid?bidder=adnxs&gdpr=0&gdpr_consent=&uid=0
301 Moved Permanently 94 B URL HTTP/2 us-east-pbs.automatad.com//setuid?bidder=adnxs&gdpr=0&gdpr_consent=&uid=0
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text
Hash 7037496b71ff428ab53d48ff0efdb451
d3126233a663a2358216064bfc457159df1d2039
1d62c94886a3562872a53a6767e9834420772c428fd05318b76af7e420b05b82
GET //setuid?bidder=adnxs&gdpr=0&gdpr_consent=&uid=0 HTTP/1.1
Host: us-east-pbs.automatad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://b2cdn.automatad.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 29 Nov 2022 10:34:40 GMT
content-type: text/html; charset=utf-8
content-length: 94
cache-control: no-cache, no-store, must-revalidate
expires: 0
location: /setuid?bidder=adnxs&gdpr=0&gdpr_consent=&uid=0
pragma: no-cache
vary: Origin
x-envoy-upstream-service-time: 1
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=theprint.in
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=theprint.in
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=theprint.in HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 29 Nov 2022 10:34:40 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.interestmoments.com/scripts/dest.js
200 OK 1.7 kB URL HTTP/1.1 js.interestmoments.com/scripts/dest.js
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
File type ASCII text, with very long lines (4550), with no line terminators
Hash c31ed78fb5f94214f5197644807af000
df1d895f27fa283083e19fbf333242c437918461
40022c3717acf3a2a9ee41d9c1639b794e08427edfdba7619adcbee5363a88bc
Analyzer Verdict Alert fortinet Malware
GET /scripts/dest.js HTTP/1.1
Host: js.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 10:34:40 GMT
Content-Type: application/javascript
Last-Modified: Mon, 28 Nov 2022 17:58:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6384f6ca-11c6"
Expires: Fri, 09 Dec 2022 10:34:40 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-MediaNet_cnv_n-amobee_n-smaato_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-emx_sovrn_n-Outbrain
302 Found 28 kB URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-MediaNet_cnv_n-amobee_n-smaato_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-emx_sovrn_n-Outbrain
IP
Hash eacaa8c931674a997e7fc6bf47a415cb
5630aacf674619408f8cce854955ff3b0986c649
9cce567a0c90531a82dd269277607c9ebb46ad636142b48f2fd9e18a29a9b852
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-MediaNet_cnv_n-amobee_n-smaato_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-emx_sovrn_n-Outbrain HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Tue, 29 Nov 2022 10:34:40 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: PN3K6VDMXKXQK1HADWW0
Set-Cookie: ad-id=A4T2ec0bJUbar1mEWSqp6cQ|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 10:34:40 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-MediaNet_cnv_n-amobee_n-smaato_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-emx_sovrn_n-Outbrain&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-MediaNet_cnv_n-amobee_n-smaato_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-emx_sovrn_n-Outbrain&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-MediaNet_cnv_n-amobee_n-smaato_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-emx_sovrn_n-Outbrain&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-MediaNet_cnv_n-amobee_n-smaato_n-sharethrough_n-onetag_pm-db5_ym_rbd_n-emx_sovrn_n-Outbrain&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theprint.in/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Tue, 29 Nov 2022 10:34:40 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: A00BBWBAZ4T9HVN703PN
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
us-east-pbs.automatad.com/setuid?bidder=adnxs&gdpr=0&gdpr_consent=&uid=0
200 OK 0 B URL HTTP/2 us-east-pbs.automatad.com/setuid?bidder=adnxs&gdpr=0&gdpr_consent=&uid=0
IP
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?bidder=adnxs&gdpr=0&gdpr_consent=&uid=0 HTTP/1.1
Host: us-east-pbs.automatad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://b2cdn.automatad.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:40 GMT
content-length: 0
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIwIiwiZXhwaXJlcyI6IjIwMjItMTItMTNUMTA6MzQ6NDAuMzI2MDI4OTY1WiJ9fSwiYmRheSI6IjIwMjItMTEtMjlUMTA6MzQ6NDAuMzI2MDIyODM0WiJ9; Path=/; Expires=Mon, 27 Feb 2023 10:34:40 GMT
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
d96e0c565d78e7658a63db49a2cabcaf.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
200 OK 2.7 kB URL HTTP/2 d96e0c565d78e7658a63db49a2cabcaf.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash e8ee9c011ff8e1f464e74c37113119ee
64ad72134ea05877de0f2b6503f5c0d8c3f78197
09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
GET /safeframe/1-0-40/html/container.html HTTP/1.1
Host: d96e0c565d78e7658a63db49a2cabcaf.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Tue, 29 Nov 2022 10:34:40 GMT
expires: Wed, 29 Nov 2023 10:34:40 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 29 Nov 2022 10:34:40 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash c8369baff4bd69d4f615c608befe7bce
47ad74d6e5c96c65cf8660d353d12d202c12859d
164446da6122b5372e4be4785e35d28e47fafd2d51de889880ae9636bd5eb73e
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 29 Nov 2022 10:34:40 GMT
server: ESF
cache-control: private
content-length: 30876
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0fe20d41a043db700a84924cd9793f3
c0da481fef6cd00558f6e68b074acb34bef8292f
03caeb65ab9e22f6d6fe0d344d327950d20ee9ed144e2da0e5e062943a03fc56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/_mW_2QmsfiHfHQzuwJJjeV3lvrJQS7bChqYqZLie29Q.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/_mW_2QmsfiHfHQzuwJJjeV3lvrJQS7bChqYqZLie29Q.js
IP
File type ASCII text, with very long lines (36106)
Hash 7fc7e22ecccb0cfd0ae897bb40a58efe
5d46470a711120793c362235105836fe49e699a4
1907005cab41fbd6d1d67df3b25586f3232e053a261c9e2b2503459f4980b1c5
GET /js/th/_mW_2QmsfiHfHQzuwJJjeV3lvrJQS7bChqYqZLie29Q.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14302
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 27 Nov 2022 10:09:03 GMT
expires: Mon, 27 Nov 2023 10:09:03 GMT
cache-control: public, max-age=31536000
age: 174337
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 998e0b25e77b8c23e52ea918d3fc2a29
0f684f95e3c60ef17ff082bfda21de480eff9fb4
360e9b02287b38174bb5bfb64862d049d9e4f998ef8aba036a1bc97bbf30d606
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/8DdeReumeD0/default.webp
200 OK 2.7 kB URL HTTP/2 i.ytimg.com/vi_webp/8DdeReumeD0/default.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e5cf14e80f3ce391c4d09d4832af906f
49a02fc06e547c26142a75be22317a9665c370fd
33cc8b6c8ef17b74157be241bd88d042919989dbf3d26bbe428f8f3e49857552
GET /vi_webp/8DdeReumeD0/default.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2728
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 10:34:40 GMT
expires: Tue, 29 Nov 2022 12:34:40 GMT
cache-control: public, max-age=7200
etag: "1618656842"
content-type: image/webp
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79840cac9f5ae1a38c0faaaf59e7fe82
f76a3e50f566269c574e7f8904021640366dcc56
1f39ccbd6ad4a9c8fcc3e4d7d83c4c21f9e9fd9fd0d98c6b70cd1bbbdfeb7798
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 998e0b25e77b8c23e52ea918d3fc2a29
0f684f95e3c60ef17ff082bfda21de480eff9fb4
360e9b02287b38174bb5bfb64862d049d9e4f998ef8aba036a1bc97bbf30d606
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AMLnZu-ceKtLySEN03xyOJ4nJIUCeIhP9E_6FxDqeCuT=s68-c-k-c0x00ffffff-no-rj
200 OK 2.9 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu-ceKtLySEN03xyOJ4nJIUCeIhP9E_6FxDqeCuT=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash d3f3941becc6472bed7a53c905d4038b
cd3bda4fccd24e83466a36f4efd21258fe6cd1c7
64cb277b95cea90d91d3704281ea545c11c72e73f43d1b6f5f3fffdf82c851f1
GET /ytc/AMLnZu-ceKtLySEN03xyOJ4nJIUCeIhP9E_6FxDqeCuT=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2855
x-xss-protection: 0
date: Tue, 29 Nov 2022 10:09:26 GMT
expires: Mon, 08 Aug 2022 04:32:54 GMT
cache-control: public, max-age=86400, no-transform
age: 1514
etag: "v4bc"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 29 Nov 2022 10:34:40 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d921a98d865eda78819c2aa7cae3a47b
35bddda167693bfa9af19668df6c1f8832d70797
de889934719c34128ebc18868aea70ee64e6652fcc1ee776aa88dd354dadc4bc
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 931
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 29 Nov 2022 10:34:40 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79840cac9f5ae1a38c0faaaf59e7fe82
f76a3e50f566269c574e7f8904021640366dcc56
1f39ccbd6ad4a9c8fcc3e4d7d83c4c21f9e9fd9fd0d98c6b70cd1bbbdfeb7798
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 620
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://theprint.in
access-control-allow-credentials: true
date: Tue, 29 Nov 2022 10:34:40 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e41fc1ff7db49a8f36266fc2e63a1dee
b521ef1dfeaf9c5bdb8378aac0cbf20c245cf16d
e239018415330a25cfcc58c27e345832a54b0791e6ad8c6ea221c67e082d73b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E239018415330A25CFCC58C27E345832A54B0791E6AD8C6EA221C67E082D73B5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4667
Expires: Tue, 29 Nov 2022 11:52:28 GMT
Date: Tue, 29 Nov 2022 10:34:41 GMT
Connection: keep-alive
long.interestmoments.com/go/diana-way.php?id=670954-3455-834536&pid=2467457&qid=473
302 Found 0 B URL HTTP/1.1 long.interestmoments.com/go/diana-way.php?id=670954-3455-834536&pid=2467457&qid=473
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/diana-way.php?id=670954-3455-834536&pid=2467457&qid=473 HTTP/1.1
Host: long.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 29 Nov 2022 10:34:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://long.interestmoments.com/go/diana-way.php?id=94563420-24-456345&pid=7944&lid=07882367658&jid=67852&from=Stanceyye
Access-Control-Allow-Origin: *
long.interestmoments.com/go/diana-way.php?id=94563420-24-456345&pid=7944&lid=07882367658&jid=67852&from=Stanceyye
200 OK 440 B URL HTTP/1.1 long.interestmoments.com/go/diana-way.php?id=94563420-24-456345&pid=7944&lid=07882367658&jid=67852&from=Stanceyye
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d973d5cd6773cdffb4fc4631e2d1a108
2c6a7b26f258284aa04c290156222e263146d632
99ef560c512565f212af8aa4255e113e46aed9c6f7d6db22604036afd1363f3b
GET /go/diana-way.php?id=94563420-24-456345&pid=7944&lid=07882367658&jid=67852&from=Stanceyye HTTP/1.1
Host: long.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theprint.in/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 10:34:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 171
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://theprint.in
access-control-allow-credentials: true
date: Tue, 29 Nov 2022 10:34:41 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 80f807d3d704a10aa14bce0414ce5531
df36dff2ec7c87efecc48b8cfe12c92fdf286e0f
1bb317059139f31d9f20633f6bf5ecf003e31544564d1c0c279ad47201aa4d59
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 10:34:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 21:36:18 GMT
Expires: Tue, 29 Nov 2022 21:36:18 GMT
ETag: "df36dff2ec7c87efecc48b8cfe12c92fdf286e0f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
track.wg-aff.com/click?pid=1287&offer_id=80&ref_id=i0t62ddhccwnb1zflpsn&sub1=E0HHEGBJ6R
302 Found 0 B URL HTTP/2 track.wg-aff.com/click?pid=1287&offer_id=80&ref_id=i0t62ddhccwnb1zflpsn&sub1=E0HHEGBJ6R
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=1287&offer_id=80&ref_id=i0t62ddhccwnb1zflpsn&sub1=E0HHEGBJ6R HTTP/1.1
Host: track.wg-aff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 10:34:42 GMT
content-length: 0
location: https://trck.wargaming.net/kcb56ojr/?t=1&pub_id=1287&xid=6385e042761379000111fc7b&xid_param1=E0HHEGBJ6R&xid_param_2=
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=6385e042761379000111fc7b; expires=Wed, 29 Nov 2023 10:34:42 GMT; secure; SameSite=None
afoffers={"80":1669718082}; expires=Wed, 29 Nov 2023 10:34:42 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bd2897c82c183ba2556c82e075eb7002
b15517523e6cdba6631a11cb20e398c61e2868d4
c440cfcf0b0313f9fa8bf82b160c849a85a6268d90b76b35524a6645f416015c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4772
Cache-Control: max-age=88089
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:42 GMT
Etag: "638482b7-1d7"
Expires: Wed, 30 Nov 2022 11:02:51 GMT
Last-Modified: Mon, 28 Nov 2022 09:43:19 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
trck.wargaming.net/kcb56ojr/?t=1&pub_id=1287&xid=6385e042761379000111fc7b&xid_param1=E0HHEGBJ6R&xid_param_2=
301 Moved Permanently 22 B URL HTTP/1.1 trck.wargaming.net/kcb56ojr/?t=1&pub_id=1287&xid=6385e042761379000111fc7b&xid_param1=E0HHEGBJ6R&xid_param_2=
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with no line terminators
Hash 0e0bf67572311f8a23814419ff24ee9a
78328dfc54708433cdfb3e7857e57f87ec443b08
c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
GET /kcb56ojr/?t=1&pub_id=1287&xid=6385e042761379000111fc7b&xid_param1=E0HHEGBJ6R&xid_param_2= HTTP/1.1
Host: trck.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 29 Nov 2022 10:34:42 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 22
Connection: keep-alive
Location: https://join.worldoftanks.eu/1648123636/no/?t=1&pub_id=1287&xid=6385e042761379000111fc7b&xid_param1=E0HHEGBJ6R&xid_param_2=&sid=SID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw&enctid=coopntxru3qy&lpsn=WOT+WW+LMS+Videoback+Dark+Neutral+TP+542839&foris=1&teclient=1669718082921087158&utm_source=wlap&utm_medium=affiliate&utm_campaign=kcb56ojr&utm_content=1287
Set-Cookie: STIDREFERRAL=SID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
enctid=coopntxru3qy; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
teclient=1669718082921087158; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache
ocsp.digicert.com/
200 OK 471 B IP
Hash 34edaf309ab20335070f506f3985b604
1535164620fe9b562e8972c2e91458a5f6b9a728
2d2c9f483fb86761b8c8737cf7caa86df3a3186a44c804a78b4934f017619505
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6184
Cache-Control: max-age=100258
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Etag: "6384acbe-1d7"
Expires: Wed, 30 Nov 2022 14:25:41 GMT
Last-Modified: Mon, 28 Nov 2022 12:42:38 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
join.worldoftanks.eu/1648123636/no/?t=1&pub_id=1287&xid=6385e042761379000111fc7b&xid_param1=E0HHEGBJ6R&xid_param_2=&sid=SID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw&enctid=coopntxru3qy&lpsn=WOT+WW+LMS+Videoback+Dark+Neutral+TP+542839&foris=1&teclient=1669718082921087158&utm_source=wlap&utm_medium=affiliate&utm_campaign=kcb56ojr&utm_content=1287
200 OK 15 kB URL HTTP/1.1 join.worldoftanks.eu/1648123636/no/?t=1&pub_id=1287&xid=6385e042761379000111fc7b&xid_param1=E0HHEGBJ6R&xid_param_2=&sid=SID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw&enctid=coopntxru3qy&lpsn=WOT+WW+LMS+Videoback+Dark+Neutral+TP+542839&foris=1&teclient=1669718082921087158&utm_source=wlap&utm_medium=affiliate&utm_campaign=kcb56ojr&utm_content=1287
IP
ASN #199524 G-Core Labs S.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (46221)
Hash 43ca9b61a534a1285c881c38c5edb4b2
0438ab29af5a592cb7c50ffe20d995a90eb7def3
a72b86587c1303c793c1d452d113ae8afd345c99fd1dd1fd21fa95af02602888
GET /1648123636/no/?t=1&pub_id=1287&xid=6385e042761379000111fc7b&xid_param1=E0HHEGBJ6R&xid_param_2=&sid=SID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw&enctid=coopntxru3qy&lpsn=WOT+WW+LMS+Videoback+Dark+Neutral+TP+542839&foris=1&teclient=1669718082921087158&utm_source=wlap&utm_medium=affiliate&utm_campaign=kcb56ojr&utm_content=1287 HTTP/1.1
Host: join.worldoftanks.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 10:34:43 GMT
Content-Type: text/html
Last-Modified: Wed, 10 Aug 2022 11:51:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62f39bcc-f1e6"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 15f015e4b884cef693f0bb3dcd269b75
a0359d50465b7ddadf0d7ee324374ad213f49208
c460bdfe31016f300dca569ad5235f53077502e6e8caa74233e83db73f05713d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1237
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Last-Modified: Tue, 29 Nov 2022 10:14:06 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 15f015e4b884cef693f0bb3dcd269b75
a0359d50465b7ddadf0d7ee324374ad213f49208
c460bdfe31016f300dca569ad5235f53077502e6e8caa74233e83db73f05713d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1086
Cache-Control: max-age=165043
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Etag: "6385bdb8-1d7"
Expires: Thu, 01 Dec 2022 08:25:26 GMT
Last-Modified: Tue, 29 Nov 2022 08:07:20 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 15f015e4b884cef693f0bb3dcd269b75
a0359d50465b7ddadf0d7ee324374ad213f49208
c460bdfe31016f300dca569ad5235f53077502e6e8caa74233e83db73f05713d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1804
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Last-Modified: Tue, 29 Nov 2022 10:04:40 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 15f015e4b884cef693f0bb3dcd269b75
a0359d50465b7ddadf0d7ee324374ad213f49208
c460bdfe31016f300dca569ad5235f53077502e6e8caa74233e83db73f05713d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1237
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Last-Modified: Tue, 29 Nov 2022 10:14:06 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/04b0ba212e17098cc7786c56bca5d832_1600946934.png
200 OK 6.7 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/04b0ba212e17098cc7786c56bca5d832_1600946934.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 248 x 110, 8-bit colormap, non-interlaced\012- data
Hash 91f01fe893320cb394fc52461a1b24a5
f43616cd9e85af6a2a73a914a44085662d123807
3038bb7d8adebbe73e330bbea5739b04efe6b04d5a1d81db314bd29251813967
GET /videoback-ongoing-eu-wothq-1691/04b0ba212e17098cc7786c56bca5d832_1600946934.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: image/png
content-length: 6662
last-modified: Thu, 24 Sep 2020 11:28:54 GMT
etag: "5f6c82f6-1a06"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:25+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/9a3147f7202207fd86f303867669af7c_1600947283.png
200 OK 1.6 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/9a3147f7202207fd86f303867669af7c_1600947283.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 26 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 65952e9526844e297b5ed12b51af3073
ab06c5be859a20aea602c95a592d366152f66fda
0eb8340c0b3fc3e36cd816cb9ce8e819b64b40ded2504741eb4662bb10eea015
GET /videoback-ongoing-eu-wothq-1691/9a3147f7202207fd86f303867669af7c_1600947283.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: image/png
content-length: 1572
last-modified: Thu, 24 Sep 2020 11:34:43 GMT
etag: "5f6c8453-624"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:25+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/Videoback-Dark-EU/2aef0c94f5bc198cba6f45ee06d503a0_1639484698.png
200 OK 29 kB URL HTTP/2 lms-static.wgcdn.co/Videoback-Dark-EU/2aef0c94f5bc198cba6f45ee06d503a0_1639484698.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 1174 x 363, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ce0d2852121a1cd85a26c2426a40dae
474a69d1816e7d29cea432b640e43e5acff39450
07871f75a6f4007f7f7d9adf5382f953c1dce8407149662dd88617a1d8d4055a
GET /Videoback-Dark-EU/2aef0c94f5bc198cba6f45ee06d503a0_1639484698.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: image/png
content-length: 29062
last-modified: Tue, 14 Dec 2021 12:24:58 GMT
etag: "61b88d1a-7186"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:54:28+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/Videoback-Dark-EU/f649b2f12a074726bf8db29fe5633628_1639484898.png
200 OK 14 kB URL HTTP/2 lms-static.wgcdn.co/Videoback-Dark-EU/f649b2f12a074726bf8db29fe5633628_1639484898.png
IP
ASN #199524 G-Core Labs S.A.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 208x208, components 3\012- data
Hash 87d3c37b826fc0c8237c8e716934f6b2
79632ce4b4f0f1cbe6a0ac9081dba9924b4d0cd0
5dd52ce85650d9cc13997187633c865d7284e628f3f28af2ce38896d8d7d3da0
GET /Videoback-Dark-EU/f649b2f12a074726bf8db29fe5633628_1639484898.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: image/png
content-length: 13892
last-modified: Tue, 14 Dec 2021 12:28:18 GMT
etag: "61b88de2-3644"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T14:10:59+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/Videoback-Dark-EU/518e6d6bd45d6086554daa0295291ee1_1639484749.png
200 OK 3.0 kB URL HTTP/2 lms-static.wgcdn.co/Videoback-Dark-EU/518e6d6bd45d6086554daa0295291ee1_1639484749.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 123 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b1962befd8938b36c48ed62ca7c04f5
4e3e0524f822003a2567d04501b9d5e7d55d7d06
cd2a2481818213f1c1b4e065ead65f83ff50d25a5b63a4a8cf515614f3ad05cf
GET /Videoback-Dark-EU/518e6d6bd45d6086554daa0295291ee1_1639484749.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: image/png
content-length: 2976
last-modified: Tue, 14 Dec 2021 12:25:49 GMT
etag: "61b88d4d-ba0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T14:10:59+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/Videoback-Dark-EU/ba06c381ed267fb7dfd6b007931ed0bf_1639484813.png
200 OK 30 kB URL HTTP/2 lms-static.wgcdn.co/Videoback-Dark-EU/ba06c381ed267fb7dfd6b007931ed0bf_1639484813.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 219 x 220, 8-bit grayscale, non-interlaced\012- data
Hash e15fed82b2db8b2e31de05ab2a5601f4
405cbff152f965bdbf3a72faabbff5cafa4bcc14
549b0b011eb72bfb724708d7caeb637c1411be84c32ccbb5a9d7a76afc8b30bd
GET /Videoback-Dark-EU/ba06c381ed267fb7dfd6b007931ed0bf_1639484813.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: image/png
content-length: 30233
last-modified: Tue, 14 Dec 2021 12:26:53 GMT
etag: "61b88d8d-7619"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T14:10:59+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-dark-neutral-eu/de15bfed9ecdb00a93bc2f457795edc1_1648132151.png
200 OK 610 kB URL HTTP/2 lms-static.wgcdn.co/videoback-dark-neutral-eu/de15bfed9ecdb00a93bc2f457795edc1_1648132151.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 1878 x 980, 8-bit colormap, non-interlaced\012- data
Size 610 kB (610450 bytes)
Hash f4dc4d08e9b41127aed1ee38b08fa462
65ebdea56240c2c82d3017bab06d544fe2c7067f
86db4730d8ba1d02722d8744b02e3b49e08fdd99ffc554cfe5aa224dbbf37cb6
GET /videoback-dark-neutral-eu/de15bfed9ecdb00a93bc2f457795edc1_1648132151.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: image/png
content-length: 610450
last-modified: Thu, 24 Mar 2022 14:29:11 GMT
etag: "623c8037-95092"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:54:28+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-58QVDL8
200 OK 108 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-58QVDL8
IP
File type ASCII text, with very long lines (46280)
Size 108 kB (107651 bytes)
Hash 1c6bacb4e2db8c193613da48f5ce2adf
c6ff59fba98f107a35a3cf0ddba5d23d249a6014
f47c06c261ceb99588c06fd3e112e21b346e766fcf9f0921e9d7fa43ea3104fd
GET /gtm.js?id=GTM-58QVDL8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 10:34:43 GMT
expires: Tue, 29 Nov 2022 10:34:43 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 107651
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
thirawogla.com/b/3.Vs0/PW3-puvAbXmWVXJMZ-Dy0Y0FNTTKc_5/N/DtMRyjLxT/Qe1ZN/zbk/0/MPz/Ma
200 OK 1.0 kB URL HTTP/2 thirawogla.com/b/3.Vs0/PW3-puvAbXmWVXJMZ-Dy0Y0FNTTKc_5/N/DtMRyjLxT/Qe1ZN/zbk/0/MPz/Ma
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (357)
Hash c13487fe6cd865d31aaf1f784160297d
4d84aef12f17f0023d123dc4dd1a68ab94a0bae7
1d2bebadffc79a646eb649785e41c8b0d17bdb1e08922317e4c2ac989cfd2fdc
GET /b/3.Vs0/PW3-puvAbXmWVXJMZ-Dy0Y0FNTTKc_5/N/DtMRyjLxT/Qe1ZN/zbk/0/MPz/Ma HTTP/1.1
Host: thirawogla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://long.interestmoments.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:42 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Tue, 29 Nov 2022 10:34:42 GMT
x-frame-options: DENY
referrer-policy: no-referrer
set-cookie: kadCCap=212269:1:1667199062;219484:1:1667715065;132751:1:1669691381;199455:1:1668245056;194136:1:1669413157;220790:1:1668460505;220335:1:1669620452;221398:1:1669672704;218693:1:1669515516;79610:1:1669272875;219652:1:1669330335;219047:1:1667194435; max-age=1701254082; path=/
kadACap=190964:1:1669272875;453831:1:1669633147;442019:1:1669618252;424441:1:1669620569;346327:1:1669707592;419321:1:1669463839;451139:1:1669521403;383700:1:1669640980;451724:1:1669565807;419323:1:1669718082;419299:1:1669590798;446013:1:1668228435;419293:1:1669526430;446531:1:1669270846;450649:1:1669712254;419295:1:1669362714;410252:1:1669683544;401659:1:1669529511;445735:1:1669286676;449523:1:1669701631;445506:1:1669286676;419303:1:1669446827;419297:1:1669465197;419301:1:1669646033;407100:1:1668246232;419291:1:1669705862; max-age=1701254082; path=/
kadCSCap=221398:1:1669672704;132751:1:1669691381; path=/
kadASCap=383700:1:1669640980;419323:1:1669718082;453831:1:1669633147;450649:1:1669712254;346327:1:1669707592;419291:1:1669705862;449523:1:1669701631;419301:1:1669646033;410252:1:1669683544; path=/
kadRPixJ=bnVsbA==; max-age=1701254082; path=/
kadUnP3=CAgQ2LKVnAYaDQjzwZkBEAEYyO6WnAYaDQiEyJMCEAEY0Y2TnAYaDQiy0ZQCEAEYgN6UnAYaDQioiJcCEAQY2LKVnAYaDQjowJcCEAMY44GWnAYiCggDEAgY2LKVnAYqDAiMvRIQARjI7pacBioMCISnJRABGNGNk5wGKgwI1OwnEAEYgN6UnAYqDAikkygQBBjYspWcBioMCPOaKBADGOOBlpwG; max-age=1701254082; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:17:43 GMT
expires: Wed, 22 Nov 2023 22:17:43 GMT
cache-control: public, max-age=31536000
age: 562620
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2
200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 11816, version 1.0\012- data
Hash 7fa68490a833a8fa395e5f3bffafc052
1880e3743548106319713b937e7769eee6b1ce21
30fa70635379ae1b58491bc41572760c1f3c8445265436a5fec4c36a197e4121
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 01:25:37 GMT
expires: Wed, 29 Nov 2023 01:25:37 GMT
cache-control: public, max-age=31536000
age: 32946
last-modified: Tue, 19 Apr 2022 18:52:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:51:51 GMT
expires: Thu, 23 Nov 2023 18:51:51 GMT
cache-control: public, max-age=31536000
age: 488572
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
200 OK 9.7 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9692, version 1.0\012- data
Hash d572b531f0823555818998b466028e08
788073fb7656c7b44a3d67468fc355ceb618290e
bddd7c9debeee9bccc8d6a0f0990743d3db200fe23fc08dbad9e60a007e52919
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9692
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 23:14:31 GMT
expires: Wed, 22 Nov 2023 23:14:31 GMT
cache-control: public, max-age=31536000
age: 559212
last-modified: Tue, 19 Apr 2022 18:44:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19G7DRs5.woff2
200 OK 7.1 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19G7DRs5.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7120, version 1.0\012- data
Hash 1e58a6b01c300f7c84abdacf53503eaf
ed6f0d2f1564e5d763e07a8fde2f16c5e911f32f
85f70e68e3ba976fbfee39a96c5275550eb881f302c7dedf91aa7d0a802ba5f6
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19G7DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 17:24:28 GMT
expires: Fri, 24 Nov 2023 17:24:28 GMT
cache-control: public, max-age=31536000
age: 407415
last-modified: Tue, 19 Apr 2022 18:54:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/50e485b431d538125efcbfa8fc76a665_1600946565.png
200 OK 5.1 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/50e485b431d538125efcbfa8fc76a665_1600946565.png
IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash c28eb738166485ff11b13d9e74a52be8
dd161225ce2e844e2d6f05753e5210d922934ec6
2e9c3e61433c5952bd3b7d963ae90d9789c262a67411447bbaa1b598f53c2411
GET /videoback-ongoing-eu-wothq-1691/50e485b431d538125efcbfa8fc76a665_1600946565.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:44 GMT
content-type: image/png
content-length: 5124
last-modified: Thu, 24 Sep 2020 11:22:45 GMT
etag: "5f6c8185-1404"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:25+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1648123636/dist/landing/videoback/eval.js
200 OK 177 B URL HTTP/2 lms-static.wgcdn.co/1648123636/dist/landing/videoback/eval.js
IP
ASN #199524 G-Core Labs S.A.
Hash ab56a375dc50a8ab25c09dd2116ebcd0
19ee177c451c354bedf9d355a34476134464d0be
a6b484f867056eb70f872f3e159a26591e2c653581553f9667946642f1c0759a
GET /1648123636/dist/landing/videoback/eval.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:44 GMT
content-type: application/javascript
content-length: 177
last-modified: Wed, 10 Aug 2022 11:51:32 GMT
etag: "62f39bc4-b1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:54:28+00:00
x-id: sto5-up-gc10
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bd2897c82c183ba2556c82e075eb7002
b15517523e6cdba6631a11cb20e398c61e2868d4
c440cfcf0b0313f9fa8bf82b160c849a85a6268d90b76b35524a6645f416015c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4378
Cache-Control: max-age=87693
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Etag: "638482b7-1d7"
Expires: Wed, 30 Nov 2022 10:56:17 GMT
Last-Modified: Mon, 28 Nov 2022 09:43:19 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
tenor.wargaming.net/assets/device/static/collect.js
200 OK 5.4 kB URL HTTP/1.1 tenor.wargaming.net/assets/device/static/collect.js
IP
ASN #199524 G-Core Labs S.A.
File type HTML document, ASCII text, with very long lines (7249)
Hash 026f62fad760986ddac0bb642b46db1d
934e6b4936e4c044e0e68ebe8243a3c38a2763ca
76c6cf4c397fcca4cf8000908a09bae78997b814b1a3b345279bc8e178aa2900
GET /assets/device/static/collect.js HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 29 Nov 2022 10:34:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Last-Modified: Wed, 09 Nov 2022 09:49:54 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"636b77c2-3ac2"
Content-Encoding: gzip
cdn.izooto.com/scripts/sak/iz_setcid.html?v=1
200 OK 1.6 kB URL HTTP/2 cdn.izooto.com/scripts/sak/iz_setcid.html?v=1
IP
File type HTML document text\012- HTML document, ASCII text
Hash f106f31026f13029c5d5e4f06f1cf165
a40c7ba01dac4540227e870bbd74bfdae1fdaab5
499e5cc8328cb5d97147eed46949dc5b287a4f0f3be638887a850109e4a4997d
GET /scripts/sak/iz_setcid.html?v=1 HTTP/1.1
Host: cdn.izooto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:37 GMT
content-type: text/html
last-modified: Tue, 05 Apr 2022 12:00:20 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
cache-control: public, max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 2325099
expires: Fri, 30 Dec 2022 10:34:37 GMT
server: cloudflare
cf-ray: 771ab1230fe9b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 08:41:08 GMT
expires: Tue, 29 Nov 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 6816
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 65eFKOK1HFfUNBXEBgoG7n1JGQjURNM6DUQeCVNFwCxXXWHx85qpXrG5wDjjOnjIfPANWST/bE2aD9YI5IOKJQ==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Tue, 29 Nov 2022 10:34:44 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11421
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=1BAE69E3F230670721F87B88F367660C; domain=.bing.com; expires=Sun, 24-Dec-2023 10:34:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D318550A170F459B9F497EAD56288AD3 Ref B: OSL30EDGE0413 Ref C: 2022-11-29T10:34:44Z
date: Tue, 29 Nov 2022 10:34:43 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1669718083148&cv=11&fst=1669718083148&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&auid=977046826.1669718083&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1669718083148&cv=11&fst=1669718083148&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&auid=977046826.1669718083&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (3013), with no line terminators
Hash afe46881c9603f9206783ea343526aa2
c68ffd588aafcd0e15d442e73c9fb75a043818c4
161f2a78ecf45df3cf86f745082069fd2b92e7bfd13fa9d82fccd794b9dbb686
GET /pagead/viewthroughconversion/1006839708/?random=1669718083148&cv=11&fst=1669718083148&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&auid=977046826.1669718083&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1265
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 29-Nov-2022 10:49:44 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash af25abbc1f9776cf78b07837dbea38a0
1883049bac2e92f8b3107f6435f00b83d8f4c117
663a6d77de7e3c835bcbb4b567eb28053755bf50ddab14b3f668367a85efdf17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6177
Cache-Control: max-age=95240
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Etag: "6384992b-1d7"
Expires: Wed, 30 Nov 2022 13:02:04 GMT
Last-Modified: Mon, 28 Nov 2022 11:19:07 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-77NSW0BT3P&cid=1251484476.1669718083>m=2oeb90&aip=1&z=1064000304
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-77NSW0BT3P&cid=1251484476.1669718083>m=2oeb90&aip=1&z=1064000304
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-77NSW0BT3P&cid=1251484476.1669718083>m=2oeb90&aip=1&z=1064000304 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1006839708/?random=1669718083148&cv=11&fst=1669716000000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=3844141801&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1006839708/?random=1669718083148&cv=11&fst=1669716000000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=3844141801&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1006839708/?random=1669718083148&cv=11&fst=1669716000000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=3844141801&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30462b52571c91f089bed4de98462a46
7e2b322ea5b8f97b2fa76751bcffe2a420f872eb
c5403dfefa9d043ac501963ff09a6d3d70e21f6e6a1b9728183a3490060a4bfc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 7a3051a98d79c95ee4ddef5891b01c75
a7dc36d1f59e6ef71d0fdc214aabc470e7fcbcf3
999acaf16e70f61fcf5c62e25a055548921a06a5531f31b7b8aec10dea442768
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 496
Cache-Control: max-age=120122
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Etag: "6385108e-1d7"
Expires: Wed, 30 Nov 2022 19:56:46 GMT
Last-Modified: Mon, 28 Nov 2022 19:48:30 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
s.yimg.com/wi/ytc.js
200 OK 5.9 kB IP
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: P0PahSJneQ3TBiZRVIzL0oNfK7zDHCRDyuhybpks5nwykmjhRVq5QWQa/j+NqzF8aNp5EakAnYs=
x-amz-request-id: SKYHENSXFKAPC1MG
date: Tue, 29 Nov 2022 10:33:44 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 61
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.redditstatic.com/ads/pixel.js
200 OK 7.7 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP
File type ASCII text, with very long lines (25224)
Hash 3528fd00b652f61a266eb584d96f4fcc
d89e16aa1323c6c4f1ed3941122020684a599361
77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 29 Nov 2022 10:34:44 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30462b52571c91f089bed4de98462a46
7e2b322ea5b8f97b2fa76751bcffe2a420f872eb
c5403dfefa9d043ac501963ff09a6d3d70e21f6e6a1b9728183a3490060a4bfc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tenor.wargaming.net/cf
200 OK 0 B IP
ASN #199524 G-Core Labs S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /cf HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://join.worldoftanks.eu/
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 29 Nov 2022 10:34:44 GMT
Content-Type: application/octet-stream
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=200
Access-Control-Allow-Origin: https://join.worldoftanks.eu
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: CONTENT-TYPE
tenor.wargaming.net/cf
204 No Content 0 B IP
ASN #199524 G-Core Labs S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cf HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Content-Type: application/json
Origin: https://join.worldoftanks.eu
Content-Length: 311
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Tue, 29 Nov 2022 10:34:44 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 2
Connection: keep-alive
Keep-Alive: timeout=200
Access-Control-Expose-Headers: Server,Content-Length,Date
Access-Control-Allow-Origin: https://join.worldoftanks.eu
Access-Control-Allow-Credentials: true
bat.bing.com/action/0?ti=26043906&tm=gtm002&Ver=2&mid=58bd37ec-b1db-433b-9f94-cbe4c61850d3&sid=6ffb9af06fd111edbedd53d9b0e7ee4d&vid=6ffbaf406fd111edbb292f33de1ce387&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&p=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&r=<=1500&evt=pageLoad&sv=1&rn=31183
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=26043906&tm=gtm002&Ver=2&mid=58bd37ec-b1db-433b-9f94-cbe4c61850d3&sid=6ffb9af06fd111edbedd53d9b0e7ee4d&vid=6ffbaf406fd111edbb292f33de1ce387&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&p=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&r=<=1500&evt=pageLoad&sv=1&rn=31183
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=26043906&tm=gtm002&Ver=2&mid=58bd37ec-b1db-433b-9f94-cbe4c61850d3&sid=6ffb9af06fd111edbedd53d9b0e7ee4d&vid=6ffbaf406fd111edbb292f33de1ce387&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&p=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&r=<=1500&evt=pageLoad&sv=1&rn=31183 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3B1761A970716E722EA673C271266FCB; domain=.bing.com; expires=Sun, 24-Dec-2023 10:34:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3CC992A5AF87407D8C37445727E05916 Ref B: OSL30EDGE0413 Ref C: 2022-11-29T10:34:44Z
date: Tue, 29 Nov 2022 10:34:43 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0fe20d41a043db700a84924cd9793f3
c0da481fef6cd00558f6e68b074acb34bef8292f
03caeb65ab9e22f6d6fe0d344d327950d20ee9ed144e2da0e5e062943a03fc56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/p/action/26043906.js
200 OK 1.4 kB URL HTTP/2 bat.bing.com/p/action/26043906.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 5ccab94753771a3d9f34c937a0edda89
0e4f16622e090eaa09fc6c910fbe979ca4fb0a65
2f60750d4aadf9925d7d1a28a1c94ffb13c7e6a851af89805440b7d57a5832aa
GET /p/action/26043906.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1423
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=37B8335BCE8A6D4318402130CFDD6CC1; domain=.bing.com; expires=Sun, 24-Dec-2023 10:34:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4B636760933D4265898C115C466F095A Ref B: OSL30EDGE0413 Ref C: 2022-11-29T10:34:44Z
date: Tue, 29 Nov 2022 10:34:43 GMT
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10180089.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10180089.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c6ded5892a90c67512603a071c819e4e
b0db884308ecef9f44d5c38bacf96702096d5830
c63fe9a284f1b9cfd799a123c1a92a566f22bd5cd0be03d5af3a3fbf0936e226
GET /wi/config/10180089.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: WVKcOHLHyTavpMmtOps7EJVPyZravNrZ30zTzVTFBSWGCs8oZ20/BYWdQLZCxBsvm1CYsfS4llk=
x-amz-request-id: D4H7AAZTC00JMN48
date: Tue, 29 Nov 2022 06:35:10 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 16 Mar 2022 15:56:22 GMT
x-amz-expiration: expiry-date="Fri, 21 Apr 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "c6ded5892a90c67512603a071c819e4e"
x-amz-server-side-encryption: AES256
x-amz-version-id: hucc9FIkp5UShj6EZB33GhrqRv4Mo1tn
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 14376
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abd55ecd24d357a9f02612558f723a90
6a1e6963864f0b53ddc6205d35225e6cf0bcbeec
195fa531e0462be58d5c62ebbe6060e147c94bdb1d38ff46c341c74e0ab2671a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/1006839708/?random=1669718083148&cv=11&fst=1669716000000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=3844141801&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/1006839708/?random=1669718083148&cv=11&fst=1669716000000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=3844141801&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1006839708/?random=1669718083148&cv=11&fst=1669716000000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=3844141801&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4334032aadde00885f1ac8dc1b42475e
2eec08a9fa9ff03fae3d30078584d3540e70555a
969cbab753fcbc0692fc274ccdc93c5ea8be9797eac783fcdcc4d8976530c8b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 281
Cache-Control: max-age=113810
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 10:34:44 GMT
Etag: "6384f8bd-1d7"
Expires: Wed, 30 Nov 2022 18:11:34 GMT
Last-Modified: Mon, 28 Nov 2022 18:06:53 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
a1.adform.net/Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=122805616288&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1&Set1=en-US%7Cen-US%7C1280x1024%7C24
200 OK 196 B URL HTTP/2 a1.adform.net/Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=122805616288&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
File type ASCII text, with CRLF line terminators
Hash 0ede06ce62bcf9e842e1b0f3313e6f83
a1a6675d17c5e308cbf033eb3d53fd8d12272be4
b453c48d135033a9f54030c39d0241419c85531378e79ef47a5991ab5d418a97
GET /Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=122805616288&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: a1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:44 GMT
content-type: text/javascript; charset=utf-8
content-length: 196
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1648123636/no/;u3=WOT%20WW%20LMS%20Videoback%20Dark%20Neutral%20TP%20542839;u4=affiliate;u5=kcb56ojr;u6=1669718082921087158;u7=undefined;match_id=1669718082921087158;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1648235991;~oref=https://join.worldoftanks.eu/
302 Found 0 B URL HTTP/2 adservice.google.com/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1648123636/no/;u3=WOT%20WW%20LMS%20Videoback%20Dark%20Neutral%20TP%20542839;u4=affiliate;u5=kcb56ojr;u6=1669718082921087158;u7=undefined;match_id=1669718082921087158;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1648235991;~oref=https://join.worldoftanks.eu/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1648123636/no/;u3=WOT%20WW%20LMS%20Videoback%20Dark%20Neutral%20TP%20542839;u4=affiliate;u5=kcb56ojr;u6=1669718082921087158;u7=undefined;match_id=1669718082921087158;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1648235991;~oref=https://join.worldoftanks.eu/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.no/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1648123636/no/;u3=WOT%20WW%20LMS%20Videoback%20Dark%20Neutral%20TP%20542839;u4=affiliate;u5=kcb56ojr;u6=1669718082921087158;u7=undefined;match_id=1669718082921087158;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1648235991;~oref=https://join.worldoftanks.eu/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-8&cid=1251484476.1669718083&jid=1456575828&gjid=1026226294&_gid=1305722723.1669718084&_u=YChACEAABAAAACAEO~&z=336072648
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-8&cid=1251484476.1669718083&jid=1456575828&gjid=1026226294&_gid=1305722723.1669718084&_u=YChACEAABAAAACAEO~&z=336072648
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-8&cid=1251484476.1669718083&jid=1456575828&gjid=1026226294&_gid=1305722723.1669718084&_u=YChACEAABAAAACAEO~&z=336072648 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://join.worldoftanks.eu
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-40205758-4&cid=1251484476.1669718083&jid=1652250421&gjid=166969234&_gid=1436438398.1669718084&_u=YChACEABBAAAACAFO~&z=62296545
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-40205758-4&cid=1251484476.1669718083&jid=1652250421&gjid=166969234&_gid=1436438398.1669718084&_u=YChACEABBAAAACAFO~&z=62296545
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-40205758-4&cid=1251484476.1669718083&jid=1652250421&gjid=166969234&_gid=1436438398.1669718084&_u=YChACEABBAAAACAFO~&z=62296545 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://join.worldoftanks.eu
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-6&cid=1251484476.1669718083&jid=516133354&gjid=808238519&_gid=1903996249.1669718084&_u=YChACEABBAAAACAEO~&z=998967391
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-6&cid=1251484476.1669718083&jid=516133354&gjid=808238519&_gid=1903996249.1669718084&_u=YChACEABBAAAACAEO~&z=998967391
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-6&cid=1251484476.1669718083&jid=516133354&gjid=808238519&_gid=1903996249.1669718084&_u=YChACEABBAAAACAEO~&z=998967391 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://join.worldoftanks.eu
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-77NSW0BT3P&cid=1251484476.1669718083>m=2oeb90&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-77NSW0BT3P&cid=1251484476.1669718083>m=2oeb90&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-77NSW0BT3P&cid=1251484476.1669718083>m=2oeb90&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://join.worldoftanks.eu
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=722630277830558&ev=PageView&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&rl=&if=false&ts=1669718083936&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1669718083935.141578651&it=1669718083566&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=722630277830558&ev=PageView&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&rl=&if=false&ts=1669718083936&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1669718083935.141578651&it=1669718083566&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=722630277830558&ev=PageView&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&rl=&if=false&ts=1669718083936&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1669718083935.141578651&it=1669718083566&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 29 Nov 2022 10:34:44 GMT
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-77NSW0BT3P>m=2oeb90&_p=581834755&_gaz=1&gcs=G1--&cid=1251484476.1669718083&ul=en-us&sr=1280x1024&_s=1&sid=1669718083&sct=1&seg=0&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&dt=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&en=page_view&_fv=1&_nsi=1&_ss=1&ep.prod_name=wot&ep.prod_realm=eu&ep.prod_lang=no&ep.prod_type=lp&ep.prod_lptype=videoback%2FACQ%2Freg-wg
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-77NSW0BT3P>m=2oeb90&_p=581834755&_gaz=1&gcs=G1--&cid=1251484476.1669718083&ul=en-us&sr=1280x1024&_s=1&sid=1669718083&sct=1&seg=0&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&dt=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&en=page_view&_fv=1&_nsi=1&_ss=1&ep.prod_name=wot&ep.prod_realm=eu&ep.prod_lang=no&ep.prod_type=lp&ep.prod_lptype=videoback%2FACQ%2Freg-wg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-77NSW0BT3P>m=2oeb90&_p=581834755&_gaz=1&gcs=G1--&cid=1251484476.1669718083&ul=en-us&sr=1280x1024&_s=1&sid=1669718083&sct=1&seg=0&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&dt=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&en=page_view&_fv=1&_nsi=1&_ss=1&ep.prod_name=wot&ep.prod_realm=eu&ep.prod_lang=no&ep.prod_type=lp&ep.prod_lptype=videoback%2FACQ%2Freg-wg HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://join.worldoftanks.eu
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-UH9pPWqqbvvtC.js
200 OK 222 B URL HTTP/2 rules.quantcount.com/rules-p-UH9pPWqqbvvtC.js
IP
Hash 1fc3544f525a98ae3bb01abe95ecbd2b
9a9379f992c3660aec966f7fccb478ec0796b0af
fe56ee11ce8e8046f4e968b897e8a013642cb70381a7e8b7ca51d21f2d19ec42
GET /rules-p-UH9pPWqqbvvtC.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 222
last-modified: Thu, 13 Oct 2022 14:48:45 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Tue, 29 Nov 2022 10:28:13 GMT
cache-control: max-age=3600
etag: "1fc3544f525a98ae3bb01abe95ecbd2b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sSt1IrfOuYS6B2COsco71uRbm1xb8CSG8_tU9XngnYw3orCN-U85RQ==
age: 527
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1648123636/no/;u3=WOT%20WW%20LMS%20Videoback%20Dark%20Neutral%20TP%20542839;u4=affiliate;u5=kcb56ojr;u6=1669718082921087158;u7=undefined;match_id=1669718082921087158;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1648235991;~oref=https://join.worldoftanks.eu/
200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1648123636/no/;u3=WOT%20WW%20LMS%20Videoback%20Dark%20Neutral%20TP%20542839;u4=affiliate;u5=kcb56ojr;u6=1669718082921087158;u7=undefined;match_id=1669718082921087158;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1648235991;~oref=https://join.worldoftanks.eu/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1648123636/no/;u3=WOT%20WW%20LMS%20Videoback%20Dark%20Neutral%20TP%20542839;u4=affiliate;u5=kcb56ojr;u6=1669718082921087158;u7=undefined;match_id=1669718082921087158;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1648235991;~oref=https://join.worldoftanks.eu/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&enc=UTF-8&yv=1.13.0&et=custom&ec=LP%20Interaction&ea=Page%20View&el=Landing%20Page&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&enc=UTF-8&yv=1.13.0&et=custom&ec=LP%20Interaction&ea=Page%20View&el=Landing%20Page&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&enc=UTF-8&yv=1.13.0&et=custom&ec=LP%20Interaction&ea=Page%20View&el=Landing%20Page&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:44 GMT
expires: Tue, 29 Nov 2022 10:34:44 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBETghWMCEP_B44gygYvQ5bHEGjkzDJsFEgEBAQExh2OPYwAAAAAA_eMAAA&S=AQAAAue6xs9wK0Joj-3QlBIGK-I; Expires=Wed, 29 Nov 2023 16:34:44 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
pixel.quantserve.com/pixel;r=46290674;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-UH9pPWqqbvvtC;url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287;uht=2;fpan=1;fpa=P0-80297503-1669718084022;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=worldoftanks.eu;dst=0;et=1669718084111;tzo=0;ogl=;ses=9aa0f810-4475-4eb1-84bf-b8be8374d5f1
200 OK 35 B URL HTTP/2 pixel.quantserve.com/pixel;r=46290674;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-UH9pPWqqbvvtC;url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287;uht=2;fpan=1;fpa=P0-80297503-1669718084022;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=worldoftanks.eu;dst=0;et=1669718084111;tzo=0;ogl=;ses=9aa0f810-4475-4eb1-84bf-b8be8374d5f1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel;r=46290674;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-UH9pPWqqbvvtC;url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287;uht=2;fpan=1;fpa=P0-80297503-1669718084022;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=worldoftanks.eu;dst=0;et=1669718084111;tzo=0;ogl=;ses=9aa0f810-4475-4eb1-84bf-b8be8374d5f1 HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:45 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=6385e045-03fa5-a690a-a6e07; expires=Sat, 30-Dec-2023 10:34:45 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2029%20Nov%202022%2010%3A34%3A43%20GMT&n=0&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2029%20Nov%202022%2010%3A34%3A43%20GMT&n=0&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Tue%2C%2029%20Nov%202022%2010%3A34%3A43%20GMT&n=0&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1%3DE0HHEGBJ6R%26xid_param_2%3D%26sid%3DSID0AGm0xqXBXiGhQ05JA7NUPuyGoEDaSgHTxH6lR-3_WgkEd6ndu9iVv9Uwaw3vu8huz-t7j08T_YLdeg-ztgLtdZ95x7yfEe-bF__esK7ZMPpS7WEOs8e8wQ3TqJl1xntiNlDiqyEhpg3Cw%26enctid%3Dcoopntxru3qy%26lpsn%3DWOT%2520WW%2520LMS%2520Videoback%2520Dark%2520Neutral%2520TP%2520542839%26foris%3D1%26teclient%3D1669718082921087158%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dkcb56ojr%26utm_content%3D1287&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:45 GMT
expires: Tue, 29 Nov 2022 10:34:45 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBEXghWMCENVEAA9kaiGjJX4cqtVdM_UFEgEBAQExh2OPYwAAAAAA_eMAAA&S=AQAAAlSlaBwmGTv4mtTzSA5peUk; Expires=Wed, 29 Nov 2023 16:34:45 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1669718083671&id=t2_a043ik42&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=124a718f-90de-48fc-9700-6a67bd929cda&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1669718083671&id=t2_a043ik42&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=124a718f-90de-48fc-9700-6a67bd929cda&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1669718083671&id=t2_a043ik42&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=124a718f-90de-48fc-9700-6a67bd929cda&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Tue, 29 Nov 2022 10:34:45 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=582725B34DA349FB926DD0340F2D0D64&RedC=c.clarity.ms&MXFR=39FA80373A8C6B9D226F925C3E8C656A
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=39FA80373A8C6B9D226F925C3E8C656A; domain=.clarity.ms; expires=Sun, 24-Dec-2023 10:34:45 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Tue, 29 Nov 2022 10:34:44 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=582725B34DA349FB926DD0340F2D0D64&RedC=c.clarity.ms&MXFR=39FA80373A8C6B9D226F925C3E8C656A
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=582725B34DA349FB926DD0340F2D0D64&RedC=c.clarity.ms&MXFR=39FA80373A8C6B9D226F925C3E8C656A
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=582725B34DA349FB926DD0340F2D0D64&RedC=c.clarity.ms&MXFR=39FA80373A8C6B9D226F925C3E8C656A HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=582725B34DA349FB926DD0340F2D0D64&MUID=3667B386B4816E243F76A1EDB5D66FA9
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=3667B386B4816E243F76A1EDB5D66FA9; domain=c.bing.com; expires=Sun, 24-Dec-2023 10:34:45 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A8426174FA3F47F9AFE90272255E9DC6 Ref B: OSL30EDGE0413 Ref C: 2022-11-29T10:34:45Z
date: Tue, 29 Nov 2022 10:34:44 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=582725B34DA349FB926DD0340F2D0D64&MUID=3667B386B4816E243F76A1EDB5D66FA9
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=582725B34DA349FB926DD0340F2D0D64&MUID=3667B386B4816E243F76A1EDB5D66FA9
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=582725B34DA349FB926DD0340F2D0D64&MUID=3667B386B4816E243F76A1EDB5D66FA9 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Tue, 29-Nov-2022 10:44:45 GMT; path=/; SameSite=None; Secure;
date: Tue, 29 Nov 2022 10:34:44 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1851
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://join.worldoftanks.eu
access-control-allow-credentials: true
date: Tue, 29 Nov 2022 10:34:45 GMT
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.43/clarity.js
200 OK 0 B URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d9026a431ead4c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: TCP_HIT
x-azure-ref-originshield: 0mhKFYwAAAABFQKccBdQZQLeRHjsDyBmIQU1TMDRFREdFMTkyMAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
x-azure-ref: 0ROCFYwAAAABiJdVkXEZkT69PZT1+ypHTT1NMMjMxMDUwMjA1MDE5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Tue, 29 Nov 2022 10:34:44 GMT
X-Firefox-Spdy: h2
cdn.izooto.com/scripts/1e2d52954d30088a42d04da4a0b732d2bfe17e0c.js
200 OK 0 B URL HTTP/2 cdn.izooto.com/scripts/1e2d52954d30088a42d04da4a0b732d2bfe17e0c.js
IP
GET /scripts/1e2d52954d30088a42d04da4a0b732d2bfe17e0c.js HTTP/1.1
Host: cdn.izooto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:37 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=2678400
cf-bgj: minify
etag: W/"6299a8f3-b43"
last-modified: Fri, 03 Jun 2022 06:23:47 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 2323596
expires: Fri, 30 Dec 2022 10:34:37 GMT
server: cloudflare
cf-ray: 771ab1203c28b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/youtube-channel/assets/lib/magnific-popup/magnific-popup.min.css?ver=3.0.12.1
200 OK 0 B URL HTTP/2 static.theprint.in/wp-content/plugins/youtube-channel/assets/lib/magnific-popup/magnific-popup.min.css?ver=3.0.12.1
IP
GET /wp-content/plugins/youtube-channel/assets/lib/magnific-popup/magnific-popup.min.css?ver=3.0.12.1 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Tue, 07 May 2019 12:36:21 GMT
etag: W/"5cd17bc5-ad6"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OyA9R14hpvFJk1vC0llF3rIYzEW2gawWBLv2OGCuYZ6FkXu5sqA2sA==
age: 5414010
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=bcb4f14ba9142ca1fd172c7d9de6043b
200 OK 0 B URL HTTP/2 static.theprint.in/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=bcb4f14ba9142ca1fd172c7d9de6043b
IP
GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=bcb4f14ba9142ca1fd172c7d9de6043b HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Thu, 12 May 2022 00:30:24 GMT
etag: W/"627c5520-27af5"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2tk4JFoG2cmFWMm5mcAQJzXd4qySYG4nDwPD-QBBI4vOfa0vzZv9Hw==
age: 5414010
X-Firefox-Spdy: h2
b2cdn.automatad.com/js/prebid_TRfI00.js
200 OK 0 B URL HTTP/2 b2cdn.automatad.com/js/prebid_TRfI00.js
IP
ASN #34989 ServeTheWorld AS
GET /js/prebid_TRfI00.js HTTP/1.1
Host: b2cdn.automatad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:37 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 87832
cdn-uid: 02ba462e-865f-4abf-a9cd-22f9021b3a43
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=120
content-encoding: br
last-modified: Mon, 21 Nov 2022 11:25:20 GMT
cdn-cachedat: 11/21/2022 11:32:47
x-timestamp: 1669029919.39544
x-object-meta-mtime: 1669029883.244736443
x-trans-id: txb13f9078fd3a40cf9be9f-00637b60a0
x-openstack-request-id: txb13f9078fd3a40cf9be9f-00637b60a0
x-iplb-request-id: B95D01F4:D72B_8E2CE366:01BB_637B60A0_22AC6A8E:0D6D
x-iplb-instance: 28796
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 93e5e91d5cbf4b3c42d39d30ce6695ac
cdn-cache: HIT
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700%2C400italic%2C500%2C500italic%2C600italic%2C700italic%7CRoboto%3A400%2C500%2C700%2C400italic%2C500italic%2C600%2C600italic%2C700italic&display=swap&ver=11.4.3
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700%2C400italic%2C500%2C500italic%2C600italic%2C700italic%7CRoboto%3A400%2C500%2C700%2C400italic%2C500italic%2C600%2C600italic%2C700italic&display=swap&ver=11.4.3
IP
GET /css?family=Open+Sans%3A400%2C600%2C700%2C400italic%2C500%2C500italic%2C600italic%2C700italic%7CRoboto%3A400%2C500%2C700%2C400italic%2C500italic%2C600%2C600italic%2C700italic&display=swap&ver=11.4.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 10:34:37 GMT
date: Tue, 29 Nov 2022 10:34:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
b2cdn.automatad.com/json/currency.json
200 OK 0 B URL HTTP/2 b2cdn.automatad.com/json/currency.json
IP
ASN #34989 ServeTheWorld AS
GET /json/currency.json HTTP/1.1
Host: b2cdn.automatad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:37 GMT
content-type: application/json
vary: Accept-Encoding
server: BunnyCDN-NO1-830
cdn-pullzone: 87832
cdn-uid: 02ba462e-865f-4abf-a9cd-22f9021b3a43
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=10800
last-modified: Mon, 28 Nov 2022 15:45:46 GMT
cdn-cachedat: 11/29/2022 04:03:50
x-timestamp: 1669650345.41412
x-object-meta-mtime: 1669650301.992403636
x-trans-id: tx1ff36e760cbb433b9a9f6-006384d7e8
x-openstack-request-id: tx1ff36e760cbb433b9a9f6-006384d7e8
x-iplb-request-id: B95D01F6:ADD7_8E2CE366:01BB_6384D7DE_2408A32B:D78C
x-iplb-instance: 28795
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 930dc741d30b12e1bab50cb81512e9e6
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 18 Nov 2022 03:05:15 GMT
x-amz-version-id: vkCJAv2LVCiDvkjoOZrS5s9fefeFFUOq
server: AmazonS3
content-encoding: gzip
date: Tue, 29 Nov 2022 03:15:36 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1BexSL90zyZYBKQFzA7qjxoK3tMvPt3PodhrH-JfqtrDfkfF3brUhw==
age: 26344
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Sans+KR:400,700|Roboto+Condensed:400,700&display=swap&subset=cyrillic,greek,vietnamese
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Noto+Sans+KR:400,700|Roboto+Condensed:400,700&display=swap&subset=cyrillic,greek,vietnamese
IP
GET /css?family=Noto+Sans+KR:400,700|Roboto+Condensed:400,700&display=swap&subset=cyrillic,greek,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 10:34:43 GMT
date: Tue, 29 Nov 2022 10:34:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s2.adform.net/banners/scripts/st/trackpoint-async.js
200 OK 0 B URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:44 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 05 Oct 2022 12:23:24 GMT
x-rgw-object-type: Normal
etag: W/"4cb8e818a3c8dda5fd80d6d9a55d958d"
x-amz-request-id: tx000007138bbebc291d299-0063765d64-329373d4-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/youtube-channel/assets/css/youtube-channel.css?ver=3.0.12.1
200 OK 0 B URL HTTP/2 static.theprint.in/wp-content/plugins/youtube-channel/assets/css/youtube-channel.css?ver=3.0.12.1
IP
GET /wp-content/plugins/youtube-channel/assets/css/youtube-channel.css?ver=3.0.12.1 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Wed, 17 Mar 2021 00:32:04 GMT
etag: W/"60514e04-91a"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mxo1pna6ZMGtmimH7S_0KcMaxD8sBpfQOi2XXvY9WtElEEpXbTNpRg==
age: 5414010
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=121f904f8d8fc180b4467ea06478f5a9
200 OK 0 B URL HTTP/2 static.theprint.in/wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=121f904f8d8fc180b4467ea06478f5a9
IP
GET /wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=121f904f8d8fc180b4467ea06478f5a9 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Wed, 12 May 2021 00:30:36 GMT
etag: W/"609b21ac-b2ccc"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YI-y9PMIhsEEydNuoNMyQTI0g2r88kcdKI97TrUHWKZ1B0ps5chwJg==
age: 5414010
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/armembermulticurrency/css/arm_multi_currency_admin_css.css?ver=1.0
200 OK 0 B URL HTTP/2 static.theprint.in/wp-content/plugins/armembermulticurrency/css/arm_multi_currency_admin_css.css?ver=1.0
IP
GET /wp-content/plugins/armembermulticurrency/css/arm_multi_currency_admin_css.css?ver=1.0 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Wed, 06 Apr 2022 00:34:49 GMT
etag: W/"624ce029-1fd"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1iZ8ntq1Qb5DErEWNqquh40GgEskSSlz6c-Ks5ZnVJrunnIHw-9qIA==
age: 5414010
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/wpsolr-search-engine/wpsolr/core/css/style.css?ver=20.1
200 OK 0 B URL HTTP/2 static.theprint.in/wp-content/plugins/wpsolr-search-engine/wpsolr/core/css/style.css?ver=20.1
IP
GET /wp-content/plugins/wpsolr-search-engine/wpsolr/core/css/style.css?ver=20.1 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
date: Fri, 07 Oct 2022 23:03:01 GMT
last-modified: Tue, 07 May 2019 12:36:20 GMT
etag: W/"5cd17bc4-1072"
expires: Mon, 02 Oct 2023 23:03:01 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 17AZdKm_41yK_KrVXdrHTGPB1oX3oxWrrZQ8S8ZV4QORNwCmc5cazw==
age: 4534296
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=5.8.3
200 OK 0 B URL HTTP/2 static.theprint.in/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=5.8.3
IP
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=5.8.3 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 27 Sep 2022 18:42:04 GMT
last-modified: Wed, 10 Mar 2021 00:30:27 GMT
etag: W/"60481323-4a9"
expires: Fri, 22 Sep 2023 18:42:04 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZewoN1Y8FiEdGrrucAPNbPLsldYIri5QW9jgWNgmTYYPE3gV2e2Pyw==
age: 5413953
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.16
200 OK 0 B URL HTTP/2 static.theprint.in/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.16
IP
GET /wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.16 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 26 Oct 2022 19:01:53 GMT
last-modified: Wed, 16 Dec 2020 00:30:26 GMT
etag: W/"5fd95522-1940"
expires: Sat, 21 Oct 2023 19:01:53 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vApTZdMqq-ct6kPaB2HoAADm2f3ioGmjDZYexQrf_ISrmOG807bsjQ==
age: 2907164
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/26043906
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/uet/26043906
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/uet/26043906 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=9c5fa0050bf04518a0bb24b55478e5ef.20221129.20231129; expires=Wed, 29 Nov 2023 10:34:44 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:bdfb7149-d2ee-45f0-9a22-f0b1c5035608
x-cache: CONFIG_NOCACHE
x-azure-ref: 0ROCFYwAAAAA5t5miqsg0QYyBNx8W7FEJT1NMMjMxMDUwMjA1MDE5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Tue, 29 Nov 2022 10:34:44 GMT
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1648123636/dist/landing/videoback/app.61caf056.js
200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1648123636/dist/landing/videoback/app.61caf056.js
IP
ASN #199524 G-Core Labs S.A.
GET /1648123636/dist/landing/videoback/app.61caf056.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: application/javascript
last-modified: Wed, 10 Aug 2022 11:51:32 GMT
vary: Accept-Encoding
etag: W/"62f39bc4-146d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-24T12:41:21+00:00
x-id: sto5-up-gc10
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1648123636/dist/landing/videoback/app.16d91996.css
200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1648123636/dist/landing/videoback/app.16d91996.css
IP
ASN #199524 G-Core Labs S.A.
GET /1648123636/dist/landing/videoback/app.16d91996.css HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: text/css
last-modified: Wed, 10 Aug 2022 11:51:32 GMT
vary: Accept-Encoding
etag: W/"62f39bc4-15d46"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-24T12:41:21+00:00
x-id: sto5-up-gc10
X-Firefox-Spdy: h2
b2cdn.automatad.com/geo/amp_user_sync/load-cookies.html
200 OK 0 B URL HTTP/2 b2cdn.automatad.com/geo/amp_user_sync/load-cookies.html
IP
ASN #34989 ServeTheWorld AS
GET /geo/amp_user_sync/load-cookies.html HTTP/1.1
Host: b2cdn.automatad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:38 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
server: BunnyCDN-NO1-830
cdn-pullzone: 87832
cdn-uid: 02ba462e-865f-4abf-a9cd-22f9021b3a43
cdn-requestcountrycode: NO
cache-control: public, max-age=43200
last-modified: Wed, 03 Aug 2022 08:28:20 GMT
cdn-cachedat: 11/28/2022 12:07:58
x-timestamp: 1659515299.75866
x-object-meta-mtime: 1659515253.288520914
x-trans-id: tx96f1a7440a67403d9af7a-006375aab0
x-openstack-request-id: tx96f1a7440a67403d9af7a-006375aab0
x-iplb-request-id: B95D01F9:3E45_8E2CE366:01BB_6375AAAA_225F7A50:0D68
x-iplb-instance: 28796
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: d75f845c0e8fda6403d89ab93fb8b025
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
theprint.in/category/india/
200 OK 0 B URL HTTP/2 theprint.in/category/india/
IP
GET /category/india/ HTTP/1.1
Host: theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Tue, 29 Nov 2022 05:19:04 GMT
link: <https://theprint.in/wp-json/>; rel="https://api.w.org/", <https://theprint.in/wp-json/wp/v2/categories/294329>; rel="alternate"; type="application/json"
last-modified: Tue, 29 Nov 2022 05:19:04 GMT
content-encoding: gzip
x-powered-by: luroConnect
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7cbc7be2814e4b470b205933b90a9fb0.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-C2
x-amz-cf-id: lRQQUkeqkY8nGfm_kMFMDOTiHEHhcqhocl5KuUkxkYCMryJURd_Urg==
age: 18933
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1648123636/dist/landing/videoback/sha3.js
200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1648123636/dist/landing/videoback/sha3.js
IP
ASN #199524 G-Core Labs S.A.
GET /1648123636/dist/landing/videoback/sha3.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:44 GMT
content-type: application/javascript
last-modified: Wed, 10 Aug 2022 11:51:32 GMT
vary: Accept-Encoding
etag: W/"62f39bc4-1704"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-24T12:41:21+00:00
x-id: sto5-up-gc10
X-Firefox-Spdy: h2
cdn2wotcom.gcdn.co/dfilonchik/KO/Wmcs-59929_6mb.webm
206 Partial Content 0 B URL HTTP/2 cdn2wotcom.gcdn.co/dfilonchik/KO/Wmcs-59929_6mb.webm
IP
ASN #199524 G-Core Labs S.A.
GET /dfilonchik/KO/Wmcs-59929_6mb.webm HTTP/1.1
Host: cdn2wotcom.gcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: video/webm
content-length: 6384595
last-modified: Tue, 16 Jun 2020 11:55:12 GMT
etag: "616bd3-5a8323745d988"
cache-control: max-age=290304000, public
expires: Tue, 11 Jul 2023 09:57:03 GMT
cache: HIT
x-cached-since: 2022-07-11T09:57:03+00:00
x-id: sto5-up-gc10
content-range: bytes 0-6384594/6384595
X-Firefox-Spdy: h2
www.clarity.ms/tag/anqaznu4zz?ref=gtm
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/anqaznu4zz?ref=gtm
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/anqaznu4zz?ref=gtm HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=aa72136731ab4ba5ba0828e5320c9729.20221129.20231129; expires=Wed, 29 Nov 2023 10:34:39 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111
x-cache: CONFIG_NOCACHE
x-azure-ref: 0P+CFYwAAAABA/J7qX+p5TITT9QTnuDrIT1NMMjMxMDUwMjAzMDI5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Tue, 29 Nov 2022 10:34:39 GMT
X-Firefox-Spdy: h2
a1.adform.net/Serving/TrackPoint/?pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=122805616288&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1&Set1=en-US%7Cen-US%7C1280x1024%7C24
302 Found 0 B URL HTTP/2 a1.adform.net/Serving/TrackPoint/?pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=122805616288&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP
GET /Serving/TrackPoint/?pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=122805616288&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: a1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 10:34:44 GMT
content-type: text/html; charset=utf-8
location: https://a1.adform.net/Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=122805616288&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1648123636%2Fno%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D6385e042761379000111fc7b%26xid_param1&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Thu, 29-Dec-2022 10:34:44 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/jquery.cookie.min.js
200 OK 0 B URL HTTP/2 static.theprint.in/wp-includes/js/jquery.cookie.min.js
IP
GET /wp-includes/js/jquery.cookie.min.js HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 27 Sep 2022 18:38:38 GMT
last-modified: Tue, 07 May 2019 12:36:21 GMT
etag: W/"5cd17bc5-514"
expires: Fri, 22 Sep 2023 18:38:38 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 79fpSjaRPmigj1hfCtu8kclDlxyEdDAFfKo47NFTh7Qnz5Wl3ZQF4Q==
age: 5414159
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/wpsolr-search-engine/wpsolr/core/css/bootstrap.min.css?ver=20.1
200 OK 0 B URL HTTP/2 static.theprint.in/wp-content/plugins/wpsolr-search-engine/wpsolr/core/css/bootstrap.min.css?ver=20.1
IP
GET /wp-content/plugins/wpsolr-search-engine/wpsolr/core/css/bootstrap.min.css?ver=20.1 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Tue, 07 May 2019 12:36:20 GMT
etag: W/"5cd17bc4-1169"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pvZsyaidnY95NjZY3MtoM0cNRx06vd5p5jvNLPqcW5aneqIFnFJVXw==
age: 5414010
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/wpsolr-search-engine/wpsolr/core/js/bootstrap-typeahead.js?ver=20.1
200 OK 0 B URL HTTP/2 static.theprint.in/wp-content/plugins/wpsolr-search-engine/wpsolr/core/js/bootstrap-typeahead.js?ver=20.1
IP
GET /wp-content/plugins/wpsolr-search-engine/wpsolr/core/js/bootstrap-typeahead.js?ver=20.1 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 27 Sep 2022 18:41:07 GMT
last-modified: Tue, 07 May 2019 12:36:20 GMT
etag: W/"5cd17bc4-415a"
expires: Fri, 22 Sep 2023 18:41:07 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f5tyaBZQ2v8UCVjtnTEQFpu5fBLIxJWpSr2L3JGoqAlVjkWUGn1R5w==
age: 5414010
X-Firefox-Spdy: h2
us-east-pbs.automatad.com/cookie_sync
200 OK 0 B URL HTTP/2 us-east-pbs.automatad.com/cookie_sync
IP
ASN #14061 DIGITALOCEAN-ASN
POST /cookie_sync HTTP/1.1
Host: us-east-pbs.automatad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 175
Origin: https://b2cdn.automatad.com
Connection: keep-alive
Referer: https://b2cdn.automatad.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:39 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://b2cdn.automatad.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
x-envoy-upstream-service-time: 1
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1648123636/dist/landing/videoback/vendors~app.97349e52.js
200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1648123636/dist/landing/videoback/vendors~app.97349e52.js
IP
ASN #199524 G-Core Labs S.A.
GET /1648123636/dist/landing/videoback/vendors~app.97349e52.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:43 GMT
content-type: application/javascript
last-modified: Wed, 10 Aug 2022 11:51:32 GMT
vary: Accept-Encoding
etag: W/"62f39bc4-2e3df"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-24T12:41:21+00:00
x-id: sto5-up-gc10
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1648123636/dist/landing/videoback/riddler.js
200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1648123636/dist/landing/videoback/riddler.js
IP
ASN #199524 G-Core Labs S.A.
GET /1648123636/dist/landing/videoback/riddler.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 10:34:44 GMT
content-type: application/javascript
last-modified: Wed, 10 Aug 2022 11:51:32 GMT
vary: Accept-Encoding
etag: W/"62f39bc4-4391"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-24T12:41:21+00:00
x-id: sto5-up-gc10
X-Firefox-Spdy: h2
bid.atmtd.com/request
200 OK 0 B IP
ASN #14061 DIGITALOCEAN-ASN
OPTIONS /request HTTP/1.1
Host: bid.atmtd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://theprint.in/
Origin: https://theprint.in
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:39 GMT
access-control-allow-origin: https://theprint.in
access-control-allow-methods: GET,HEAD,POST,OPTIONS
access-control-allow-headers: Content-Type, x-requested-with
access-control-max-age: 86400
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
static.theprint.in/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.13.1
200 OK 0 B URL HTTP/2 static.theprint.in/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.13.1
IP
GET /wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.13.1 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 08 Oct 2022 00:40:29 GMT
last-modified: Tue, 20 Apr 2021 00:30:30 GMT
etag: W/"607e20a6-600"
expires: Tue, 03 Oct 2023 00:40:29 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Bm6jCqKvZ3wdnOhg-NtWSQyUjreDDsAELutxAQoVpaxQg4nPG6cK_Q==
age: 4528448
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:44 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "nAbmxtqHqaYrwBiADJAeFg=="
expires: Tue, 06 Dec 2022 10:34:44 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=5.8.3
200 OK 0 B URL HTTP/2 static.theprint.in/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=5.8.3
IP
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=5.8.3 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 28 Sep 2022 01:10:58 GMT
last-modified: Wed, 10 Mar 2021 00:30:27 GMT
etag: W/"60481323-38a"
expires: Sat, 23 Sep 2023 01:10:58 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6dl4ApF3K_4BHloGfx8hFHomoYFF1HQ8v0jL7I3lCNGmMZKKgOtmzg==
age: 5390619
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/sizzle/2.3.3/sizzle.min.js
200 OK 0 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/sizzle/2.3.3/sizzle.min.js
IP
GET /ajax/libs/sizzle/2.3.3/sizzle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theprint.in
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 10:34:38 GMT
content-type: application/javascript; charset=utf-8
content-length: 6679
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fd4-4dc5"
last-modified: Mon, 04 May 2020 16:16:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 14299067
expires: Sun, 19 Nov 2023 10:34:38 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vXNW%2FFa1Nf6blCFlO73eZSJ3DzKd020caY6%2Bhii9x3HO1KqrjX2zx%2Fccb0j3jDM%2FIvmgjZ59wtuTDzXvEjqwSWMshrKtbVa7HSB02wrtzJMHQukAyrydrCDlNAnwyJJgXyusUrbG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 771ab1252b690b55-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/css/dist/block-library/style.min.css?ver=5.8.3
200 OK 0 B URL HTTP/2 static.theprint.in/wp-includes/css/dist/block-library/style.min.css?ver=5.8.3
IP
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.8.3 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
date: Fri, 04 Nov 2022 07:50:32 GMT
last-modified: Tue, 27 Jul 2021 00:30:38 GMT
etag: W/"60ff53ae-13abe"
expires: Mon, 30 Oct 2023 07:50:32 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vIMlte9uJHcUjAtUBR0sLB0ZlPfYZ-FgXCq15IZmwPKnQRASgOyGOg==
age: 2169845
X-Firefox-Spdy: h2
static.theprint.in/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
200 OK 0 B URL HTTP/2 static.theprint.in/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
IP
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1
Host: static.theprint.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://theprint.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Sun, 30 Oct 2022 04:11:29 GMT
last-modified: Wed, 16 Dec 2020 00:30:26 GMT
etag: W/"5fd95522-2bf8"
expires: Wed, 25 Oct 2023 04:11:29 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o4AH9f77sf6Wvn3XUTjRrGBkYzt_CFnXbFRoQP-fLJIsQQiAuF9wlA==
age: 2614988
X-Firefox-Spdy: h2
13.224.222.38
151.101.85.140
93.184.220.29
37.252.172.123
193.169.194.63
37.157.2.248
88.85.94.246
104.18.217.65
92.223.23.230
52.95.125.22
185.255.84.151
23.38.200.201
89.22.228.250